Part F — The Unification Suite (U‑Suite): Concept‑Sets, SenseCells & Contextual Role Assignment
Preface node
heading:part-f-the-unification-suite-u-suite-concept-sets-sensecells-contextual-role-assignment:71582
What this page is
This is generated FPF reference text from the specification preface or supporting sections. It helps interpret FPF; it is not FPF Reference product documentation.
Methodology
Use it to understand how the specification wants to be read, then return to a route, pattern, or work packet for active work. Cite generated IDs only when the wording changes the task decision.
Content
Contextual Lexicon Principles
One‑sentence summary. All meanings in FPF are local to a
U.BoundedContext(“Context of meaning”); terms are spoken with their Context, and any relation across Contexts exists only as an explicit Alignment Bridge with stated loss/fit.
Status. Architectural pattern.
Builds on: A.1.1 U.BoundedContext (formal frame); A.7 Strict Distinction (C‑6); A.8 Universal Core (C‑1); A.11 Ontological Parsimony (C‑5); A.4 Temporal Duality (C‑7); E.10.D1 D.CTX (lexical discipline for “Context”).
Coordinates with. F.1 (Context Map via Context Cards), F.2 (local term capture), F.3 (intra‑Context clustering), F.7 (Concept‑Set Table), F.9 (Alignment & Bridge), B.3 (Trust & Assurance; CL penalties).
Didactic note. In the Tech register, Context ≡
U.BoundedContext(per E.10.D1). We use “Context of meaning” as a metaphor only; Context remains the normative short form forU.BoundedContext. The word anchor is not used in FPF. The word plane is reserved to CHR:ReferencePlane only.
Terminology guard (normative, Part F). The row classifier is senseFamily: {Role | Status | Measurement | Type‑structure | Method | Execution}. Characteristic (MM‑CHR) names measurable aspects only (A.17–A.19) and MUST NOT be used for row typing in Part F. Avoid the generic word facet in Part F; when unavoidable, reference C.3.5 KindAT (informative facet) or Compose‑CAL U.Facet explicitly. Only CHR:ReferencePlane is permitted (no bare “plane”); use EntityOfConcern / Description episteme / specification-use boundary for entity-description-specification-use discipline; use stance for design vs run.
Problem Frame
Trans‑disciplinary modelling fails without an explicit discipline for where words mean what.
- Semantic drift. The same string (“process”, “role”, “service”) slides between domains and editions.
- Homonym collisions. One label carries incompatible senses across fields.
- Hidden synonymy. Different labels point to the same local sense, but the identity is unstated.
- Implicit globalism. Meaning is treated as universal; integration silently re‑writes models.
FPF resolves this by localising meaning first, then explicitly translating across locales.
The Three Principles (normative)
P‑S - Source Localisation Principle — Speak with the Context.
Rule. Every term in a normative FPF publication unit MUST be bound to a specific U.BoundedContext (its “Context of meaning”). The binding is explicit in text, notation, or table headers (e.g., process (BPMN 2.0)).
Implications.
- No free‑floating “global terms”.
- A finite Context Map (see F.1) is chosen before naming work starts.
- If a source intrinsically fixes time stance, the DesignRunTag is carried by the Context (C‑7).
Reasoning move (conceptual).
Context(C) ∧ says(C, term t) ⊢ usable(t@C)
Illustration (Enactment line).
activity @ PROV‑O (run) vs task @ IEC 61131‑3 (run) vs process @ BPMN 2.0 (design).
P‑L - Local Meaning Principle — Meaning lives inside the Context.
Rule. The intended sense of a term is established inside its Context as a SenseCell: a small, reconstructible unit of local meaning with Tech/Plain labels and a concise gloss. SenseCells are lexical only (C‑6): no behaviours, no deontics, no equations.
Implications.
- SenseCells are Context‑scoped; they do not cross Contexts.
- Minimal generality (G‑1) and contextual specification (G‑2) govern naming inside the Context.
- Intra‑Context clustering of raw mentions precedes any Cross‑context act (see F.3).
Reasoning move (conceptual).
usable(t@C) ∧ fits(gloss, C) ⊢ SenseCell⟨t@C⟩
Illustration (KD‑CAL).
observation @ SOSA/SSN: Tech “observation”, Plain “measurement act”; gloss “Result‑bearing act applying a Procedure…”.
P‑B - Explicit Bridge Principle — across Contexts, only with a bridge.
Rule. Any relation between terms from different Contexts MUST be stated as an Alignment Bridge (see F.9): a named mapping between SenseCell⟨-⟩ items with a declared relation kind (e.g., overlaps, broader‑than, near‑equivalent) and a Congruence Level (CL) for trust calculus (B.3).
Implications.
- No by‑name identity across Contexts; string equality ≠ sense equality.
- Bridges carry loss/fit notes and are auditable; they can be revised by edition.
- Concept‑Sets (F.7) are built from bridged cells, not from lexical strings.
- When the prose wording uses umbrella sameness/alignment tokens (“same/equivalent/align/map/…”), treat it as an RPR trigger and repair it via A.6.9 (RPR‑XCTX) before granting any naming or substitution licence.
Reasoning move (conceptual).
SenseCell⟨x@A⟩ ↔⟨rel, CL⟩ SenseCell⟨y@B⟩ ⊢ translatable(x@A, y@B, rel, CL)
Illustration (Sys‑CAL × Enactment).
actuation @ CTRL‑Text ↔⟨near‑equiv, CL=2⟩ control‑output @ IEC 61131‑3.
Minimal Conceptual Objects (conceptual, notationally neutral)
These conceptual objects are thought‑objects; they specify what must exist conceptually, not how it is stored.
Context Card (for each U.BoundedContext)
A terse descriptor used in the Context Map (F.1):
id(stable local handle) -title-edition/yearfamily(discipline family; informal) -scope gisttimeStance?(design/run, if inherent)trip‑wires(few lexical caveats that often mislead, e.g., “process≠thermo process”)
SenseCell (unit of local meaning, inside one context)
label.tech/label.plain(two registers)gloss(minimal generality, Context‑true)notes?(warnings, edition shifts)- No behaviour/deontics/equations (C‑6)
Where it comes from. F.2 describes how SenseCells can be derived from local term evidence; F.0.1 only requires that local meaning be expressible as a SenseCell.
Alignment Bridge (between SenseCells from different Contexts)
left: SenseCell⟨-@A⟩,right: SenseCell⟨-@B⟩relation(e.g., equivalent‑under‑assumptions, overlaps, broader‑than)CL(Congruence Level; feeds B.3 Trust & Assurance)loss/fit(explicit statement of what is lost or assumed)
Invariants (normative)
- I‑1 - Context‑qualified usage. Every normative use of a term is Context‑qualified (directly or via table/section headers).
- I‑2 - Local‑only cells. A SenseCell belongs to exactly one Context.
- I‑3 - senseFamily hygiene. SenseCells are lexical; behaviour, deontics, measurements, proof steps live in their respective patterns (C‑6).
- I‑4 - Time stance fidelity. If a source fixes a
DesignRunTag, the Context Card carries it and SenseCells inherit it. - I‑5 - No implicit Cross‑context identity. Cross‑context relations exist only as F.9 Bridges with
relationandCL. - I‑6 - Parsimony & heterogeneity hook. The Context Map is finite, heterogeneous (≥ 3 families per unification line), and parsimonious (F.1).
Reasoning Primitives (judgement schemata; pure, side‑effect‑free)
These capture allowable mental moves; they do not prescribe storage, APIs, or workflow.
-
Context qualification
Context(C) ∧ mentions(C, s) ⊢ uses(s@C)Reading: If a string s is used under Context C, we treat it as the local term s@C. -
Local sense formation
uses(t@C) ∧ gloss_C(t) ⊢ SenseCell⟨t@C⟩Reading: A Context‑true gloss yields a SenseCell for t inside C. -
Admissible Cross‑context relation
SenseCell⟨x@A⟩ ∧ SenseCell⟨y@B⟩ ∧ declare(rel, CL) ⊢ Bridge(x@A, y@B, rel, CL)Reading: Only an explicit declaration generates a Bridge; no name‑matching inferences. -
Bridge‑to‑Concept‑Set hint (for F.7)
Bridge(x@A, y@B, rel≈equiv, CL≥k) ⊢ candidate_same_row(x, y)Reading: High-CL, near‑equivalence bridges can nominate cells for one Concept‑Set row (final decision in F.7).
Didactic Metaphor (informative)
- Contexts. Each
U.BoundedContextis a Context; its Context Card is a published boundary marker (name, edition, time stance, trip‑wires). - Words in a Context. A SenseCell is a dictionary entry pinned to that Context’s wall.
- Door‑to‑door links. An Alignment Bridge is a labelled passage connecting two Contexts; a CL placard says how trustworthy that passage is.
We first speak inside Contexts; only then decide which doors to connect—and with what warnings.
Placement & Flow
F.0.1 is the front door of Part F. It enables: F.1 (choosing Contexts with Context Cards) → F.2 (deriving SenseCells inside each Context) → F.3 (stabilising local senses) → F.7 (building Concept‑Set rows) → F.9 (stating Bridges).
Anti‑patterns & remedies
Compact worked examples
Each vignette shows (1) two Context Cards (abridged), (2) SenseCells inside Contexts, (3) the Bridge with relation & CL, and (4) a Concept‑Set hint (if any).
F.0.1:9.1 Enactment × Provenance — process vs activity
-
Context A:
BPMN_2_0- Business Process Model and Notation v2.0 (2011) - design SenseCell⟨process@BPMN⟩: Tech “process”; Plain “workflow process”; Gloss “graph of flow nodes/events executed by participants.” -
Context B:
PROV_O_2013- W3C PROV‑O (2013) - run SenseCell⟨activity@PROV⟩: Tech “activity”; Plain “provenance activity”; Gloss “time‑bounded occurrence using/generating entities.” -
Bridge: ⟨process@BPMN⟩ ↔⟨
design‑spec‑of, CL=2, loss: “no concurrency semantics in trace”; fit: “maps to execution plan”⟩ ⟨activity@PROV⟩ -
Concept‑Set hint: No same‑row nomination (relation ≠ near‑equiv); instead, record a design↔run linkage.
Control × PLC runtime — actuation vs control output
-
Context A:
CTRL_Text_Classic- control theory primers - design SenseCell⟨actuation@CTRL⟩: Tech “actuation”; Plain “control output”; Gloss “signal applied to plant actuators.” -
Context B:
IEC_61131_3- PLC languages - run SenseCell⟨q‑output@IEC⟩: Tech “control‑output”; Plain “PLC output”; Gloss “program‑produced output variable to field I/O.” -
Bridge: ⟨actuation@CTRL⟩ ↔⟨
near‑equivalent, CL=2, loss: “hardware/scan‑cycle specifics absent in CTRL”; fit: “semantics align under linear regime”⟩ ⟨q‑output@IEC⟩ -
Concept‑Set hint: Candidate same‑row (F.7) with note: “merge permitted at CL≥2 threshold.”
F.0.1:9.3 Measurement × Service — observation vs service metric
-
Context A:
SOSA_SSN_2017- sensing/observations - run SenseCell⟨observation@SOSA⟩: Tech “observation”; Plain “measurement act”. -
Context B:
ITIL4_2020- services - (mixed) SenseCell⟨slo‑metric@ITIL⟩: Tech “service‑level metric”; Plain “service measure”; Gloss “quantity used to evaluate SLOs.” -
Bridge: ⟨observation@SOSA⟩ ↔⟨
provides‑value‑for, CL=2, loss: “organizational context not in SOSA”; fit: “metric results are measurement results.”⟩ ⟨slo‑metric@ITIL⟩ -
Concept‑Set hint: Not a same‑row case; this is a role‑in‑use relation (measurement feeds status evaluation).
F.0.1:9.4 Type reasoning — subclass‑of (OWL) vs is‑a (plain)
-
Context A:
OWL2_Profiles- description logics SenseCell⟨subclass@OWL⟩: Tech “subclass‑of”; Plain “is‑a”. -
Context B:
ENG_Glossary- engineering plain usage compendium SenseCell⟨is‑a@ENG⟩: Tech “is‑a (engineering)”; Plain “kind‑of”; Gloss “informal subsumption in specs.” -
Bridge: ⟨subclass@OWL⟩ ↔⟨
near‑equivalent, CL=1, loss: “OWL formal constraints absent in ENG”; fit: “intended subsumption semantics.”⟩ ⟨is‑a@ENG⟩ -
Concept‑Set hint: Keep separate rows unless the consuming artefact demands formal semantics.
F.0.1:9.5 Deontics × Access — permission vs role (RBAC)
-
Context A:
ODRL_2_2- policy/deontics SenseCell⟨permission@ODRL⟩: Tech “permission”; Plain “allowed action”. -
Context B:
NIST_RBAC_2004- access control SenseCell⟨role@RBAC⟩: Tech “access‑role”; Plain “permission set”. -
Bridge: ⟨permission@ODRL⟩ ↔⟨
member‑of‑set‑in, CL=2, loss: “contextual obligations not preserved”; fit: “RBAC roles aggregate permissions.”⟩ ⟨role@RBAC⟩ -
Concept‑Set hint: Not same row (different kinds); useful linkage for Enactment when binding duties to sessions.
Extended reasoning moves (pure judgement schemata)
Judgements are conceptual entailments over Contexts, SenseCells, and Bridges. They carry no storage, workflow, or governance semantics.
Context‑qualified use
Context(C) ∧ mentions(C, s) ⊢ uses(s@C)
If s is used under Context C, we treat it as the local term s@C.
Sense formation (local)
uses(t@C) ∧ gloss_C(t) ⊢ SenseCell⟨t@C⟩
A Context‑true gloss yields a SenseCell inside C.
Admissible Bridge (creation predicate)
SenseCell⟨x@A⟩ ∧ SenseCell⟨y@B⟩ ∧ A≠B ∧ rel∈R ∧ cl∈{0,1,2} ⊢ Bridge(x@A,y@B,rel,cl)
Only explicit relation rel with Congruence Level cl constitutes a Bridge.
Canonical relation set R (didactic catalogue):
equivalent‑under‑assumptions - near‑equivalent - overlaps - broader‑than - narrower‑than - design‑spec‑of - run‑trace‑of - representation‑of - member‑of‑set‑in - provides‑value‑for.
Bridge composition (minimum CL and relation loss)
Bridge(a,b,rel₁,cl₁) ∧ Bridge(b,c,rel₂,cl₂) ⊢ Bridge*(a,c,rel*,cl*)
cl* := min(cl₁, cl₂)(do not inflate confidence)rel* := conservativeRel(rel₁, rel₂)(e.g., near‑equiv composed with overlaps yields overlaps)
Reading: Chained passages inherit the minimum CL and the relation that remains admissible after composition.
Non‑identity by stance
SenseCell⟨x@A(design)⟩ ∧ SenseCell⟨y@B(run)⟩ ∧ ¬declared(Bridge(x,y,near‑equiv,_)) ⊢ ¬same‑row(x,y)
Different time stances forbid same‑row unless an explicit near‑equiv Bridge exists.
Row viability (Concept‑Set candidacy)
Cells = {c₁…cₙ} ⊢ row‑viable(Cells) ⇔ connected(Cells, Bridges_{rel∈{equiv,near‑equiv}, cl≥k}) ∧ ¬contradiction(Cells)
Reading: A row is viable if its cells form a connected subgraph via Bridges with sufficient CL and contain no mutually exclusive links.
Contradiction sieve
Bridge(a,b,broader) ∧ Bridge(a,b,narrower) ⊢ contradiction(a,b)
Incompatible relations across the same pair flag a contradiction for review (conceptually).
Non‑bridge implication ban
name(x) = name(y) ∧ A≠B ⊢ ¬Bridge(x@A, y@B, _, _)
String equality across Contexts never implies a Bridge.
SCR/RSCR acceptance checks (conceptual)
These checks are content‑oriented; they validate that a manuscript/model respects Part F principles. No process/tool assumptions are implied.
SCR — Static conformance
- SCR‑F01 (Context‑qualified). Every normative term is Context‑qualified (directly, or via a scoped header that unambiguously fixes the Context).
- SCR‑F02 (Local cells). Each SenseCell belongs to exactly one Context; no cell aggregates Cross‑context senses.
- SCR‑F03 (senseFamily hygiene). SenseCell glosses contain no behaviours/deontics/equations; those appear only in their patterns.
- SCR‑F04 (Bridges explicit). Every Cross‑context relation appears as a Bridge with
relationandCLand a short loss/fit note. - SCR‑F05 (No string identity). There is no use of string equality to stand in for Cross‑context identity.
- SCR‑F06 (Time stance fidelity). Where a Context fixes a
DesignRunTag, the SenseCells and any Bridges reflect that stance explicitly. - SCR‑F07 (Row viability). Any Concept‑Set row shown is supported by a connected subgraph of Bridges with CL ≥ threshold and no contradictions.
RSCR — Regression & evolution
- RSCR‑F01 (Edition split). When a source edition changes materially, SenseCells tied to the old edition remain; new cells bind to the new Context; Bridges are re‑assessed.
- RSCR‑F02 (Bridge stability). If any Bridge endpoint changes gloss/stance, downgrade or retire the Bridge, documenting the loss/fit change.
- RSCR‑F03 (Composition guard). When composing Bridges in a chain, the resulting
CLnever exceeds the minimal link; relationCLdrops monotonically. - RSCR‑F04 (Heterogeneity + QD guard): requires ≥3 domain‑families AND MinInterFamilyDistance ≥ δ_family (per the active F1‑Card edition), with QD‑triad evidence (publish Diversity_P and IlluminationSummary on the declared grid/kernel). Near‑alias pairs (per dSig rule) SHALL be flagged and excluded or merged before the guard is evaluated. Record the F1‑Card edition id.
Publish‑ready summary
An artefact is ready with respect to F.0.1 when:
- SCR‑F01…F07 hold for all terms, cells, rows, and bridges it presents;
- RSCR‑F01…F04 hold under simulated edition/stance changes;
- Every Cross-context statement can be read as a Bridge or as a composition of Bridges with stated
CLand relation loss.
Quick reference (didactic)
- Context = a
U.BoundedContextwith edition, scope, and (if inherent) time stance. - SenseCell = the minimal, lexical unit of meaning inside a Context (Tech/Plain labels + gloss).
- Bridge = the only Cross‑context relation, labelled with
relationand CL, plus a short loss/fit note. - Concept‑Set row = a didactic table row collecting SenseCells that are sufficiently the‑same‑thing under declared Bridges.
Mental checklist: Name the Context → speak in the Context → connect Contexts only by labelled bridges → build rows from bridged cells.
F.0.1:End
Domain‑Family Landscape Survey
“Fix the context of meaning before you name anything.” Status. Architectural pattern. Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); F.0.1 Contextual Lexicon Principles; A.7 Strict Distinction (Clarity Lattice); A.11 Ontological Parsimony. Coordinates with. F.2 Term Harvesting & Normalisation; F.3 Intra‑Context Sense Clustering; F.4 Role Description; F.9 Alignment & Bridge Across Contexts; G.0–G.1 (Scope/entityOfConcern handoff). (Bridges live only in F.9.)
Aliases (informative). Contexts‑first survey; Context cut.
Intent & applicability
Intent. Establish a finite set of U.BoundedContext (“context of meaning”), each tied to an authoritative source or canon within a domain family, so that all later moves (term harvesting, clustering, role naming, cross‑context bridges) operate on local meanings rather than on drifting, globalised words.
Applicability. Use at the start of any unification effort for any FPF pattern (Enactment (U.RoleAssignment + U.RoleEnactment), Sys-CAL, KD-CAL, Kind-CAL, LCA-CAL…) and whenever a discipline canon materially changes (new edition, re-framing, seminal result).
Non‑goals. No tooling, workflow, or editorial roles. No global ontology. No cross‑context equations. This pattern describes how to think, not how to store.
Problem frame
Without explicit context of meaning:
- Word‑drift. Common words (process, role, service, model) silently change sense across disciplines.
- Scope mirages. One influential standard is mistaken for the domain.
- Retro‑lock. Old editions become the implicit truth simply because they were “there first”.
- Category bleed. Behavioural roles, epistemic statuses, deontic permissions mix because their contexts were never fixed.
- Name inflation. New U.Types appear just to “stabilise” unstable words.
Forces
Core idea (didactic)
Think in Contexts, not in words. A Context of meaning is a U.BoundedContext (per D.CTX) that encloses a coherent vocabulary and its rules from a specific, citable canon (standard, BoK, seminal paper, textbook tradition). You name and reason inside the Context. When you must step between Contexts, you will declare a bridge later (F.9) with explicit losses or mismatches.
Minimal vocabulary (this pattern only)
- U.BoundedContext (short: Context in Tech register). The formal Context of meaning.
- Context (Tech register alias for U.BoundedContext). Use Context for pedagogy, U.BoundedContext for formal references.
- Domain family. An informative shelf‑label grouping related Contexts (e.g., workflow & provenance; services & deontics; sensing & measurement; types & taxonomies; control & actuation). No semantics attach; Domain ≠ Context.
- Context Card. A one‑screen conceptual sketch of a Context (see §7.2).
- SenseCell (appears downstream). A (Context × Local‑Sense) address; F.3 will mint these after clustering. Mentioned here only to keep the destination in view.
Solution — the Contexts‑first survey (conceptual, notation‑free)
Step 1 — Declare your unification line(s). State which FPF pattern threads are in play (e.g., Enactment + KD‑CAL sensing + Sys‑CAL execution). This keeps the cut purposeful.
Step 2 — Cut the landscape by domain families. For each line, select at least three distinct domain families (heterogeneity guard). Examples:
- Workflow & provenance (BPMN 2.0; W3C PROV‑O)
- Services & deontics (ITIL 4; ODRL 2.2)
- Sensing & measurement (SOSA/SSN; ISO 80000‑1)
- Types & taxonomies (OWL 2; FCA corpus)
- Control & actuation (state‑space control texts; IEC 61131‑3)
Step 3 — For each family, sketch 1–3 Context Cards. Prefer canonical, widely cited canons. If a field is fragmented, choose one exemplar and one counter‑voice to surface heterogeneity.
Step 4 — Make locality explicit. Treat words as context‑local. Process (BPMN) ≠ process (thermodynamics) ≠ process (PROV). Do not reconcile. Do not average. Just fix the Contexts.
Step 5 — Bound the set. Small enough to hold in working memory. As a rule of thumb:
- per unification line: ≥ 3 families;
- per family: 1–3 Contexts. More only if a missing Context hides a known sense‑split you will certainly need.
Step 6 — Postpone bridges. If two Contexts seem “close”, resist collapsing. Note the tension and leave any bridge claim to F.9 Alignment & Bridge.
What to record (conceptual, not clerical)
7.1 The two‑minute memory. Everything you need to think correctly later fits on an eight‑line card. No registries, no workflows, no storage choices.
7.2 The Context Card (one‑screen sketch). (Each bullet is a thought, not a field.)
- Name & edition. “BPMN 2.0 (2011)” • “W3C PROV‑O (2013)” • “ITIL 4 (2020)”.
- Domain family. workflow / provenance / services / deontics / sensing / types / control … (informative only; never used to infer meaning).
- Scope gist (didactic; ≠
USM.ScopeSlice(G)). One line that marks the inside/outside (“workflow graphs & participants”, “provenance entities/activities/agents”). - Time stance (if inherent). Does the canon speak design (specifications, models) or run (occurrences, acts)?
- Lexical trip‑wires. Known homonyms or false friends in this Context (“process ≠ thermodynamic process”, “role (RBAC) ≠ behavioural role”).
- Neighbour Contexts (informative). Close cousins that people often conflate (BPMN ↔ PROV‑O, ITIL ↔ ODRL).
- Recency note. Current / superseded / candidate (only as a reminder to yourself which text you mean).
- Why this Context matters here. One sentence linking to your unification line (“we will name Executions later; PROV‑O keeps them run‑time”).
- Diversity signature (dSig). A 5-characteristics discrete signature for
U.BoundedContext: [Sector, Function, Archetype, Regime, MetricFamily]. Authors SHOULD pick from local discipline taxonomies. Publish adSigSourcelist (five refs/URIs, one per characteristic) on every Card, falling back to free-text only where no canonical term exists. Two Contexts are flagged as Near-Duplicate when ≥3 characteristics match. PublishdSiganddSigSourceon every Card.
If your Card spills beyond a screen, you are collecting facts, not fixing meaning.
F1‑Card (normative artefact): { taxonomyRef, embeddingRef, DistanceDef, δ_family, confidenceBand, calibrationSet, edition, subFamilyDef? }. subFamilyDef (optional): declares the stable partitioning below a domain‑family (e.g., taxonomic sub‑fields or CVT clusters with parent family anchors). When HET‑FIRST quotas refer to “sub‑family”, they MUST use this declared subFamilyDef.
Declare DomainDistance policy (cosine or transport) and δ_family threshold; version as part of DescriptorMapRef. Publish confidenceBand (e.g., CI90%) for the calibrated δ_family; treat numbers in examples as illustrative, not normative.
Invariants (normative, lightweight)
- Context ≡ U.BoundedContext. In this pattern, Context always means U.BoundedContext (per E.10.D1).
- Locality. Words are local to their Context; no global meaning is implied or imported.
- Heterogeneity. Each unification line considers ≥ 3 distinct Domain families (labels are informative only).
- Parsimony. Prefer few, canonical Contexts per family (1–3) that jointly expose the key sense splits.
- No bridging here. No equivalence or mapping is asserted between Contexts in F.1. (Bridges live in F.9.)
- DesignRunTag honesty. If a canon fixes a DesignRunTag, note it. Do not reinterpret.
- Didactic primacy. Each Context Card must be readable by a thoughtful engineer in under two minutes.
- Domain‑family neutrality. Domain families carry no semantics; they SHALL NOT be used for inheritance, inference, or bridge implication.
- Scope naming separation.
Scope giston Cards is didactic only; formal Scope/entityOfConcern (=USM.ScopeSlice(G)⊕entityOfConcern(GroundingHolon, ReferencePlane)) is declared in G.0–G.1, not in F.1. - Diversity signature present. Each Context Card PUBLISHES a
dSigin the 5‑characteristics form. - Collision rule. If any pair of Cards has
dSigmatching on ≥3 characteristics, mark Near‑Duplicate and either merge into one slot or replace one by a Context from a different domain‑family. Record action in SCR.
Self‑checks (mental, not procedural)
- The mirror test. Can you explain why each Context is inside your cut in one breath? If not, you are surveying for comfort, not for meaning.
- The homonym ping. For each frequent word (process, role, service, model, execution), can you immediately list the Contexts where it differs? If not, add the missing Context.
- The bridge itch. Feel the temptation to say “these are the same”? Good. Write the itch down and refuse to scratch it here. That’s F.9’s job.
- The memory rule. If your entire survey cannot be recalled without opening a document, it is too large.
Micro‑examples (illustrative only)
One unification line: Enactment (U.RoleAssignment + U.RoleEnactment) with sensing and execution.
- BPMN 2.0 (2011) — workflow family. Scope gist: flow nodes, sequence flows, participants (design‑time). Trip‑wires: “process” here is a graph; not a run.
- W3C PROV‑O (2013) — provenance family. Scope gist: Activity that uses/generates entities (run‑time). Trip‑wires: “activity/process” here is a temporal occurrence.
- ITIL 4 (2020) — services family. Scope gist: service as value co‑creation; SLO/SLA (deontic talk nearby). Trip‑wires: “incident/problem/practice” don’t equal workflow tasks.
- ODRL 2.2 — deontics family. Scope gist: permissions, prohibitions, duties (design). Trip‑wires: “duty/obligation” ≠ service guarantee mechanics.
- SOSA/SSN (2017) — sensing family. Scope gist: Observation as an act yielding a Result for a property. Trip‑wires: “observation” ≠ “state”; it’s an act with a procedure.
- IEC 61131‑3 — control languages family. Scope gist: tasks that execute programs (run‑time). Trip‑wires: “task/execution” ≠ “workflow process”.
With only these Contexts fixed, later steps become almost mechanical: F.2 harvests terms inside each Context; F.3 clusters within each Context; F.4 names roles or statuses pointing to SenseCells; F.9 draws the bridges you refused to draw here.
Anti‑patterns & remedies
Worked examples
Each example shows the cut (the Contexts you keep in view) and the thinking pay‑off you get before any harvesting, clustering, or bridging.
F.1:12.1 Enactment (U.RoleAssignment + U.RoleEnactment) with sensing & execution (service acceptance)
Unification line. Enactment + KD‑CAL (sensing) + Sys‑CAL (execution).
Contexts (six Cards).
- BPMN 2.0 (2011) — workflow family; design; graph of flow nodes, participants.
- PROV‑O (2013) — provenance family; run; Activity uses/generates Entities; Agents.
- ITIL 4 (2020) — services family; design; service, SLO/SLA vocabulary.
- ODRL 2.2 — deontics family; design; permission / prohibition / duty.
- SOSA/SSN (2017) — sensing family; run; Observation as act with Result.
- IEC 61131‑3 — control languages; run; tasks execute control programs.
Thinking pay‑off (examples).
- You stop saying “process uptime” and think Execution (IEC) measured by Observation (SOSA) compared against SLO (ITIL)—three Contexts, three senses.
- You mark a trip‑wire: RBAC role (not in this cut) is not a behavioural role (BPMN participant).
- You resist equating PROV Activity with BPMN workflow; later F.9 may relate them with explicit loss.
F.1:12.2 Method quartet with types & measurement (model state graph)
Unification line. Method‑CAL + Kind-CAL + KD‑CAL.
Contexts (five Cards).
- SPEM 2.0 / ISO 24744 — methods family; design; Method and MethodDescription language.
- OWL 2 (profiles) — types family; design; class, subclass, equivalent class.
- FCA corpus — types family; design; concept lattices.
- SOSA/SSN (2017) — sensing family; run; Observation / Procedure.
- ISO 80000‑1 (2022) — metrology family; design; quantity kinds, units.
Thinking pay‑off.
- You keep Method (abstract how‑to) separate from MethodDescription (epistemic recipe) and Execution (run) because the Contexts already split design vs run.
- You avoid treating FCA “concept” as a U.Type; later F.9 can bridge OWL classes to FCA concepts with cautions.
F.1:12.3 Control & actuation with services (operational SLOs in plants)
Unification line. Sys‑CAL + LCA‑CAL (planned) + services/deontics.
Contexts (five Cards).
- State‑space control texts — control family; design; controller/plant, feedback.
- IEC 61131‑3 — control languages; run; task, program execution.
- ISA‑95 — integration family; design; levelled layers, interfaces.
- ITIL 4 (2020) — services family; design; SLO/SLA.
- SOSA/SSN (2017) — sensing family; run; Observation.
Thinking pay‑off.
- “Actuation” is recognised as control output (Sys‑CAL), not a service promise.
- “Incident” (ITIL) is not a plant fault (Sys‑CAL); Contexts deter category errors.
Reasoning primitives (judgement schemas, notation‑free)
These are mental moves, not queries. They read “given these thoughts, this conclusion is safe to hold (conceptually).”
-
Context set for a line
line L declared ⊢ Contexts(L) = {C₁,…,Cₙ}Reading: For a unification line L, the Contexts you deliberately keep in view are{C₁,…,Cₙ}(from your Cards). -
Heterogeneity check
families(L) = F ⊢ heterogeneous(L) ≡ (|distinct(F)| ≥ 3)Reading: Your cut is heterogeneous if it spans at least three domain families. -
Parsimony check
Contexts(L)=R, families(L)=F ⊢ parsimonious(L) ≡ (∀f∈F: 1≤|R∩f|≤3)Reading: Each family contributes a few Contexts, not a phonebook. -
Locality assertion
term w, C∈Contexts(L) ⊢ meaning(w)@C is localReading: A word’s sense is context‑local; no global meaning is implied. -
Time‑stance guard
C has stance s∈{design,run} ⊢ claims@C must respect sReading: If a Context is design‑time, do not make run‑time claims in it (and vice versa). -
Trip‑wire recall
C lists tripWires T ⊢ for any w∈T, require Context‑prefix when speakingReading: Words on the trip‑wire list must be spoken with the Context name. -
Bridge embargo
C₁≠C₂ ⊢ no‑equivalence(C₁,C₂) within F.1Reading: F.1 never asserts equivalence across Contexts; postponement is principled, not procrastination. -
Context sufficiency probe
common‑word w used in L ∧ w not covered by any trip‑wire ⊢ consider adding a Context that makes w differReading: If a frequent word has no deliberate sense‑split in your cut, you may be missing a Context. -
Memory rule
|Contexts(L)| too large ⊢ reduce until a careful mind can recite them unaidedReading: The survey should live in memory, not in a registry.
F1‑Card example (informative)
Relations (with other patterns)
Builds on: E.10.D1 Lexical Discipline for “Context” (D.CTX) — ensures Context ≡ U.BoundedContext and reserves “Problem Frame” for narrative use. A.7 Strict Distinction — guards EntityOfConcern/Description-episteme/publication-carrier and DesignRunTag splits while you cut Contexts. A.11 Ontological Parsimony — motivates the small cut.
Constrains: F.2 (Term Harvesting): harvest inside Contexts named here; every occurrence carries a Context name. F.3 (Intra‑Context Sense Clustering): cluster per Context; no Cross‑context sense claims. F.4 (Role Descriptions): any role template or status template must cite a SenseCell that lives in a Context from this cut. F.9 (Alignment & Bridge): only F.9 may relate Contexts; never F.1–F.4.
Used by. Extention patterns in Part C (Sys‑CAL, KD‑CAL, Kind-CAL, Method‑CAL, LCA‑CAL) as the lexical starting grid for their examples and definitions.
Migration notes (conceptual)
- New edition appears. Keep the old Card; add a new Card with the new edition. If the sense shifts, treat it as a new Context; if it is strictly editorial, mark recency but keep one context.
- New family emerges. If a missing family explains recurrent confusion in your line, admit it with one exemplar Context; remove a less informative Context to keep parsimony.
- Language variants. Treat language editions as separate Contexts unless the canon itself declares a single normative bilingual mapping.
- Trip‑wire growth. When you notice a recurring confusion, add a crisp trip‑wire to the relevant Card (one line; no essays).
- Bridges discovered later. Do not back‑port bridges into F.1; leave the Cards untouched and record the mapping in F.9.
- Dormant Contexts. If a Context no longer contributes to any active line, move it to a parking shelf (informative note on the Card) rather than deleting it.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance checks (SCR)
- SCR‑F1‑S01 (Heterogeneity). For each unification line, the set of Cards spans ≥ 3 distinct domain families.
- SCR‑F1‑S02 (One‑screen Cards). Each Card fits on one screen: name+edition; family; scope gist; time stance (if inherent); 1–3 trip‑wires; neighbour Contexts (optional); recency note.
- SCR‑F1‑S03 (Locality pledge). Nowhere in F.1 are Cross‑context equivalences or merges asserted.
- SCR‑F1‑S04 (Parsimony). In every family, 1–3 Contexts are kept; if more, a clear sentence justifies each extra Context’s unique sense contribution.
- SCR‑F1‑S05 (Context discipline). “Context” is used only as a synonym of U.BoundedContext; “domain” appears only as an informative family label.
- SCR‑F1‑S06 (Temporal honesty). If a canon fixes DesignRunTag, the Card states it.
- SCR‑F1‑S07 (Family neutrality). No claim, classification, or relation in F.1 relies on Domain‑family membership; families appear only as shelf labels on cards.
- SCR‑F1‑S08 (dSig present). Every Context Card has a 5‑characteristics
dSig. - SCR‑F1‑S09 (Collision policy). Any pair with
dSigmatch on ≥3 characteristics is either merged or replaced; SCR records the action.
Regression checks (RSCR)
- RSCR‑F1‑E01 (Edition churn). When a new edition is added, prior Cards remain; no silent replacement.
- RSCR‑F1‑E02 (Family balance). Adding/removing Cards does not drop any line below three families.
- RSCR‑F1‑E03 (Trip‑wire coverage). After introducing a new Context, the trip‑wire lists of neighbouring Contexts are reconsidered and updated if needed.
- RSCR‑F1‑E04 (No creep). Periodically apply the memory rule: if the cut no longer fits in working memory, shrink it.
Didactic distillation (90‑second teaching script)
“Before you name anything, fix the context of meaning. A Context is a U.BoundedContext tied to a specific canon—BPMN 2.0, PROV‑O, ITIL 4, SOSA/SSN, IEC 61131‑3, OWL 2. Words are local to Contexts: process (BPMN) is a workflow graph, activity (PROV) is a run‑time occurrence, service (ITIL) is a promise vocabulary. Cut the landscape so each unification line sees at least three domain families, with one‑screen Cards per Context (scope gist, time stance, trip‑wires). Do not bridge Contexts here—just write down the itch to bridge as an F.9 bridge question. Keep the cut small enough to remember. With Contexts fixed, harvesting (F.2), local clustering (F.3), role template or status templates (F.4), and explicit Cross‑context bridges (F.9) become straightforward—and you avoid naming ghosts that come from words floating without walls.”
F.1:End
F.2 — Term Harvesting & Normalisation
“Harvest words inside Contexts, name them in the Context’s own idiom, and stop there.” Status. Architectural pattern. Depends on. E.10.D1 Lexical Discipline for “Context” (D.CTX); F.0.1 Contextual Lexicon Principles (Source - Local Meaning - Bridge‑Only Crossing); A.7 Strict Distinction; A.11 Ontological Parsimony. Coordinates with. F.1 Context Map via Context Cards; F.3 Intra‑Context Sense Clustering; F.4 Role Description; F.9 Alignment & Bridge Across Contexts. Aliases (informative). context‑local harvesting; Local normalisation.
Intent & applicability
Intent. Provide a conceptual (notation‑free) discipline for turning Context‑internal usage into context‑local lexical units ready for later reasoning—without Cross‑context merging and without slipping into governance or tooling. The result is a small, auditable set of context‑local names and glosses that faithfully reflect how the canon speaks.
Applicability. Use whenever a unification line (from F.1) needs actual words to be referenced by patterns in Part C (Extention patterns) or by Role Descriptions (F.4). Re‑enter F.2 when a canon/edition changes or when a new Context is admitted in F.1.
Non‑goals. No global labels; no Cross‑context equivalence; no workflow or role descriptions; no storage/API talk. F.2 specifies how to think, not how to “run a pipeline”.
Problem Frame
Even with Contexts fixed (F.1), three mistakes recur:
- Word‑centrism. Treating a string as if it carried its meaning across Contexts (process, role, service).
- Over‑normalisation. Forcing one spelling/morphology across different canons, erasing Context‑specific cues.
- Premature structure. Smuggling behaviour, deontics, or type structures into what should remain lexical.
F.2 prevents these by localising meaning and naming strictly inside each Context.
Forces
Core idea (didactic)
Harvest inside each Context; name in that Context’s idiom; do not cross Contexts. For every Context (a U.BoundedContext from F.1), you gather attested phrases as thought‑cues, choose a Local Normal Form (LNF) that matches the Context’s idiom, attach a two‑register label (Tech/Plain), and write a one‑sentence gloss. That’s all. You do not claim sameness with any other Context; you do not embed behaviour or deontics; you do not mint U.Types here. These local lexical units will become Local‑Senses in F.3 and later addressable SenseCells (Context × Local‑Sense).
Minimal vocabulary (this pattern only)
- Context — Tech‑register alias for U.BoundedContext (per E.10.D1).
- Attested phrase — A short, verbatim cue from the canon that shows how a word is used in this Context (citation idea, not a record format).
- Local Normal Form (LNF) — The Context‑specific canonical surface you will use when referring to the term in this Context (minimal editing: spelling/hyphenation/casing per the canon).
- Two‑register label — Tech (engineer‑facing) and Plain (pedagogic) forms for the same Context‑local meaning.
- Gloss (one‑sentence) — A Context‑faithful description of how the canon uses the term, at minimal generality.
- Local lexical unit — The quintet (Context, LNF, Tech, Plain, Gloss). This is F.2’s only outcome.
- Homonymy (signal) — Awareness that the same string has different local lexical units across Contexts (no relation asserted).
- SenseCell (appears downstream) — Address (Context × Local‑Sense) minted in F.3; mentioned here so you know what you’re preparing.
Everything above is a way of thinking. None of it implies a database, statuses, or roles.
Solution — three mental moves (notation‑free)
Move A — Localise the word
Question to ask. “In which Context am I hearing this word?” Action (mental). Point to a specific Context (from F.1). Grab 1–2 attested phrases that are representative in this Context. Outcome. You stop thinking “global word” and start thinking “context‑local usage”.
Micro‑cue. If you cannot name the Context, do not harvest the word.
F.2:6.2 -Move B — Name it in the Context’s idiom
Question to ask. “How would this Context itself write it?” Action (mental). Choose the LNF (Context‑conformant spelling/hyphenation). Then write the two‑register label and a one‑sentence gloss that says what the canon means here—nothing more. Outcome. You have a local lexical unit (Context, LNF, Tech, Plain, Gloss).
Micro‑cues. • Prefer the canon’s head noun; keep canonical hyphens; avoid invented compounds. • The Plain label should help a non‑specialist; the Tech label should match engineers’ eyes. • The Gloss must fit on a single line; put details in F.3.
Move C — Fence it off
Question to ask. “What must I refuse to conclude here?” Action (mental). Explicitly refuse to: (1) compare across Contexts, (2) fold morphology that the canon treats as meaningful, (3) embed behaviour, deontics, or type structure. Outcome. A clean, context‑local lexical unit that will be safe to cluster in F.3 and safe to bridge (or not) in F.9.
Guard‑rails (normative, lightweight)
- context‑locality. Every local lexical unit MUST cite a Context (U.BoundedContext from F.1).
- Context‑idiom normalisation. LNF MUST respect the Context’s idiom (spelling/hyphenation/casing) and use minimal edits.
- Two registers. Each unit SHOULD carry both Tech and Plain labels for didactics; if one is missing, justify.
- Minimal generality (G‑1). The gloss MUST be as specific as the Context’s canon requires—no broader.
- EntityOfConcern / Description / specification-use hygiene (A.7). MUST NOT include behaviour equations, deontic rules, measurement math, or type axioms; those belong to patterns.
- No Cross‑context claims. MUST NOT assert equivalence, subsumption, or similarity with terms in other Contexts (F.9 only).
- Edition honesty. If the Context’s canon has multiple editions with shifting usage, treat them as distinct Contexts in F.1 before harvesting.
- Parsimony. Prefer few, telling lexical units over long tails; keep head terms that will power F.3/F.4/F.9.
Micro‑examples (illustrative, context‑local)
Each line is one local lexical unit. No relations are implied across lines.
-
Context: BPMN 2.0 (2011) — LNF:
processTech:process- Plain:workflow processGloss: “Directed graph of flow nodes and sequence flows enacted by participants.” -
Context: PROV‑O (2013) — LNF:
activityTech:activity- Plain:temporal occurrenceGloss: “Time‑bounded occurrence that uses and generates entities and is linked to agents.” -
Context: ITIL 4 (2020) — LNF:
service‑level‑objectiveTech:service‑level‑objective- Plain:service targetGloss: “Target value for a service characteristic within a service promise vocabulary.” -
Context: NIST RBAC (2004) — LNF:
roleTech:access‑role- Plain:permission roleGloss: “Named grouping of permissions assignable via sessions.” -
Context: SOSA/SSN (2017) — LNF:
observationTech:observation- Plain:measurement actGloss: “Act applying a procedure to a feature of interest to produce a result.” -
Context: IEC 61131‑3 — LNF:
taskTech:task- Plain:runtime program executionGloss: “Cyclic or event‑driven execution unit for control programs.”
Didactic heuristics (informative)
- Keep the Context prefix in your inner speech. Say “process (BPMN)”, “activity (PROV)”.
- Prefer head nouns. If the canon says “service‑level objective”, do not shorten it to “objective”.
- Resist elegance that erases signal. Hyphens and case often carry the Context’s culture; keep them.
- Gloss from use, not from opinion. Quote in your mind, then compress; avoid importing definitions from neighbouring Contexts.
Anti‑patterns & remedies
Worked examples (context‑local only)
Each line is a local lexical unit (Context, LNF, Tech, Plain, Gloss). No Cross‑context relation is implied. Later clustering (F.3) and bridges (F.9) may connect them.
F.2:11.1 Enactment + sensing
-
Context: BPMN 2.0 (2011) — LNF:
processTech:process- Plain:workflow processGloss: “Directed graph of flow nodes and sequence flows enacted by participants.” -
Context: PROV‑O (2013) — LNF:
activityTech:activity- Plain:temporal occurrenceGloss: “Time‑bounded occurrence that uses and generates entities and links to agents.” -
Context: SOSA/SSN (2017) — LNF:
observationTech:observation- Plain:measurement actGloss: “Act applying a procedure to a feature of interest to produce a result.” -
Context: ITIL 4 (2020) — LNF:
service‑level‑objectiveTech:service‑level‑objective- Plain:service targetGloss: “Target value for a service characteristic within a service promise vocabulary.”
Thinking pay‑off: you can phrase “compare observation to service‑level‑objective” without importing workflow or provenance semantics.
F.2:11.2 Sys‑CAL / LCA‑CAL + services
-
Context: State‑space control texts — LNF:
actuationTech:actuation- Plain:control outputGloss: “Signal applied to the plant to influence state or output.” -
Context: IEC 61131‑3 — LNF:
taskTech:task- Plain:runtime program executionGloss: “Cyclic or event‑driven execution unit for control programs.” -
Context: ITIL 4 (2020) — LNF:
incidentTech:incident- Plain:reported disruptionGloss: “Unplanned interruption or reduction in the quality of a service.”
Thinking pay‑off: avoids calling a plant fault an “incident” unless you cross Contexts later with an explicit bridge.
F.2:11.3 Kind-CAL + Method‑CAL + KD‑CAL
-
Context: OWL 2 (profiles) — LNF:
subclass‑ofTech:subclass‑of- Plain:is‑a (type hierarchy)Gloss: “C ⊑ D: every instance of C is an instance of D.” -
Context: FCA corpus — LNF:
formal‑conceptTech:formal‑concept- Plain:extent–intent nodeGloss: “Maximal (objects, attributes) pair under a Galois connection.” -
Context: SPEM 2.0 / ISO 24744 — LNF:
methodTech:method- Plain:abstract way of doingGloss: “Abstract how‑to independent of specification or execution.” -
Context: SOSA/SSN (2017) — LNF:
procedureTech:procedure- Plain:measurement recipeGloss: “Specification guiding how an observation is produced.”
Thinking pay‑off: discourages treating an FCA “concept” as a U.Type, or a procedure as a method without later proof.
Reasoning primitives (judgement schemas, notation‑free)
Read each as a permitted mental move over the outcomes of F.2. Symbols:
R= Context (U.BoundedContext),u= local lexical unit,s= lexical string.
-
Localisation
heard(s) ∧ R chosen ⊢ localize(s,R)You decide to hearsonly in ContextR. -
Context‑idiom normalisation
localize(s,R) ⊢ LNF_R(s) = ℓWithinR, the Local Normal Form forsisℓ. -
Unit formation
LNF_R(s)=ℓ ∧ labelTech=t ∧ labelPlain=p ∧ gloss=g ⊢ unit(u) = ⟨R,ℓ,t,p,g⟩A local lexical unit is formed (quintet). -
Lexical‑only guard
unit(u) ⊢ lexicalOnly(u)No behavioural/deontic/type math is attached to the gloss. -
Homonymy signal (Cross‑context)
LNF_Ra(s)=ℓa ∧ LNF_Rb(s)=ℓb ∧ Ra≠Rb ⊢ homonymy(s) ⊇ {Ra,Rb}Same string across Contexts is flagged as different by default. -
Minimal generality check
unit(u) ⊢ minimal(u) ⇔ gloss(u) says no more than the Context’s usage requiresThe gloss fits the Context; broader claims are withheld. -
Two‑register adequacy
unit(u) ⊢ didactic(u) ⇔ (tech(u) faithful) ∧ (plain(u) explanatory)Tech stays canonical; Plain helps non‑specialists. -
No Cross‑context conclusion
unit(u@Ra), unit(v@Rb), Ra≠Rb ⊢ ¬(u ≡ v) (within F.2)F.2 never asserts Cross‑context equivalence. -
Ready‑for‑F.3 signal
lexicalOnly(u) ∧ minimal(u) ∧ didactic(u) ⊢ readyF3(u)A unit is suitable input for intra‑Context clustering in F.3.
Relations
Builds on: F.1 (Contexts fixed; heterogeneity/parsimony in place). E.10.D1 D.CTX (Context ≡ U.BoundedContext; “Problem Frame” reserved for narrative). F.0.1 (Source - Local Meaning - Bridge‑Only Crossing).
Constrains: F.3 (Intra‑Context Sense Clustering): operates only on units from one Context; produces Local‑Senses and addressable SenseCells. F.4 (Role Description Definition): may cite SenseCells, not raw strings. F.9 (Alignment & Bridge): consumes homonymy signals; declares explicit Cross‑context mappings with loss policies.
Used by. Extention patterns in Part C when referencing domain idioms (labels stay context‑local).
Migration notes (conceptual)
- New edition appears. Add a Context in F.1; harvest afresh in F.2 using that Context; do not overwrite earlier units.
- Idiomatic update discovered. If your LNF fought the canon’s idiom, re‑LNF within the same context; keep labels/glosses steady unless the canon itself differs.
- Ambiguity inside a Context. If use splits, mint two units with distinct glosses; F.3 will sort their relation (same/different Local‑Sense).
- Language split. Treat each language canon as its own Context; resist cross‑language merges in F.2.
- Tail pruning. If units accumulate without feeding F.3/F.4/F.9, drop them from the working set; keep head terms that carry bridges.
- DSL quarantine. If a tool dialect is unavoidable, keep it as one context among others; never let it define the idiom for other Contexts.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR‑F2‑S01 (context‑locality). Every unit cites a Context from F.1.
- SCR‑F2‑S02 (Idiomatic LNF). Each LNF reflects the Context’s spelling/hyphenation/casing with minimal edits.
- SCR‑F2‑S03 (Two registers). Each unit carries both Tech and Plain labels; if not, a reason exists tied to didactics.
- SCR‑F2‑S04 (Lexical‑only). No gloss contains behaviour, deontics, measurement math, or type axioms.
- SCR‑F2‑S05 (No Cross‑context claims). Nowhere does F.2 assert equivalence/similarity/subsumption across Contexts.
- SCR‑F2‑S06 (Minimal generality). Glosses match the Context’s use; no globalisation.
- SCR‑F2‑S07 (Temporal honesty). For Contexts with fixed DesignRunTag, units and glosses respect it.
Regression (RSCR)
- RSCR‑F2‑E01 (Edition split). Introducing a new edition yields new units under a new Context; earlier units persist unchanged.
- RSCR‑F2‑E02 (Normaliser stability). Adjusting an LNF does not silently widen/narrow the gloss.
- RSCR‑F2‑E03 (Language split). Adding a second language yields a second Context; no bilingual collapse in F.2.
- RSCR‑F2‑E04 (No stealth bridges). After updates, F.2 still contains zero Cross‑context identity claims; any mapping appears only in F.9.
- RSCR‑F2‑E05 (Head‑term focus). Periodic check shows the unit set remains small and oriented to F.3/F.4/F.9 needs.
Didactic distillation (60‑second script)
“In F.2 you harvest inside Contexts. For each Context, pick the canon’s own phrasing, choose a Local Normal Form in that idiom, add Tech and Plain labels, and write a one‑sentence Gloss that matches how that Context talks. Stop there. No bridging, no behaviour, no equations. If the same string appears in another Context, treat it as a different unit. These units feed F.3, where you’ll sort senses within a Context, and F.9, where you’ll relate Contexts explicitly. This keeps meaning local, names faithful, and later reasoning clean.”
F.2:End
Intra‑Context Sense Clustering
“Within one context, decide what ‘the same sense’ really is—before you ever cross Contexts.” Status. Architectural pattern. Depends on. F.1 Domain‑Family Landscape Survey; F.2 Term Harvesting & Normalisation; E.10.D1 Lexical Discipline for “Context” (D.CTX); A.7 Strict Distinction; A.11 Ontological Parsimony. Coordinates with. F.4 Role Description; F.7 Concept‑Set Table; F.8 Mint or Reuse Decision; F.9 Alignment & Bridge Across Contexts. Aliases (informative). context‑local clustering; Sense consolidation.
Intent & applicability
Intent. Consolidate the context‑local lexical units from F.2 into a small set of Local‑Senses that actually operate in that one context (U.BoundedContext). Each Local‑Sense receives a crisp, didactic label pair (Tech/Plain) and a short sense statement. The result is an addressable basis for later uses (Role Assignment, tables, bridges) that is still strictly context‑local.
Applicability. Apply after F.2 for any Context that will feed naming (F.4/F.5), decision gates (F.8), Cross‑context bridges (F.9), or exemplars in Part C. Use again whenever the canon (edition) shifts usage enough to split or merge senses within the same context.
Non‑goals. No Cross‑context comparison or merging. No behaviour/deontics/type mathematics. No storage schemas or workflows. This is pure sense‑making inside one context.
Problem Frame
context‑local units (LNF + labels + gloss) from F.2 often over‑ or under‑differentiate meaning:
- Over‑split: superficial variants (service‑level‑objective vs SLO) treated as different “things”.
- Under‑split: one gloss covering two selectional frames or incompatible use‑cases.
- Drift within a canon: multi‑chapter texts use the same head differently unless the reader consolidates the intended sense.
- Didactic mismatch: engineer‑friendly label and plain label drift apart when units remain too granular.
F.3 repairs this inside the Context by clustering “same sense” and distinguishing “different sense”, with parsimony.
Forces
Core idea (didactic)
Cluster by usage, not by string. Inside one context:
- Same sense → Local‑Sense: a small, coherent usage‑region the canon treats as one idea (even if it has aliases or minor surface variation).
- Different sense → two Local‑Senses: incompatible selectional frames, entailments, or role in the canon’s own statements.
Each Local‑Sense becomes addressable when paired with its Context: SenseCell = (Context × Local‑Sense). SenseCells are context‑local coordinates; they do not pre‑judge any Cross‑context mapping.
Minimal vocabulary (this pattern only)
- Context — short for
U.BoundedContext(per D.CTX). - Unit — a context‑local lexical unit from F.2 (LNF + Tech/Plain + gloss).
- Local‑Sense — the conceptual cluster of Units deemed “same sense” within that Context.
- SenseCell — the address for a Local‑Sense: (Context, Local‑Sense). This is what later patterns will cite.
- Counter‑example — a short, canonical sentence or use that must not be covered by the Local‑Sense; it sharpens the boundary.
- Usage cue (informative) — a clue from usage (collocational patterns, paraphrases, entailments in the canon) that suggests merge or split. Cues do not decide; the canon’s intent does.
Solution — how to think the clustering (notation‑free)
What follows are mental moves, not steps for a team. Use them as probes until the Context’s usage partitions itself naturally.
6.1 Consolidate aliases into one Local‑Sense. If Units differ only by orthography, abbreviation, or canon‑blessed synonymy and are used interchangeably in the Context’s own sentences, treat them as one Local‑Sense. Example (ITIL): service‑level‑objective and SLO → one Local‑Sense.
6.2 Split on incompatible selectional frames. If the same head pairs with different kinds of arguments or plays different roles in the canon’s statements (and those roles cannot both be true at once), split. Example (BPMN): event as node type vs as occurrence narrative in a tutorial → two Local‑Senses; adopt the node type sense if that is the normative layer.
6.3 Split on entailments that pull apart. If paraphrases lead to different entailments (e.g., one implies temporality, another structural position), you have two senses. Example (PROV): activity implies time‑bounded use/generate; it cannot be the same sense as a static capability.
6.4 Prefer sense minimality. If two candidate Local‑Senses never lead to different conclusions in the Context’s own use, merge them. If they sometimes do, split them—and record a counter‑example to keep the boundary crisp.
6.5 Keep Tech label idiomatic; Plain label helpful. Tech label stays as the canon speaks; Plain label conveys the function of the sense to a careful newcomer. Neither label may broaden the sense beyond usage.
6.6 Name only as much as you will use. If a fine-grained split has no downstream consequence (Role Descriptions, tables, bridges), prefer the coarser Local-Sense.
Outputs (conceptual, not clerical)
F.3 yields, per Context:
-
A small set of Local‑Senses, each with:
- Label pair: Tech (idiomatic) - Plain (didactic).
- Sense line: one‑sentence usage statement, in the Context’s voice.
- Inside list (informative): which Units from F.2 it consolidates.
- Counter‑example (optional but powerful): a short use that must not be included.
-
A SenseCell address for each Local‑Sense: (Context, Local‑Sense).
These are thinking reference points (cognitive only), not records or files. Later patterns cite SenseCells by name; nothing about storage is implied.
Invariants (normative, lightweight)
- context‑locality. Every Local‑Sense belongs to exactly one context. No Cross‑context clustering.
- Parsimony. Local‑Senses are few; prefer the coarsest partition that preserves the canon’s distinctions.
- Idiomatic Tech. The Tech label must stay in the Context’s idiom; no house‑style overrides.
- Didactic Plain. The Plain label must aid comprehension without adding scope.
- Usage‑first. Sense lines reflect the canon’s usage, not imported taxonomies or external theories.
- Counter‑examples rule. If a counter‑example exists that the sense would wrongly include, split.
- No behaviour math. Sense lines contain no behavioural, deontic, metrological, or type calculus; those live in Part C.
- Temporal honesty. If the Context fixes DesignRunTag, the sense line respects it (e.g., PROV activity is run‑time).
Self‑checks (mental probes)
- Same‑conclusion test. Do two candidate senses ever lead to different conclusions in the canon? If not, merge.
- Argument‑slot probe. Replace arguments in canonical sentences; do both candidates still read true? If one fails, split.
- Label inversion. Read the Plain label alone: does it tempt you to over‑generalise? If yes, tighten it.
- Counter‑example ping. Can you state a ten‑word use that the sense must exclude? If you can, write it; if you cannot, your sense may be too broad.
- Memory rule. Can you recall the Context’s Local‑Senses without notes? If not, you split too finely.
Anti‑patterns & remedies
Local‑Sense Cards (one‑glance form)
A Local‑Sense Card is a one‑glance sketch per sense in a Context. It teaches faster than prose lists and keeps senses crisp.
Fields (thought‑items, not fields to fill):
- Context (U.BoundedContext, edition)
- Label pair — Tech (idiomatic) - Plain (didactic)
- Sense line — one sentence in the Context’s voice
- Inside — which F.2 Units it consolidates (names only)
- Counter‑example — a short use that must not be included
Worked examples (all intra‑Context)
BPMN 2.0 (workflow Context)
Card A — “process (graph)”
- Label: Tech process - Plain workflow graph
- Sense line: A BPMN graph of flow nodes and sequence flows specifying orchestration among participants (design‑time).
- Inside: process, process model, business process (when used as diagram).
- Counter‑example: “This process took 5 minutes” ← runtime occurrence, not this sense.
Card B — “event (node‑type)”
- Label: Tech event (node) - Plain event symbol
- Sense line: A node-type that marks starts, ends, and intermediates; typed by trigger and result.
- Inside: start event, message event, end event.
- Counter‑example: “The outage event happened at 13:05” ← narrative occurrence, not the node‑type.
Outcome: “Process uptime” is rejected as a BPMN sense; Execution belongs to another Context.
PROV‑O (provenance Context)
Card C — “activity (run)”
- Label: Tech activity - Plain time‑bounded execution
- Sense line: An occurrence that uses and generates entities; linked to agents; has start/end.
- Inside: activity, execution (when PROV authors use it).
- Counter‑example: “Sorting algorithm” ← capability/method, not an occurrence.
Card D — “agent (provenance)”
- Label: Tech agent - Plain provenance actor
- Sense line: Thing that bears responsibility for an activity’s effects (person, org, software).
- Inside: agent.
- Counter‑example: “RBAC role” ← access status, not a PROV agent.
ITIL 4 (services Context)
Card E — “service‑level objective”
- Label: Tech SLO - Plain service target
- Sense line: A target value/range for a service characteristic used to define acceptable service.
- Inside: service‑level objective, SLO.
- Counter‑example: “Actual availability 99.5%” ← observation, not the target.
Card F — “incident”
- Label: Tech incident - Plain service disruption
- Sense line: An unplanned interruption or reduction in quality of a service.
- Inside: incident.
- Counter‑example: “Fault in plant sensor” ← Sys‑CAL fault; different Context.
SOSA/SSN (sensing Context)
Card G — “observation (act)”
- Label: Tech observation - Plain measurement act
- Sense line: An act applying a Procedure to a FeatureOfInterest to yield a Result for a property.
- Inside: observation.
- Counter‑example: “Temperature is 20 °C” ← result value, not the act.
OWL 2 (types Context)
Card H — “subclass‑of”
- Label: Tech subclass‑of (⊑) - Plain is‑a (class)
- Sense line: A class inclusion: every instance of C is an instance of D.
- Inside: SubClassOf, is‑a (when authors use it for classes).
- Counter‑example: rdf:type (instance‑of) — not class inclusion.
Card I — “equivalent‑class”
- Label: Tech equivalent‑class - Plain same class extension
- Sense line: Mutual class identity by extension; two labels for the same set of instances.
- Inside: EquivalentClasses.
- Counter‑example: owl:sameAs (individual identity), different predicate.
IEC 61131‑3 (control‑runtime Context)
Card J — “task (runtime)”
- Label: Tech task - Plain program runner
- Sense line: A cyclic or event‑driven execution unit that invokes programs on schedule or trigger.
- Inside: task.
- Counter‑example: “Control algorithm” ← design/method, not the runtime task.
Reasoning primitives (judgement schemas, notation‑free)
Each schema captures a safe mental move. It implies no storage, API, or workflow.
-
Alias‑to‑sense consolidation
Context C ⊢ interchangeable(U₁,…,Uₖ) ⇒ Local‑Sense σReading: If Units are used interchangeably by the canon in C, consolidate them into one Local‑Sense σ. -
Selectional‑frame split
C ⊢ frames(U) = F, frames(V) = G, F ∩ G = ∅ ⇒ split(U,V)Reading: In C, if the argument/role patterns do not overlap, treat as different senses. -
Entailment divergence
C ⊢ entail(U) ≠ entail(V) on canonical paraphrases ⇒ split(U,V)Reading: If paraphrases lead to different conclusions in the canon, split. -
Parsimony merge
C ⊢ no‑test distinguishes {U₁,…,Uₖ} ⇒ merge(U₁,…,Uₖ)Reading: If no canonical test yields a difference, merge into one sense. -
Counter‑example trigger
C ⊢ ∃e: e should not be covered by σ ⇒ refine(σ)Reading: A crisp counter‑example forces a narrower sense (split or relabel). -
Idiomatic Tech, faithful Plain
C ⊢ labelTech(σ) in idiom(C) ∧ labelPlain(σ) ⊆ usage(σ)Reading: Tech label speaks the canon; Plain label does not widen the sense. -
SenseCell address
C ⊢ σ ⇒ SenseCell ⟨C,σ⟩Reading: Pair each Local‑Sense with its Context to form an address used downstream. -
Temporal guard
stance(C)=design ⇒ forbid(run‑claims in σ)(and symmetrically) Reading: Sense lines must not cross the Context’s DesignRunTag. -
Edition guard
C≠C′ (different editions with usage shift) ⇒ no‑merge(σ@C, τ@C′)Reading: Do not merge senses across Contexts when editions shift usage. -
Completeness ping (optional)
frequent head w in C ∧ no Local‑Sense on w ⇒ consider(sense for w)Reading: If a common head lacks a sense, you may be missing a useful consolidation (within C).
Relations
Builds on: F.1 Domain‑Family Landscape Survey (Contexts fixed); F.2 Term Harvesting (Units ready); E.10.D1 D.CTX (Context discipline); A.7 Strict Distinction.
Constrains:
- F.4 Role Description. Role Descriptions cite SenseCells; they do not invent senses.
- F.7 Concept‑Set Table. Rows are built from SenseCells (later Cross‑context assembly); intra‑Context clarity here prevents row bloat.
- F.8 Mint or Reuse Decision. Decisions compare proposed names to existing SenseCells to avoid type inflation.
- F.9 Alignment & Bridge. Bridges connect SenseCell ↔ SenseCell across Contexts; F.3 provides the stable endpoints.
Is used by. Part C Extention Patterns to ground examples and invariants in Context‑true language.
Migration notes (conceptual)
- Usage clarifies → merge. If two Local‑Senses never lead to different conclusions in the Context’s canon, merge and keep the narrower sense line.
- Usage diverges → split. If new reading reveals incompatible roles/entailments, split and attach a counter‑example to each side.
- Edition change → new Context. When a new edition reframes usage, treat it as a separate Context (F.1) and re‑cluster there.
- Label upkeep. If the Plain label tempts broadening, tighten it; if the Tech label drifts from idiom, restore the canon term.
- Dormant sense. If a Local‑Sense ceases to matter for any active line, leave it listed but mark it low‑use in your own notes; do not fold it into another unless rule 1 holds.
- Bridge temptation. Record tensions to bridge elsewhere; F.3 never resolves Cross‑context relations.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR‑F3‑S01 (context‑locality). Every Local‑Sense is paired with exactly one context; no Cross‑context clustering appears.
- SCR‑F3‑S02 (Label pair). Each Local‑Sense has Tech (idiomatic) and Plain (didactic) labels; neither widens usage beyond the sense line.
- SCR‑F3‑S03 (Sense line fidelity). Each sense line is grounded in canonical statements of the Context; no behaviour/deontic/math content.
- SCR‑F3‑S04 (Parsimony). The set of Local‑Senses per Context is small enough to recall unaided by a careful mind.
- SCR‑F3‑S05 (Counter‑example presence). For any ambiguous head, at least one counter‑example is recorded to guard the boundary.
- SCR‑F3‑S06 (Temporal honesty). Where the Context has a declared stance, sense lines respect the DesignRunTag.
Regression (RSCR)
- RSCR‑F3‑E01 (Merge soundness). Every merge is justified by a failed distinction test (no selectional or entailment difference).
- RSCR‑F3‑E02 (Split necessity). Every split cites a role/entailment conflict or a concrete counter‑example.
- RSCR‑F3‑E03 (Edition guard). No Local‑Sense spans Contexts that differ by edition with usage shift.
- RSCR‑F3‑E04 (Label stability). Changes to labels do not change sense; if they do, the change is treated as a split/merge per E01/E02.
- RSCR‑F3‑E05 (Downstream continuity). After splits/merges, SenseCell references in F.4/F.7/F.9 remain referentially clear (new addresses are explicit; no silent aliasing).
Didactic close (60‑second recap)
Within one context, collect how the canon actually uses a head, not how we wish it did. Merge aliases that never lead to different conclusions; split uses that do. Give each consolidated use a crisp Tech label in the Context’s idiom and a faithful Plain label. The pair (Context, Local-Sense) is your SenseCell—the address later cited by Role Descriptions, tables, and bridges. No Cross‑context mergers here; that job belongs to F.9. Keep senses few, boundaries sharp, and labels honest.
F.3:End
Role Description - Description Episteme for U.Role
Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative
Use This When
Plain name. Role-description episteme.
Use this pattern when a project needs a short, reusable description that makes one work-facing U.Role recognizable, teachable, and checkable inside one U.BoundedContext.
Typical moments:
- a project has a role name such as
ReviewerRole,OperatorRole,InspectorRole,TransformerRole,ShipyardCoordinatorRole, orModelCardReviewerRole, but the bounded context, admissible holder kind, role invariants, capability expectations, or work-facing boundary are unclear; - a method description names required roles, but readers cannot tell what role value is required before a
U.RoleAssignmentcan be checked; - a role name is starting to carry method, capability, work, permission, evidence, publication, or status claims that belong to neighboring patterns;
- a former source phrase says that a report, standard, dataset, theorem, dashboard, publication, or requirement has a "role" and the text must decide whether that phrase is a real work-facing role description or a direct episteme-use relation.
Primary EntityOfConcern. The EntityOfConcern is the role-description episteme: a U.Episteme that describes one U.Role value in one bounded context. It is not the role value itself, not the holder, not a role assignment, not a capability, not a method description, not performed work, not a status-use relation, and not a publication form.
Primary working reader. The first reader is an engineer-manager, analyst, method author, or pattern author who must let people recognize a role while keeping role value, holder, assignment, capability, method, work, evidence use, status use, and publication use distinct.
First useful move. Name the role value being described, the bounded context that gives it meaning, the kind of holder admitted for role assignment, and the smallest set of role invariants that matters for the next assignment, method, work, naming, or bridge claim.
What goes wrong if missed. A role-description card becomes a hidden method, access policy, permission badge, evidence relation, status assertion, staffing plan, or work log. Then FPF grows one role ontology for acting holons and a second role-like ontology for epistemes, publications, statuses, and relation positions.
What this buys. A project can publish a compact, human-readable role description while keeping operational claims in their direct patterns. The role remains recognizable; the assignment remains checkable; capability, method, work, evidence, status, and publication claims stay inspectable instead of being smuggled into the role name.
Not this pattern when.
- If the current claim is the role value itself or role taxonomy, use
A.2. - If the current claim is which holder bears which role in which context and window, use
A.2.1. - If the current claim is role state or enactable-state admission, use
A.2.5. - If the current claim is role-requirement substitution, role incompatibility, role-factor qualification, or bundle expression, use
A.2.7. - If the current claim is capability, use
A.2.2. - If the current claim is method, method description, work plan, or performed work, use
A.15and its neighbors. - If the current claim is evidence use, status use, source use, standard use, requirement use, publication use, assurance use, gate use, or decision use of an episteme, use the direct pattern for that relation. Do not call that episteme a role holder.
- If the current issue is only a durable name, use
F.18. - If the current issue is cross-context sameness or translation, use
F.9. - If "role" means a relation position, use
A.6.5SlotSpec discipline.
Problem Frame
Role descriptions are useful because a role value needs a recognizable description before people can assign it, name it, compare it, or use it in a method requirement. A role such as InspectorRole is not self-explanatory. The project needs to know which bounded context gives it meaning, what kind of holder can bear it, which role invariants matter, and which neighboring checks may become current.
The recurring failure is to make the role description carry too much. A compact card is tempting: put role, status, permission, evidence, capability, method, assignment, work, and publication cues into one "assignable" template. That looks convenient but creates duplicate ontology. A standard used as a requirement source becomes a "standard role"; a report used as evidence becomes an "evidence role"; an access-control label becomes a behavioral role; a role name becomes proof of capability or proof that work occurred.
F.4 therefore treats a role description as a description episteme about a work-facing U.Role. It may mention neighboring relations, but it does not absorb them.
Problem
Without this pattern:
- Role description and role value collapse. The description is treated as if it were the
U.Rolevalue. - Role description and assignment collapse. A role name or card is treated as proof that a holder has the role.
- Role description and capability collapse. A role name is treated as evidence that the holder can do the work.
- Role description and method collapse. Role invariants become a hidden procedure or method description.
- Role description and performed work collapse. A role card is treated as evidence that work happened.
- Status and evidence uses become roles. Epistemes, publications, standards, datasets, and claims are put into role language because they are used in project reasoning.
- Relation positions become roles. Slot positions in signatures, interfaces, evidence relations, or status-use relations are called roles.
- Cross-context labels overreach. The same role-like word in two contexts is treated as one role description without a bridge.
Forces
Solution
Use a role-description episteme to describe one U.Role in one bounded context. The description gives readers enough to recognize and check the role, while sending neighboring claims to their governing patterns.
This is a description episteme shape, not a new assignment relation. Its publication may be a card, table row, method appendix, standard clause, or pattern section. The publication form is not the role description by default; it publishes or carries the description episteme.
Core Slot Meanings
The slot list is an open-world discipline. A quick local description may fill only the role, context, recognition text, holder admission, and non-role boundary. A safety-critical work-admission use may need role-state, capability, method, assignment-window, and evidence references through neighboring patterns.
Role Description vs Neighboring Values
Keep these distinctions:
F.4 may point to these patterns; it does not copy their ontology.
Positive Construction Rule
Write a role description in this order:
- Name the described
U.Roleand bounded context. - State the admitted holder kind for role assignment.
- Give one short recognition paragraph.
- List the role invariants that make the role different from neighboring roles.
- State the non-role boundary: what this description does not say about assignment, capability, method, work, evidence, status, permission, publication, or slot positions.
- Add neighboring references only when the current use depends on them.
- If the name is durable, public, cross-context, or Core-facing, settle it through
F.18; if the sense crosses contexts, useF.9.
Invariants
- One described role. A role description describes exactly one
U.Rolevalue in the current application. - One bounded context. The role description is local to one
U.BoundedContext; cross-context reuse needsF.9. - Description boundary. The role description is a
U.Episteme; it is not the role value, assignment relation, holder, capability, method, work, or status-use relation. - Work-facing holder boundary. The holder admitted by a role assignment is a system or acting holon admitted by the governing work or method pattern. An episteme is not a role holder because it is used as evidence, source, standard, requirement, definition, explanation, status bearer, publication, or assurance input.
- No hidden capability. Capability requirements may be referenced, but the role description does not prove capability.
- No hidden method. Method requirements may be referenced, but the role description is not a method description.
- No hidden work. A role description may enable work attribution checks, but it is not evidence that work occurred.
- No status-template fusion. Status-use and evidence-use relations are direct relations, not a second branch of role description.
- Slot discipline. If a source says "role" for a relation position, recover
SlotKind,ValueKind, andRefKindthroughA.6.5. - Name after meaning. Durable naming follows
F.18only after role value, context, and local sense are recovered.
Reasoning Primitives
Use these judgement schemas as thinking checks.
Worked Cases
Pump Inspector Role
The description makes PumpInspectorRole recognizable. It does not say that Robot-7 holds the role, can inspect, followed the method, or performed work. Those claims go to [A.2.1](/generated/patterns/A.2.1), [A.2.2](/generated/patterns/A.2.2), [A.15](/generated/patterns/A.15), and evidence patterns.
Reviewer Role and Review Report
ReviewerRole in PatternReview_2026 may have a role description with invariants about checking a pattern against declared scales. A review report produced by a reviewer is an episteme used as evidence or source for a pattern-quality claim. The report is not the role holder and does not hold an evidence role.
Use:
A.2forReviewerRole;F.4for the role-description episteme;A.2.1forAlice#ReviewerRole:PatternReview_2026@Window;A.15.1for the review work occurrence;A.10,B.3,G.6, or a direct evidence-use pattern for the review report as evidence.
Standard Used as Requirement Source
The sentence "ISO 42010 has the architecture-standard role in this work" is unsafe if it makes the standard a role holder.
Repair it as:
Only a system or acting holon can hold a work-facing role. The standard may constrain, evidence, or source a claim through direct episteme-use relations.
Access Role Is Not Automatically Work-Facing Role
RBAC "role" often names a permission grouping. If the current claim is permission or access standing, use the status, policy, or deontic governing pattern. Do not describe it as U.Role unless the bounded context explicitly introduces a work-facing role value and the holder, assignment, method, and work claims are current.
Anti-Patterns and Repairs
Consequences
Benefits.
- Role descriptions become short enough for practical use while preserving ontology.
- Part F naming and bridge patterns can rely on role descriptions without inheriting assignment, capability, method, work, evidence, or status claims.
- Episteme-use relations stay direct and do not become a parallel role ontology.
- Method and work checks can cite role descriptions without treating them as work evidence.
Costs.
- Former "role-or-status template" material must move to F.10, A.2.4, B.3, A.10, E.17, G.6, or direct use patterns.
- A stronger claim may require several neighboring patterns instead of one overloaded role card.
- Durable names require
F.18when the role name is public, Core-facing, or cross-context.
SoTA-Echoing and Source-Use
Current best-known pressure for this problem is not a larger universal role taxonomy. It is explicit separation of local role value, assignment, attributes or capability, permission or policy standing, performed work, and evidence or status use. RBAC, ABAC, zero-trust authorization, safety independence practice, method engineering, and FPF slot discipline all push in that direction, while F.4 keeps only the role-description episteme and hands the neighboring claims to direct patterns.
Currentness and reopen condition: reopen this pattern when A.2, A.2.1, A.2.5, A.2.7, A.15, A.6.5, C.2.1, F.9, F.10, F.18, or the accepted episteme-use and status-use discipline changes enough that role-description, holder admission, or non-role-use boundaries would be stated differently.
Relations
Builds on. A.2, A.2.1, A.6.5, A.7, C.2.1, E.10.D2, and E.24.
Coordinates with. A.2.2, A.2.5, A.2.7, A.15, A.15.1, A.15.2, F.9, F.10, F.14, F.15, F.18, evidence-use, status-use, source-use, publication-use, requirement-use, and assurance patterns.
Constrains.
F.5must name role descriptions after the describedU.Role, bounded context, and local sense are recovered.F.8must decide durable role-name minting or reuse without turning status-use or episteme-use relations into role descriptions.F.14must treat bundles and separation-of-duties as role relation structure or neighboring role-description claims, not as hybrid role descriptions.F.15must check role-description single-role and non-role-use boundaries.
Conformance Checklist
Phrasebook
Prefer:
- "role-description episteme describing
ReviewerRoleinPatternReview_2026"; - "holder admission for
ReviewerRoleis governed byA.2.1"; - "capability requirement referenced by the role description";
- "method requirement referenced by the role description";
- "review report used as evidence for the claim";
- "standard used as requirement source";
- "relation position governed by SlotSpec discipline".
Avoid as live vocabulary:
- "evidence role" for an episteme;
- "status role" for a badge or status-use relation;
- "standard role" for a standard used as source;
- "holder" for a publication, report, standard, dataset, or theorem unless a direct pattern admits an acting holon holder;
- "role" for a SlotKind;
- "role description" for a method, capability, work record, access policy, or status-use relation.
Didactic Memory
A role description is the readable episteme that tells people what a role value means in a bounded context. It helps someone assign, check, name, or compare the role. It does not assign the role, prove capability, define the method, perform the work, grant permission, carry evidence, publish itself, or turn every useful episteme into a role holder.
F.4:End
Naming Discipline for U.Type Names and RoleDescription Labels
Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative
Use This When
Plain name. Meaning-first naming discipline.
Use this pattern when a project needs a durable name for either:
- a
U.Typeor other cross-context concept admitted through a Concept-Set row; or - a label used by a role-description episteme for one work-facing
U.Rolein oneU.BoundedContext.
Typical moments:
- a Concept-Set row has enough witnesses to admit a reusable FPF name, but the candidate names import one source tradition too strongly;
- a role-description episteme names a role such as
ReviewerRole,OperatorRole,InspectorRole, orTransformerRole, and the label must stay faithful to the bounded context without smuggling capability, permission, method, work, evidence, or status; - a role-like external phrase must be named for local use, but the project has not yet decided whether it is a work-facing
U.Role, a status-use relation, an access or policy term, a relation slot, or only a local phrase; - two similar names threaten to make a
U.Type, aU.Role, a status value, a method, and a work occurrence look like one object.
Primary EntityOfConcern. The EntityOfConcern is the naming discipline for these two name families. It governs the relation between a recovered meaning and its Tech and Plain labels. It does not define the named U.Type, does not define the described U.Role, does not assign a holder to a role, does not assert status, does not provide evidence, and does not make a publication form authoritative.
Primary working reader. The first reader is an engineer-manager, analyst, pattern author, or terminology steward who already has a candidate meaning and must choose a name that remains usable by readers without creating a second ontology.
First useful move. Before choosing the label, recover the named value kind and its source of meaning: Concept-Set row for a U.Type; role-description episteme, described U.Role, bounded context, and local sense for a role label. Then choose Tech and Plain labels whose morphology matches that kind and whose scope does not exceed the recovered meaning.
What goes wrong if missed. Names become arguments. A role label starts implying permission or capability. A status phrase becomes a role. A U.Type name imports one context's private ontology. A pretty global word hides that the Concept-Set witnesses do not agree. Downstream patterns then repair "semantics" that were actually broken at naming time.
What this buys. Readers can use short names without guessing the ontology. U.Type names stay neutral across their witnesses. RoleDescription labels stay local to their bounded context and point to work-facing roles. Status, evidence, access, requirement, source, publication, assurance, and gate names remain governed by their direct patterns instead of becoming "roles" by naming accident.
Not this pattern when.
- If the current problem is ordinary phrase repair rather than a durable name, use
E.10,E.10.ARCH,A.6.P, or the direct governing pattern. - If the current issue is the broader local-first naming protocol, Name Cards, candidate fronts, lineage, or public naming governance, use
F.18. - If the current issue is a role-description episteme itself, use
F.4. - If the current issue is role assignment, holder, context, window, or performed-work attribution, use
A.2.1. - If the current issue is status classification, use
F.10or the direct status-use pattern. - If the current issue is evidence, source, standard, requirement, publication, assurance, gate, or decision use of an episteme, use the direct pattern for that relation.
- If "role" means a relation position, use
A.6.5SlotSpec discipline. - If cross-context sameness or translation is current, use
F.9.
Problem Frame
FPF needs names that humans can use without dragging the wrong ontology behind them. A good name is short enough to be used in documents and conversations, but it is not free-floating. It belongs to a recovered meaning.
This pattern keeps two recurrent naming families separate.
First, a U.Type or similar cross-context concept gets its name from a Concept-Set row. The name should be neutral with respect to the witnesses and should name the least shared kind that the row actually admits.
Second, a role-description episteme labels one work-facing U.Role in one bounded context. The label should fit the local idiom and make the role recognizable. It should not make a holder assignment, capability, method, work occurrence, status, evidence relation, permission, publication, or relation slot look like part of the role value.
The tempting shortcut is to make "Role Description" cover both roles and statuses because both need labels. That is convenient wording, but it creates duplicate ontology. Statuses and evidence uses need names too; they do not become roles because they are named.
Problem
Without this pattern:
- Context-local terms look global. A name such as
Observation,Activity, orProcessis promoted to aU.Typename even though it carries one witness tradition's private commitments. - Role names become hidden assignments. A label such as
ReviewerRoleis treated as proof that someone holds the role. - Role names become capability claims. A holder is assumed able because the role label sounds competent.
- Role names become methods. A noun label hides a method or method family.
- Status names become roles.
Approved,AccessRole,ModelFitEvidenceRole, orRequirementRolebecomes a role-name family instead of a status-use, evidence-use, access-policy, requirement-use, or source-use relation. - Relation positions become roles. Signature or interface slot names borrow role morphology and collide with
U.Role. - Names carry editions or contexts. Labels such as
Task-IEC61131orParticipant-BPMNfossilize provenance inside the label instead of using Context, SenseCell, or Concept-Set evidence. - Aliases become silent renames. Several labels circulate for one meaning without lineage or bridge discipline.
Forces
Solution
Name after meaning. For each candidate name, first recover the named value, its meaning source, and its intended use. Then choose labels that preserve that meaning.
This record is not a registry requirement. It is the smallest relation a reader should be able to reconstruct from the pattern text, a Name Card, a table row, or a role-description episteme when the name is used.
Name Families Governed Here
Tech and Plain Labels
Use two human-facing labels when the name is durable enough to be reused:
For a role-description label, the Tech label may be an agentive noun, local role term, or role phrase such as ReviewerRole, PumpInspectorRole, Participant, or Approver. The suffix Role is a disambiguator, not a universal law. Use it when it prevents confusion with a status, method, work occurrence, organization unit, publication, or access-policy term. Do not add it merely to make the name look formal.
For a coupled role-method label, recover the role expression and the method value or work value separately before naming. RoboticsEngineerRole may be a durable Tech label for a robotics-qualified engineering role value. RobotEngineeringMethod names a method or method family. The ordinary label "engineer-roboticist" can be useful when the context makes the coupled role-method meaning recoverable, but it must not replace the method record or work record.
For a U.Type, the Tech label should be neutral enough that no witness context wins by vocabulary alone. If witnesses disagree between Observation, Reading, and MeasurementResult, the admitted name may be Result, Reading, or another head only if the Concept-Set row admits it by value.
Positive Naming Rules
Use these rules when choosing or checking a name.
- Recover kind first. State whether the named value is a
U.Type,U.Role, role-description episteme, role-relation expression, method, work, status-use value, evidence-use relation, relation slot, lens description, or another named kind. - Recover meaning source. Use Concept-Set row for
U.Type; role-description episteme and bounded context for role labels;A.2.7for role-relation expressions;A.3.1,A.3.2,A.15,G.5, or a direct method-composition pattern for method, method-family, method relation structure, or work names; direct governing pattern for statuses, evidence, source, requirement, publication, assurance, gate, decision, and relation slots. - Use minimal generality. The name's scope stays no wider than the admitted invariants.
- Keep context out of the label string. Context, edition, source, and witness provenance belong in Context, SenseCell, Concept-Set row, or Name Card fields, not inside the main label.
- Make morphology kind-sensitive. Agentive role names fit work-facing roles. State or level forms fit statuses. Verbal or gerund forms fit methods only when the method pattern admits them. Slot names should say
Slot,Argument,Endpoint, or another declared slot or position head when current. - Keep coupled role-method names typed. A phrase like "engineer-roboticist" may be the ordinary label for a qualified role expression; "robot engineering" may be a method or work name. Do not make one label carry holder assignment, role value, method, work, and capability at once.
- Do not encode thresholds or windows in the name. Put time, state, threshold, capability envelope, or admission window in the governing pattern.
- Use aliases only with lineage. A source term, previous term, symbol, or translation can be an alias; it does not create a second Tech label.
- Escalate when reuse becomes public or cross-context. Use
F.18,F.17, andF.9when the name crosses local use, public publication, or context boundary.
Neighboring Use Boundary
When a label contains a tempting word, recover the current claim instead of replacing words mechanically.
The name is admitted only after this recovery. A cleaner string is not a repair if it hides the same kind error.
Archetypal Grounding
Cross-Context Type Name
A Concept-Set row compares:
- SOSA
Observation; - metrology
measurement result; - ML practice
metric reading; - a dashboard value exported for subsequent comparison.
The row does not justify naming the U.Type Observation merely because one source tradition uses that word. It also does not justify DashboardValue if the dashboard is only one publication form. A name such as Reading or Result is admissible only if the row shows the shared invariant: produced value or record admitted for comparison in the declared context.
Work-Facing Role Label
In PlantMaintenance_2026, the role-description episteme describes PumpInspectorRole.
The label helps readers identify the role. It does not say Robot-7 holds the role, can inspect pumps, followed the inspection method, or produced an admissible report.
Evidence Use Is Not a Role Name
Source text may say ModelFitEvidenceRole. The repair is not to invent a prettier role name. The project first recovers the current claim: a dataset, report, or model-output episteme is being used as evidence for a target claim under a scope, polarity, relevance window, assurance use, weight model, and provenance constraints.
The durable name, if needed, is a name for that evidence-use relation or status-use value under the direct governing pattern. It is not a work-facing U.Role and not a RoleDescription label.
Relation Position Is Not a Role Name
In a relation signature, "provider role" may mean "the provider argument position". F.5 does not make ProviderRole a U.Role name. Use A.6.5 to recover ProviderSlot, its admitted ValueKind, and its reference mode. If a provider system also has a work-facing role in a method, that is a separate U.Role/U.RoleAssignment claim.
Bias-Annotation
This pattern protects against four naming biases.
- Semio-bias. A name, card, table row, publication, or source label is mistaken for the named value or for authority to use it.
- Role-bias. Useful relation words such as evidence, status, access, source, requirement, or argument position are put into
Rolelanguage because role words sound familiar. - Source-vocabulary capture. One source context's term becomes the FPF Tech label without proving cross-context fit.
- Suffix formalism. Adding
Role,Status,Record,Graph, orMapmakes a label look precise while leaving the kind unresolved.
The repair is always kind recovery first, label second.
Conformance Checklist
Use this checklist on each durable name governed by F.5.
| CC-F5-10 | Public or cross-context reuse invokes F.18, F.17, or F.9 as needed. |
Common Anti-Patterns and How to Avoid Them
Consequences
Good consequences:
-
durable names become shorter because the ontology is carried by the right pattern, not by compound labels;
-
role-description labels stay usable without becoming assignment, capability, method, or evidence claims;
-
U.Typenames become easier to bridge because their Concept-Set row is explicit; -
E.10 repair cases that uncover durable naming issues use the direct
F.5orF.18naming discipline instead of inventing ad hoc word replacements.
Costs:
- authors must recover kind and meaning source before naming;
- some familiar source labels cannot be promoted as FPF Tech labels;
- public or cross-context names may require
F.18,F.17, andF.9even when the local name looks obvious; - source text that used
Rolefor status, evidence, access, or relation position must be repaired by ontology, not by suffix editing.
Reopen F.5 when role-description label morphology, U.Type neutrality rules, Tech and Plain label relation, alias lineage, or cross-context naming boundaries change. Reopen neighboring patterns when the dispute is about the named object itself.
Rationale
Naming is late ontology, not early decoration. FPF can tolerate many local phrases, but durable names become references used in reasoning, search, publications, and pattern relations. If a name is wrong, subsequent users inherit a false kind claim.
The key design choice is to split naming by meaning source rather than by source spelling. Role in a source phrase may refer to a work-facing role, a policy term, a status label, an evidence-use relation, a relation position, or ordinary English. F.5 does not decide by suffix. It recovers the current value and then applies naming discipline.
This also keeps F.5 smaller than F.18. F.18 governs the fuller local-first naming protocol, Name Cards, candidate fronts, lineage, and public naming. F.5 supplies the special discipline needed by U.Type names and RoleDescription labels so that Part F does not preserve role and status fusion.
SoTA-Echoing and Source-Use
Source-use boundary: external labels are evidence for local meaning or common practice, not automatic FPF Tech labels. A source term becomes the selected label only after the governing Concept-Set row, role-description episteme, or direct relation pattern admits it.
Relations
Builds on. A.2, F.4, F.7, F.18, E.10, and E.10.ARCH.
Coordinates with. A.2.1 for role assignment; A.2.2 for capability; A.2.5 for role state; A.2.7 for role relation structure and role-algebra lens use; A.6.5 for relation-slot names; A.15 for role-method-work alignment; F.8 for mint-or-reuse; F.9 for cross-context bridges; F.10 for status mapping; F.13 for aliases and continuity; F.14 for anti-explosion; F.15 for harness checks; F.17 for public term-sheet use.
Used by. Part F unification patterns, role-description authors, Concept-Set authors, E.10 repairs that uncover naming rather than only phrase-use issues, and any FPF pattern that creates a durable local name for a U.Type or work-facing role label.
Does not replace. Direct evidence-use, status-use, requirement-use, source-use, publication-use, assurance, gate, decision, relation-signature, method, work, or architecture patterns.
Footer Marker
F.5:End
RoleAssignment and Performed-Work Attribution Check
Type: Boundary and use pattern Status: Stable Normativity: Normative unless marked informative
Use This When
Plain name. Role-assignment and work-attribution check.
Use this pattern when a project has a role description, role label, assignment notation, or work record and needs to decide whether it can make a work-facing U.RoleAssignment claim or attribute performed work through that assignment.
Typical moments:
- a method description names
ReviewerRole,OperatorRole,InspectorRole,TransformerRole, or another required role, and the project must decide which holder bears that role in the bounded context; - a work record says "Alice reviewed", "Robot-7 inspected", "the operations team approved", or "the CI service deployed", but the holder, role, bounded context, assignment window, or performed-by relation is not explicit;
- a source text uses
Holder#Role:Context@Window,RoleEnactment, "assigned role", "played role", or "acted as" and the project must recover the typed assignment relation rather than preserve source notation as ontology; - a status, evidence, requirement, source, standard, dashboard, model card, publication, or report is being described with role language, and the project must decide that this is not a work-facing role assignment;
- a cross-context role-like word appears, and the project must keep the local role assignment separate from any
F.9bridge orF.5naming question.
Primary EntityOfConcern. The EntityOfConcern is the role-assignment and performed-work attribution check: a bounded check over a candidate U.RoleAssignment and, when current, a U.Work occurrence that may cite that assignment through Work.performedBy or RoleEnactmentFact. The check is not the role value, not the role description, not the work occurrence, not a status assertion, not evidence, and not a publication form.
Primary working reader. The first reader is an engineer-manager, analyst, method author, or FPF author who must keep a role label, role description, assignment relation, method requirement, work occurrence, status-use relation, and evidence-use relation from becoming one under-typed "enactment" claim.
First useful move. Recover the candidate holder, role value, bounded context, and assignment window or window disposition. Then decide whether the current claim is only assignment admission, performed-work attribution under an assignment, or a status, evidence, source, or publication claim governed outside F.6.
What goes wrong if missed. A role description becomes proof that a holder has a role. A work record names a person or label but not the role assignment that made the work attributable. A report, standard, requirement, or dashboard is made into a role holder because it constrained, evidenced, justified, displayed, or described work. Source U.RoleEnactment wording grows back into a second run-time ontology beside U.Work and U.RoleAssignment.
What this buys. The reader gets one small local check: who or what can bear the role, in which context and window, and whether a specific work occurrence may be attributed through that assignment. Status, evidence, source, publication, method, capability, and bridge claims remain with their direct patterns.
Not this pattern when.
- If the current claim is the role value itself, use
A.2. - If the current claim is the role-description episteme, use
F.4. - If the current claim is durable naming of a role or type label, use
F.5orF.18. - If the current claim is the
U.RoleAssignmentrelation value itself and its SlotSpecs, useA.2.1. - If the current claim is role state or enactable-state admission, use
A.2.5. - If the current claim is capability, use
A.2.2. - If the current claim is method, method description, work plan, performed work, or role-method-work alignment beyond the assignment check, use
A.15and its subpatterns. - If the current claim is status, evidence, source, standard, requirement, publication, assurance, gate, or decision use of an episteme, use the direct pattern for that relation, such as
F.10,A.10,B.3,C.28,E.17, orE.10.D2. - If the current claim is cross-context sameness, translation, or substitution, use
F.9. - If "role" means a relation position, use
A.6.5SlotSpec discipline.
Problem Frame
Role assignment sits between a role description and performed work. A role description lets a reader recognize InspectorRole or ReviewerRole; it does not assign a holder. A work occurrence may be performed by a holder under a role assignment; it is not the assignment itself. A status value, evidence relation, standard-use relation, requirement-use relation, or publication cue may constrain, evidence, qualify, or display a work-admission relation; it is not a role holder and not performed work.
A common source shape mixes these questions into one "role assignment and enactment cycle" with a status branch. That made the pattern convenient but ontologically noisy. A status assertion and a work-facing role assignment have different subjects, slots, evidence, windows, and direct governing patterns. Putting them into one cycle made status look like a kind of role assignment and made RoleEnactment look like a durable run-time object.
F.6 therefore becomes a check pattern. It asks whether the current local claim can use a recovered U.RoleAssignment, and whether a current U.Work occurrence can cite that assignment. If the current claim is status, evidence, source, publication, bridge, capability, or method, F.6 names the direct governing pattern and stops.
Problem
Without this pattern:
- Role-description proof. A role-description episteme or role label is treated as proof that a holder bears the role.
- Assignment and work collapse. A work occurrence is treated as if it were the assignment, or an assignment is treated as if work already happened.
- RoleEnactment reification.
RoleEnactmentbecomes a second durable U-kind besideU.WorkandU.RoleAssignment. - Status branch returns. Status assertions are processed as if they were the same kind of result as role assignment.
- Episteme-role drift. Standards, reports, datasets, requirements, model cards, dashboards, and publications become "role holders" because they are useful in project reasoning.
- Window and state loss. A holder-role-context statement is used for current work without saying whether assignment currentness or role-state admission matters.
- Cross-context overreach. A familiar role-like label from another canon is used to justify local assignment without a bridge.
- Notation replaces relation.
Holder#Role:Context@Windowis copied as if the string were the assignment value.
Forces
Solution
Use F.6 as a local check over candidate assignment and optional work attribution.
This check is not a new root kind. It is an application relation over values governed elsewhere. [A.2.1](/generated/patterns/A.2.1) governs U.RoleAssignment; [A.15.1](/generated/patterns/A.15.1) governs the U.Work occurrence; [F.10](/generated/patterns/F.10), [A.10](/generated/patterns/A.10), [B.3](/generated/patterns/B.3), [E.17](/generated/patterns/E.17), [E.10.D2](/generated/patterns/E.10.D2), and direct governing patterns govern status, evidence, assurance, publication, and source-use relations.
Slot Meanings
The Check Sequence
Use these questions in order. They are judgement questions, not a U.WorkPlan, registry procedure, or tool protocol.
- Role meaning recovered? Does the role label point to a
U.Rolein one bounded context, usually throughF.4andA.2? - Holder admitted? Is the candidate holder a system or acting holon admitted by
A.2.1and by the local role description? - Context and window adequate? Is the bounded context explicit, and is the assignment window filled, inherited, unknown, not asserted, or not current for the claim?
- Related prerequisites current? Does this use need role state, capability, method, method description, work plan, evidence, gate, decision, or source-currentness?
- Work occurrence current? Is there a
U.Workoccurrence to attribute? If not, stop at assignment admission or blocker. - Performed-by relation admissible? Can the work occurrence cite the assignment by
Work.performedBy = RoleAssignmentorRoleEnactmentFact? - Claim governed outside F.6? If the current claim is status, evidence, source, publication, requirement, assurance, bridge, method, capability, or gate use, apply the direct governing pattern and do not encode that claim as role assignment.
Assignment Result vs Work-Attribution Result
Keep two local results separate.
An assignment admission does not prove that work happened. A performed-work attribution does not prove that the method was valid, the capability was sufficient, the evidence is adequate, or the gate passed. Those claims use their governing patterns.
RoleEnactmentFact
Use RoleEnactmentFact only as a name for the derived fact that a work occurrence was performed under a role assignment.
Do not write U.RoleEnactment as a durable root kind. If a log, table, database row, or publication stores a role-enactment entry, treat it as a record of this fact unless a direct governing pattern admits record-as-value for that use.
Status and Evidence Claims Governed Outside F.6
Status and evidence claims often sit next to role assignment. They do not become role assignment.
Compact Notation and Shortcut Boundary
Holder#Role:Context@Window is allowed as a compact reading aid after the typed relation is recoverable.
Baseline relation:
Compact notation:
The compact notation saves reader effort in examples, tables, and short work records. It weakens the representation by hiding SlotSpec names and any current assignment justification, role state, capability, method, evidence, source, or provenance relation. Therefore it is admitted only for local reading, examples, and compact citations after the typed slots are either filled, inherited, or explicitly not current for the claim.
Do not use the compact notation as proof of assignment, proof of performed work, proof of capability, proof of method validity, proof of status, or proof of gate passage. If reliance-bearing use depends on any hidden slot, unfold the notation to the typed relation or lower the claim.
Invariants
- Role assignment is local. Every assignment check names one
U.Role, one admitted holder, and oneU.BoundedContext. - Role description is not assignment. A role-description episteme may identify the role value; it does not assign a holder.
- Assignment is not work. A
U.RoleAssignmentcan be admitted without anyU.Workoccurrence. - Work attribution is direct. Performed work cites the role assignment through
Work.performedBy = RoleAssignment;RoleEnactmentFactis only a named fact over that relation. - No durable
U.RoleEnactment. SourceU.RoleEnactmentwording is repaired to direct performed-by wording orRoleEnactmentFact. - Status is not a role branch. Status-use statements are governed by
F.10or the direct status pattern, not by F.6. - Epistemes are not role holders by use. Evidence, source, standard, requirement, definition, explanation, publication, assurance, and gate uses of epistemes go to their direct relations.
- Window honesty. If a stronger claim depends on assignment currentness, role state, or work time, missing window content lowers or blocks that claim.
- Bridge restraint. Cross-context role-like labels need
F.9; a bridge does not mutate a local assignment. - Notation restraint.
Holder#Role:Context@Windowis source or shorthand notation for a typed assignment relation, not the relation's ontology.
Reasoning Primitives
Archetypal Grounding
Robot Inspection
A maintenance line has a role-description episteme for InspectorRole. A shift note says Robot-7 inspected Pump-12.
F.6 recovers:
This does not prove the robot's sensor capability, the inspection method's adequacy, or the quality of the result. Those claims use capability, method, evidence, and assurance patterns.
Review Report and Reviewer
A review report is an episteme. The reviewer is a person, service, or team modeled as an acting holon.
The sentence "Report R has reviewer role" is repaired by asking two questions:
- Who or what performed the review work under
ReviewerRole? - How is report R being used now: as evidence, source, publication, or result?
The reviewer holder may be assigned a U.RoleAssignment. The report does not hold the role. Evidence use of the report goes to the evidence-use pattern.
Standard Used in Safety Work
A safety method description cites ISO 26262. The source phrase says that the standard has the "normative role" in the safety case.
F.6 result:
The standard is an episteme used through standard-use, source-use, requirement-use, or specification-use relations. A safety engineer or tool service may separately hold SafetyAnalystRole when performing work with that standard.
Access Label and Actual Approval Work
An RBAC directory says Alice has DB-Admin. That directory state is an access or policy status in its own bounded context. It is not automatically a work-facing ApproverRole.
If Alice approves a database migration, F.6 can check a separate assignment and work attribution:
The RBAC status may justify or constrain the approval only through the direct access, policy, evidence, source, or gate pattern that admits that use.
Bias Annotation
Conformance Checklist
Use this checklist when applying F.6.
- The candidate role is a
U.Rolein one bounded context, not only a source label. - The candidate holder is a system or acting holon admitted by
A.2.1. - The assignment window is filled, inherited, unknown, not asserted, or not current for this claim.
- If role state matters, an
A.2.5role-state admission or blocker is named. - If capability matters, an
A.2.2capability relation or blocker is named. - If method or method description matters,
A.3.1,A.3.2, orA.15is named. - If actual work is claimed, the
U.Workoccurrence is named underA.15.1. - Performed work uses
Work.performedBy = RoleAssignmentorRoleEnactmentFact, notU.RoleEnactment. - Status, evidence, source, standard, requirement, publication, assurance, gate, and decision uses are not encoded as role assignment.
- Cross-context role-like reuse is represented by
F.9and does not mutate the local assignment. - Compact notation is unfolded to typed assignment slots before reliance-bearing use.
NotCarriednames the strongest tempting overclaim that this F.6 check does not make.
Common Anti-Patterns and Repairs
Consequences
Using F.6 makes role-assignment reasoning narrower and more reliable. A project can still use compact assignment strings and familiar role words, but reliance-bearing claims must expose the holder, role, bounded context, assignment-currentness disposition, and performed-by relation when actual work is claimed.
The cost is one extra split. A source sentence that says "role enacted" may become two or three typed statements: assignment admitted, work performed by that assignment, and evidence or status relation used for downstream reliance. That split is intentional. It prevents duplicate role ontologies and makes audit, bridge, capability, method, and status checks local.
Rationale
U.RoleAssignment is first-class because work attribution needs a stable holder-role-context relation. RoleEnactmentFact is not first-class because the fact is derived from a work occurrence and its performedBy assignment. Status-use and evidence-use relations are not branches of role assignment because their EntityOfConcern and slot discipline differ: they qualify claims, epistemes, standards, requirements, publications, gates, or decisions rather than assigning acting holders to work-facing roles.
The pattern is deliberately thinner than A.15. It does not rebuild the full role-method-work alignment. It gives Part F a local check that keeps role-description, naming, bridge, status, and work-attribution uses from crossing wires.
SoTA-Echoing and Source-Use
External traditions such as RBAC, BPMN, PROV, service management, safety standards, and process-notation traditions use "role", "activity", "participant", "status", "approval", and "execution" in different ways. F.6 does not treat any one tradition as semantic authority. The FPF role-assignment ontology recovers the bounded context and local role value first; assigns acting holders only through U.RoleAssignment; represents performed work through U.Work; and represents evidence, status, source, publication, and bridge claims through their own patterns.
When a source tradition is current, cite it through the direct source-use or bridge relation. Do not let source prestige, familiar vocabulary, or a popular notation collapse FPF kinds.
Relations
Builds on: A.2 for U.Role, A.2.1 for U.RoleAssignment, F.4 for role-description epistemes, and F.5 for role and type naming.
Uses when current: A.2.5 for role-state and enactable-state admission; A.2.2 for capability; A.15, A.15.1, A.3.1, and A.3.2 for method, method description, work plan, and performed work; A.6.5 when role-like words are relation positions.
Direct governing patterns: F.10, A.10, B.3, C.28, E.17, E.17.0, E.17.2, E.10.D2, gate, decision, publication-use, source-use, standard-use, requirement-use, and assurance patterns when the current claim is not work-facing role assignment or performed-work attribution.
Coordinates with: F.9 for cross-context bridge claims; F.18 for durable public names; E.10 and E.10.ARCH for wording-use recovery when source language hides the current kind.
Footer Marker
F.6 closes when the project knows whether the current local claim is:
- an admitted or blocked
U.RoleAssignment; - an admitted or blocked performed-work attribution through
Work.performedBy = RoleAssignmentorRoleEnactmentFact; - a lowered claim with missing holder, role, context, window, role state, capability, method, work, or source-currentness;
- or a non-F.6 status, evidence, source, publication, bridge, method, capability, gate, decision, or assurance claim.
F.6:End
Concept‑Set Table
“Show one thing across Contexts—only where explicit bridges allow it.”
Status. Architectural pattern.
Depends on. E.10.D1 Lexical Discipline for ‘Context’ (Context ≡ U.BoundedContext); F.0.1 senseFamily (normative); F.1 Domain‑Family Landscape Survey; F.2 Term Harvesting; F.3 Intra‑Context Sense Clustering (SenseCells); F.5 Naming Discipline; F.9 Alignment & Bridge Across Contexts.
Coordinates with. F.4 Role Description; F.6 Role Assignment & Enactment Cycle (Six-Step); Part C patterns (for examples), MM‑CHR (for Characteristic); A.6.9 (RPR‑XCTX for repairing umbrella cross‑Context sameness/alignment prose before it justifies rows).
Aliases (informative). Concept‑Set table, comparison grid.
Intent & applicability
Intent. Provide a single, didactic page where each row presents one Concept‑Set—a set of SenseCells from different Contexts that we are licensed (by explicit Bridges) to treat as “the same for a stated scope”. Columns are Contexts; cells carry local labels. The table does not invent equivalences: it summarises already declared F.9 Bridges, exposing scope, losses, and counter‑examples at a glance.
Applicability. Use whenever cross-context reading is necessary (naming U.Types, teaching contrasts, assignment/enactment-adjacent terminology). It is a reading lens, not a data model: notation-free, governance-free, Context-loyal.
Non‑goals. No hidden merges. No “global terms”. No workflows or tool schemas. The table is a conceptual display of licensed sameness and honest non‑sameness.
Problem frame
Without a disciplined Cross‑context view:
- Silent equivalence. Readers assume sameness by name alone (e.g., process).
- Loss denial. Mappings hide what is dropped (DesignRunTag, units, agency).
- Name inflation. New U.Types are coined to avoid facing heterogeneity.
- Cognitive scatter. Concepts drift across documents without one compact, teachable “where‑what‑how‑same” view.
Forces
Core idea (didactic)
A Concept‑Set is a finite set of addresses
$$ \text{CS}={\langle \text{Context}_i,\ \text{SenseCell}i\rangle}{i=1..n} $$
that FPF treats as one for a declared scope because there exist F.9 Bridges connecting these SenseCells pairwise (directly or via a short chain) with congruence level $\text{CL}$ above a threshold suitable for that scope. The table row shows:
- FPF Label (Tech/Plain) — the didactic, FPF‑level name chosen per F.5.
- Row Scope — where “being one” is safe (e.g., Naming-only, assignment/enactment-eligibility, KD-CAL metric, Type‑structure).
- Row CL(min) — the minimum CL of the Bridges that justify the row.
- Context columns — each cell: the local label + (optional) short cue.
- Rationale (one line) — why sameness is warranted for this scope.
- Counter‑examples (one line) — where/why sameness breaks.
Memory hook. A Concept‑Set row is a promise: “You may read across these Contexts this far—and no farther.”
Minimal vocabulary (this pattern only)
- Context — shorthand for
U.BoundedContext(per E.10.D1). - senseFamily — referenced from F.0.1; not redefined here; used to type rows and to require uniformity within a row.
- SenseCell — a (Context × Local‑Sense) address from F.3.
- Bridge (F.9) — an explicit, declarative Cross‑context mapping with a congruence level CL and loss note.
- Characteristic (MM‑CHR) — measurable comparandum defined in MM‑CHR; may be referenced in Measurement/KD‑metric rows; do not use “axis” only as a euphemism.
- Concept‑Set (row) — a licensed sameness across Contexts, bounded by Row Scope and Row CL(min).
- Contrast row — a non‑sameness row: same surface across Contexts with no sufficient Bridges; teaches difference, not unity.
The table (conceptual layout)
One page. Fixed column order by Context. Each row fits in five lines max.
Reading rules (didactic):
- Cells are local. A cell is not a translation; it is the Context’s own label for its SenseCell.
- Scope is king. The FPF label only licenses sameness within its Row Scope. Outside that scope, treat cells as different.
- Row CL(min) governs trust. Lower CL ⇒ narrower applicability; never up‑scope a row without revisiting Bridges.
- Rationale & counter‑examples are obligatory one‑liners; if you need paragraphs, you need an F.9 walkthrough, not a row.
Didactic name rationale “Giants' table’” that alludes to standing on the shoulders of giants: each row explicitly leans on authoritative context of meaning (U.BoundedContext) established by prior disciplines and not imagined. It does not mean a physically large table; the name signals epistemic humility and traceable reliance on those sources. "We are like dwarfs on the shoulders of giants, so that we can see more than they, and things at a greater distance, not by virtue of any sharpness of sight on our part, or any physical distinction, but because we are carried high and raised up by their giant size." by Bernard of Chartres , d. c.1130, French philosopher.
Conceptual construction (thought moves, not workflow)
The table is derived from earlier patterns; it creates nothing new.
- Sourcing. Candidate cells come only from SenseCells (F.3).
- Licensing. A row exists iff the relevant Bridges (F.9) already justify sameness at the chosen Row Scope.
- Bounding. Prefer 2–4 Contexts per row (parsimony); add more only if each adds a distinct necessity for the sameness claim.
- Typing. A row is typed by senseFamily: Role, Status, Type‑structure, Measurement, etc. Do not mix senseFamilies in one row.
- Temporal honesty. A row’s cells must share compatible DesignRunTag; if not, either split into two rows or mark a contrast row.
Invariants (normative)
- Context‑loyal cells. Every non‑empty cell is a SenseCell address; no minted paraphrases.
- Bridge sufficiency. For a Concept‑Set row, every pair of filled cells is connected by an F.9 Bridge path whose bottleneck CL ≥ Row CL(min) printed for the row.
- Scope declaration. Each row MUST declare a Row Scope chosen from a small controlled set (e.g., Naming-only, assignment/enactment-eligibility, KD-metric, Type-structure).
- senseFamily uniformity. All cells in a row belong to the same senseFamily (Role or Status or Type-structure or Measurement…).
- Temporal compatibility. Either all cells share the same stance, or the row is a contrast row (no sameness claim).
- Loss disclosure. If any Bridge in the row has a loss note, the row MUST include a counter‑example that illustrates that loss in one line.
- No stealth expansion. Adding a new cell to a row MUST NOT lower the printed Row CL(min) without updating Row Scope or splitting the row.
- Parsimony. A row with only one filled cell is forbidden (that would be local talk, not a Cross‑context concept).
- Didactic bound. A row that cannot be read in ≤ 30 seconds violates didactic primacy and must be split.
Micro‑illustrations (safe patterns)
Illustrative only; these presume corresponding F.9 Bridges exist with stated CL and losses.
(a) Subtyping across type‑formalisms (Type‑structure row)
(b) “Observation result value” (Measurement row)
(c) Contrast row: “process” (no sameness)
Anti‑patterns & remedies
Worked examples
Each example gives a row (compact), then a reading explaining scope and limits. All sameness claims presuppose suitable F.9 Bridges with the stated CL.
Behavioural actor across Contexts (naming‑only)
Reading. The row licenses a glossary‑level sameness for didactic prose (“the actor”). It does not license modelling identity or inference across Contexts.
Execution occurrence (assignment/enactment-eligibility)
Reading. Safe to use as the run-time occurrence that U.RoleEnactment points to when we say “this Work was performed under an assignment”. Not safe to equate all PROV Activities with all PLC task runs for analytics.
Result value as KD‑metric (measurement)
Reading. Licences metric tables that join observations to service targets; warns that composite KPIs may violate unit fidelity.
Subtype relation (type‑structure)
Contrast: “role” (access vs behaviour)
Reading. This row teaches difference; it deliberately does not license sameness.
Reasoning primitives (judgement schemas, notation‑free)
All judgements are pure (no side effects). “Contexts” are
U.BoundedContext.SC(C)denotes a SenseCell in ContextC.CL(X↔Y)is the congruence level of the best Bridge path (F.9) between SenseCellsXandY(bottleneck along that path).
Row licensing
Form.
S = {SC(C₁), …, SC(Cₙ)}, Scope = s, τ(s) = requiredCL ⊢ licensable(S,s) ⇔ (∀ i<j: CL(SC(Cᵢ)↔SC(Cⱼ)) ≥ requiredCL ∧ senseFamily (S) is uniform ∧ stance(S) compatible)
Reading. A set of cells licenses a row of scope s iff every pair is bridged at or above the required CL for that scope, all cells sit in the same senseFamily, and DesignRunTag is compatible.
Bottleneck CL for a row
Form.
RowCL(S) = min_{i<j} CL(SC(Cᵢ)↔SC(Cⱼ))
Reading. The row’s CL is the minimum congruence level across all pairs (the weakest link).
Scope guard
Form.
licensable(S,s) ∧ s ⊑ s' ⊢ licensable(S,s') only if RowCL(S) ≥ τ(s')
Reading. You may tighten scope (use the row for a higher-scope purpose) only if the row’s CL meets the higher threshold for that scope.
Contrast decision
Form.
(∃ i<j: CL(SC(Cᵢ)↔SC(Cⱼ)) < τ(Naming‑only)) ⊢ publish‑contrast(S)
Reading. If even Naming‑only cannot be licensed, publish a contrast row instead of forcing sameness.
Row extension guard
Form.
licensable(S,s) ∧ add SC(Cₖ) ⊢ licensable(S∪{SC(Cₖ)}, s) iff ∀ i: CL(SC(Cᵢ)↔SC(Cₖ)) ≥ τ(s)
Reading. You may add a new cell only if it bridges to every existing cell at the row’s scope.
Loss disclosure obligation
Form.
licensable(S,s) ∧ (∃ i<j: lossNote on Bridge(SC(Cᵢ),SC(Cⱼ))) ⊢ row must carry ≥1 counter‑example
Reading. Any loss note on any supporting Bridge obliges the row to include a counter‑example one‑liner.
Relations (with other patterns)
Builds on: F.1 Contexts fixed → defines the column set; F.2 Harvest → supplies harvested terms; F.3 SenseCells → provide cell addresses; F.5 Naming Discipline → provides the two‑register FPF labels; F.9 Bridges → justify each row.
Constrains: F.4 Role Description — when a template cites an FPF label from the table, it inherits the Row Scope; no template may claim semantics beyond the row’s licence. F.6 Role Assignment & Enactment Cycle (Six-Step) — Move M‑4 (“choose label”) must reference a row if it wants Cross‑context reading.
Used by. Part C patterns for didactic alignment pages; Part B trust calculus (B.3) may consume Row CL(min) when computing translation penalties.
Migration notes (conceptual)
- Bridge update. If any supporting Bridge’s CL changes, recompute Row CL(min). If it drops below the printed value, either lower Row Scope, split the row, or retire it.
- New Context appears. Do not auto‑expand rows. Test with 12.5; add only if it brings a distinct necessity.
- Sense revision inside a Context. If a SenseCell splits (F.3), decide which child cell (if any) remains in the row; the rest may require new rows or a contrast.
- Scope promotion. To use a row for a higher-scope purpose (e.g., from Naming-only to assignment/enactment-eligibility), first ensure Row CL(min) ≥ τ(new scope); otherwise construct new Bridges or decline promotion.
- Deprecation. If a row no longer meets its invariant, mark its FPF label as retired in F.5 and point to successor rows (if any).
- Edition churn. When a Context is superseded (F.1), either keep the cell (if semantics stable) or treat the successor as a new Context and re‑evaluate licensability.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance checks (SCR)
- SCR‑F7‑S01 (Context‑loyal cells). Every non‑empty cell references an existing SenseCell (F.3) in a declared Context (F.1).
- SCR‑F7‑S02 (Closure & bottleneck). For each Concept‑Set row, every pair of cells has a Bridge path with CL ≥ Row CL(min) printed; Row CL(min) equals the minimum pairwise CL.
- SCR‑F7‑S03 (Typed & scoped). Each row declares a Row Scope from the controlled set and is senseFamily‑uniform (Role or Status or Measurement or Type‑structure…).
- SCR‑F7‑S04 (Temporal compatibility). Non‑contrast rows have compatible DesignRunTag across cells.
- SCR‑F7‑S05 (Loss disclosure). If any supporting Bridge has a recorded loss, the row includes ≥1 counter‑example line.
- SCR‑F7‑S06 (Parsimony). Rows contain 2–4 Contexts unless a one‑line necessity is stated for each extra Context.
Regression checks (RSCR)
- RSCR‑F7‑E01 (Bridge drift). After any Bridge change (F.9), recompute Row CL(min); flag rows whose scope is now overstated.
- RSCR‑F7‑E02 (Sense split). After a SenseCell splits (F.3), ensure rows referencing it either pick a child cell or retire.
- RSCR‑F7‑E03 (Scope integrity). No consumer pattern uses a row outside its declared Row Scope.
- RSCR‑F7‑E04 (No stealth growth). Additions of cells never lower Row CL(min) silently; if they do, either split the row or reduce scope.
Didactic distillation (60‑second teaching script)
“A Concept-Set row shows one idea across Contexts—but only where explicit Bridges license it. Columns are Contexts; cells are their own labels. The row prints a scope (‘Naming-only’, ‘assignment/enactment-eligibility’, ‘Type-structure’, ‘KD-metric’) and the weakest CL that justifies reading across. A one‑line rationale says why sameness is safe here; a counter‑example warns where it breaks. Keep rows small (2–4 Contexts), typed (don’t mix senseFamilies), and temporally honest (design vs run stance). If Bridges don’t suffice, publish a contrast row instead. The table doesn’t invent meaning; it summarises licensed sameness so readers can cross disciplines without smuggling assumptions.”
F.7:End
Mint-or-Reuse Decision
Type: Architectural pattern Status: Stable Normativity: Normative unless marked informative
Use This When
Plain name. Name admission decision.
Use this pattern when a project has a candidate expression and must decide whether it should stay local, reuse an existing name, become an alias, reuse a Concept-Set row, name a role-description episteme, introduce a new Concept-Set row, introduce a policy id, or become a rare U.Type candidate.
Typical moments:
- a role-like expression such as
ReviewerRole,AccessRole,EvidenceRole,RequirementRole,ProviderRole, or "actor" appears and the project must decide whether it names a work-facingU.Role, a status-use relation, an evidence-use relation, an access or policy term, a relation position, or only a local phrase; - a source tradition uses a convenient name, but the name would import one context's ontology if promoted as an FPF name;
- a Concept-Set row seems reusable, but its scope may be only naming, not substitution, role assignment, measurement, or structural inference;
- a project wants a new
U.Type, policy id, role-description label, or public term because no existing name feels comfortable; - an
E.10repair discovers that a smoother word would still hide the current kind or relation.
Primary EntityOfConcern. The EntityOfConcern is one mint-or-reuse decision for one candidate expression or proposed durable name. The pattern governs the decision relation. It does not define the named U.Type, does not describe the U.Role, does not assign a holder, does not assert status, does not provide evidence, and does not make a publication authoritative.
Primary working reader. The first reader is an engineer-manager, analyst, method author, pattern author, or terminology steward deciding whether a candidate expression deserves durable FPF treatment.
First useful move. Recover what the candidate expression is trying to name in the current bounded context. Then choose the smallest admissible decision: local phrase, alias, local name reuse, Concept-Set row reuse, RoleDescription label, direct-pattern name, policy id, new row, or rare U.Type candidate.
What goes wrong if missed. A convenient label becomes a new ontology. A source word becomes global. A status, evidence, access, requirement, source, publication, or relation-position use gets named as a role. A Concept-Set row is used beyond the scope admitted by its bridge evidence. FPF then accumulates duplicate kinds where it needed a smaller decision.
What this buys. Teams can reuse names without growing FPF by accident. Durable names become harder to mint, but easier to trust. Role expressions become work-facing role names only when the role ontology is actually current; other expressions go to their direct patterns before any durable naming.
Not this pattern when.
- If the issue is ordinary phrase repair with no durable name, use
E.10,E.10.ARCH,A.6.P, or the direct governing pattern. - If the issue is choosing a good label after the mint-or-reuse decision is already made, use
F.5for the local name family andF.18for the fuller public naming protocol. - If the issue is describing one work-facing role, use
F.4. - If the issue is assigning a holder to a role or attributing performed work, use
A.2.1,F.6, andA.15.1. - If the issue is cross-context sameness, use
F.9andF.7. - If the issue is status, evidence, source, standard, requirement, publication, assurance, gate, or decision use, use the direct pattern before naming.
Problem Frame
Name pressure is often a sign of unresolved ontology. A project wants one short expression, but the expression may stand for several different values: a local sense, a reusable row, a role-description label, a status value, a method name, a work occurrence label, a policy id, or a new U.Type candidate.
The dangerous shortcut is to decide by word form. If the word contains Role, it is treated as a role. If the word appears in two contexts, it is treated as the same concept. If a source standard uses the name, the name is promoted. If the expression is short and readable, it becomes public vocabulary.
F.8 delays naming until the current kind and use are recovered. It is the gate between local expression and durable name, not the naming style guide itself.
Problem
Without this pattern:
- Local phrases become durable names. A temporary phrase outlives its context and looks like FPF vocabulary.
- Source names capture FPF. One tradition's word becomes the selected FPF name before cross-context fit is shown.
- Role expressions become role ontology.
EvidenceRole,RequirementRole,AccessRole, orProviderRoleis promoted without checking whether a work-facingU.Roleexists. - Role names hide assignments. A RoleDescription label is treated as proof that a holder has the role.
- Concept-Set rows overreach. A row admitted for naming is reused for assignment, measurement, or structural inference.
- Aliases change meaning. A prettier label is introduced but silently changes kind, scope, or use.
- Kernel inflation follows comfort. A new
U.Typeis proposed because existing names feel awkward. - Policy ids appear as strings. A policy identifier is reused or introduced without a resolvable policy specification and decision trace.
Forces
Solution
Treat mint-or-reuse as a typed decision over a recovered candidate, not as a vote on wording. Use this compact relation:
DecisionKindSlot is a local field for the result of this pattern. It does not create a new U.* kind.
Admissible decision kinds:
localPhraseOnly;reuseLocalSenseLabel;aliasOnly;reuseConceptSetRow;nameRoleDescription;nameDirectPatternValue;introducePolicyId;proposeConceptSetRow;proposeUTypeCandidate;blockOrLowerUse.
Decision Targets
Decision Sequence
Use this order. Stop at the first result that fits the recovered kind and use.
- Recover the current claim. Name the bounded context, local sense if known, and the kind or relation being claimed.
- Split mixed candidates. If one expression covers role, status, evidence, work, method, measurement, or structure at once, split it before deciding.
- Check local reuse. If one bounded context already has the needed local sense, reuse its label inside that context.
- Check role expression. If the candidate describes one work-facing
U.Role, useF.4andF.5. If it asserts assignment or performed work, useA.2.1,F.6, orA.15.1. If it is evidence, status, access, requirement, source, publication, assurance, gate, decision, or relation-position use, use the direct pattern. - Check cross-context reuse. If more than one context is current, use
F.9bridge discipline andF.7Concept-Set row discipline. Reuse a row only for the row's admitted use. - Check alias. If the meaning is the same and only wording changes, use alias discipline. Do not let an alias change kind or scope.
- Check policy id. If the candidate is a policy identifier, require
PolicyIdRefdiscipline inF.8:8.1. - Propose new row. If the need recurs across contexts and bridges admit the intended use but no row exists, propose a small Concept-Set row.
- Propose new
U.Typeonly rarely. Use this only when the candidate is cross-family, irreducible to existing FPF values, and governed by an accepted decision record. - Block or lower. If none of the above is true, keep the expression local, quote it as source wording, or lower the claim.
Role Expression Boundary
A role expression becomes a durable role name only when it names one work-facing U.Role or the role-description episteme for that role in one bounded context.
Row Scope Consumption
F.8 consumes row scope; it does not define bridge strength. F.9 declares bridges and F.7 declares Concept-Set rows. F.8 asks whether the row's declared use is enough for the proposed name.
If the row does not admit the intended use, lower the name's use or open the direct bridge or row repair. Do not strengthen a name because the wording is attractive.
Invariants
- Kind before name. The candidate's recovered kind or relation comes before the label decision.
- One decision, one current use. Mixed uses are split into separate decisions.
- Local before cross-context. Reuse local sense labels before proposing cross-context rows or new
U.Types. - Aliases are meaning-preserving. An alias cannot change kind, scope, use, or authority.
- Role names are work-facing. A role name or RoleDescription label must point to a work-facing
U.Role; status, evidence, access, source, publication, requirement, assurance, gate, decision, and relation-position uses are direct-pattern names. - Role assignment is not naming. A name does not assign a holder or prove performed work.
- Rows do not exceed their admitted use. F.8 may reuse a row only at the use declared by
F.7and admitted byF.9. - New
U.Typecandidates are rare. Cross-family recurrence and irreducibility are necessary; an accepted decision record governs the change. - Policy ids are resolvable. A policy id needs a policy specification reference and, when introduced, a mint decision reference.
- Source labels are not semantic authority. A source term can be evidence for a local sense or alias, not automatic FPF vocabulary.
Reasoning Primitives
Worked Cases
Reviewer Role vs Review Report
The expression ReviewerRole in PatternReview_2026 names a work-facing role value. F.8 admits nameRoleDescription: use F.4 for the role-description episteme and F.5 or F.18 for the label.
The expression "review report has reviewer role" is different. The report is an episteme. It may be used as evidence or source for an adequacy claim about the reviewed pattern; it does not hold the work-facing role. F.8 does not mint a role name for the report. It sends the case to evidence-use, source-use, or publication-use patterns.
Actor Across BPMN and PROV
A manager wants one word, "actor", for BPMN participant and PROV agent in a diagram. F.8 asks for the intended use. If the Bridge Card and Concept-Set row admit only naming use, the result is reuseConceptSetRow for prose and diagram labels only.
No role assignment follows. If the project subsequently needs a work-facing role in one context, it creates or reuses the local role-description episteme for that context.
Access Role
An access-control source says ApproverRole. In that source, the expression may name a permission grouping. F.8 first recovers the access or policy relation. Only if the project also defines a work-facing U.Role for approval work in a bounded context does a RoleDescription label become current.
Otherwise the durable name, if needed, belongs to the access, policy, status, or gate pattern, not to role ontology.
Policy Id
A gate profile introduces Aut-Guard-2026. F.8 treats this as a policy-id decision. Reuse requires a resolvable PolicySpecRef. New introduction also needs a MintDecisionRef or equivalent accepted decision record.
The policy id is not a role, method, gate result, evidence value, or source authority by itself. It is a reference to a policy specification used by the pattern that governs the policy claim.
New U.Type Candidate
A team proposes U.InfluenceEdge because many documents use "influence". F.8 blocks immediate minting. The team must show the candidate is not an existing relation, causal claim, evidence relation, characteristic, method relation, or bridge relation under current patterns. If it is still cross-family, irreducible, and needed by several domain families, the proposal goes to A.8, C.3, E.9, and F.18.
Filled Decision Records
Conformance Checklist
Policy-Id Mint-or-Reuse Discipline
FPF treats policy ids such as Phi(CL), Phi_plane, Psi(CL^k), Aut-Guard, EmitterPolicyRef, insertion-policy ids, and acceptance-clause ids as versioned identifiers whose meaning must be recoverable. They are not "just strings", role names, or gate decisions.
PolicySpecRef is a resolvable reference to the policy definition. It identifies the policy id, pins an edition or equivalent digest when needed, and can be found from the same publication family or cited source relation.
MintDecisionRef is a resolvable reference to the decision that introduced the policy id in the declared namespace. For FPF normative policy ids this is usually an accepted [E.9](/generated/patterns/E.9) decision record. For local non-exported policy ids, the governing gate, decision, or publication pattern may admit a smaller decision record when the local scope is explicit.
Rules:
- No silent policy-id introduction. A newly introduced policy id carries both
PolicySpecRefandMintDecisionRef. - Reuse is reference use. Reusing an existing policy id cites
PolicySpecRef; it does not restate policy semantics as if a new policy had been introduced. - Gate checkability. A gate, crossing, bridge, assurance, or publication claim that depends on policy ids includes
PolicyIdRefor an equivalent resolvable structure admitted by its governing pattern. - Policy authority stays with the governing pattern. F.8 decides introduction or reuse of the identifier; it does not decide whether the policy permits work, passes a gate, or gives evidence.
Common Anti-Patterns and Repairs
Consequences
Good consequences:
- durable vocabulary grows more slowly and with clearer justification;
- role, status, evidence, access, source, requirement, publication, and slot-position cases stop forming duplicate role ontology;
- Concept-Set rows keep their declared scope;
- F.5 and F.18 are used with better naming inputs because mint-or-reuse has already settled the decision kind;
- policy identifiers become checkable references instead of decorative strings.
Costs:
- authors must do kind recovery before naming;
- some attractive names remain local phrases or aliases;
- public and cross-context names may require bridge, row, naming, and decision records;
- a new
U.Typebecomes harder to justify.
Reopen F.8 when A.2, A.2.1, F.4, F.5, F.6, F.7, F.9, F.18, A.6.5, E.10, E.9, A.8, or policy-id publication discipline changes enough that the decision kinds or boundaries would change.
Rationale
F.8 is placed before naming style because a naming mistake is often a kind mistake. A project should not ask "what name should we use?" until it has asked "what kind of value or relation is this, and does it deserve durable naming?"
The pattern is intentionally narrower than F.18. F.18 can run a full candidate search, Name Card, public term sheet, lineage, and bridge-facing naming protocol. F.8 supplies the prior admission decision: should this expression become a durable name at all, and if so, under which direct governing pattern?
The strict role decision is central. A role expression names a work-facing role only when U.Role is recovered. Epistemes, publications, standards, requirements, evidence, statuses, permissions, gates, decisions, methods, work, and relation positions may need names, but they do not become roles because a source phrase used "role".
SoTA-Echoing and Source-Use
Source-use boundary: a source tradition may supply candidate words and current practice pressure. It does not select the FPF decision kind. The decision kind follows the recovered value or relation and the direct governing pattern.
Relations
Builds on. A.7, A.8, A.11, E.10, E.10.ARCH, F.1, F.2, F.3, F.5, F.7, F.9, and F.18.
Coordinates with. A.2, A.2.1, A.2.5, A.2.7, A.6.5, A.15, A.15.1, F.4, F.6, F.10, F.13, F.14, F.15, F.17, C.3, E.9, and direct status-use, evidence-use, source-use, publication-use, requirement-use, assurance, gate, decision, method, work, characteristic, and architecture patterns.
Constrains.
F.5names only after F.8 has decided what kind of naming case is current.F.4governs only work-facing role-description naming cases.F.9andF.7govern cross-context row admission before F.8 reuses the row label.F.18expands durable public naming after F.8 has admitted the name decision.F.14andF.15use F.8 to avoid role, status, row, and alias explosion.
Does not replace. Direct governing patterns for the named value, role assignment, performed work, status, evidence, source, publication, requirement, assurance, gate, decision, method, work, relation-slot, characteristic, architecture, or mathematical-lens claims.
Didactic Memory
Do not ask for a better name first. Ask what the expression is trying to name, whether that value already exists locally, whether any cross-context row admits the intended use, and whether the expression is really a role, status, evidence, policy, source, slot, method, work, or type case. Mint only after reuse, alias, direct-pattern naming, and row options have failed.
Footer Marker
F.8:End
Alignment and Bridge across Contexts
Status: Stable
"Translate across contexts; never collapse them."
Type. Architectural pattern.
Status. Stable.
Normativity. Normative.
Builds on: E.10.D1 (context discipline: Context = U.BoundedContext); F.0.1 (senseFamily and status-modality guard; bridge-only crossing); F.1 (contexts fixed); F.2 and F.3 (SenseCells exist); F.7 (Concept-Set rows depend on bridges); F.8 (mint-or-reuse decision consumes bridge results without strengthening them).
Coordinates with: A.2, A.2.1, F.4, F.5, F.6, and A.15.1 for work-facing role, role-description, role-assignment, and performed-work claims; A.6.5 for relation-slot discipline; C.29 for mathematical-lens use; B.3 for assurance penalties; A.6.3.CSC for controlled coarsening; C.26.1 and C.26.2 for quantum-like export boundaries.
Plain entry cues (informative). Context-to-context translator; sense bridge.
Intent and applicability
Intent. Provide a conceptual discipline for relating SenseCells from different U.BoundedContexts. A Bridge states what relation holds, which direction matters, how much congruence is admitted by CL, what is lost, and which cross-context use remains admissible.
Applicability. Use this pattern when an author needs to compare local senses across contexts, reuse a familiar label, connect design-time and run-time senses, compare two standards' terms, or justify a row in the Concept-Set table.
Primary EntityOfConcern in plain terms. One Bridge Card relating two SenseCells across different U.BoundedContexts. The EoC is not a transport chain, not a work process, not a role assignment, and not one global meaning layer.
Admissible move in plain terms. Declare bridge kind, direction, CL, loss, and admitted use so cross-context sense use stays inspectable without collapsing local meanings into silent equivalence.
Primary working reader. An author, checker, or practitioner preparing one bridge card, comparative bridge note, or concept-set row that depends on cross-context sense use.
Use this when. Use F.9 when the same term, role name, quality label, status label, measurement label, method label, or structural label appears in more than one context and the team is about to treat that overlap as if it were already equivalence or safe substitution.
What goes wrong if missed. Teams fall back to shared labels, string-equals shortcuts, or informal analogies, then quietly smuggle equivalence, substitution, structural inference, or role assignment across contexts without stating kind, direction, CL, or loss.
What this buys. One explicit bridge discipline that lets a team compare contexts and reuse names while keeping direction, loss, and the limits of admissible substitution visible.
Not this pattern when. Not F.9 when the case is still only one local context, when the needed claim is a role assignment, performed-work attribution, evidence use, status use, source use, publication use, assurance claim, gate claim, decision claim, or mathematical-lens use. Use the direct governing pattern first; cite F.9 only when cross-context sense alignment itself is live.
Recognition versus assurance note. Intent, applicability, this boundary, and the first worked case are the recognition block. Bridge kinds, CL, conformance, and relation sections are assurance blocks; they tighten the same Bridge Card claim instead of widening F.9 into role assignment, work execution, governance, or one global meaning layer.
Problem frame
Cross-context work fails in predictable ways:
- String-equals fallacy. Identical spellings such as "process", "role", "accuracy", or "ready" are taken as identical meaning.
- Scope creep. A naming convenience is stretched into role assignment, status transfer, work attribution, evidence use, or structural inference.
- Design-run jumping. Design artefacts are substituted for run-time occurrences, or run-time occurrences are treated as design definitions.
- Direction amnesia. Narrower and broader relations are treated as symmetric.
- Loss blindness. Differences in unit, granularity, precondition, time stance, enforcement locus, or viewpoint are left unstated.
F.9 answers these failures by making relation, direction, loss, CL, and admitted use explicit.
Forces
Core idea
A Bridge is a declared correspondence between two local senses. It always names:
- the two
SenseCells, - bridge kind,
- direction if direction matters,
CL,- Loss Notes,
- counter-example or invariant evidence,
- admitted use.
Some Bridges admit naming or bounded substitution of sense. Interpretation Bridges admit explanation only. A Bridge never creates a U.RoleAssignment, never attributes performed work, never turns an episteme into evidence by itself, and never mints a universal type.
Minimal vocabulary
- Context - shorthand for
U.BoundedContextper E.10.D1. - SenseCell - the pair
(Context, Local-Sense)from F.3. - Bridge - a declared relation between two
SenseCellswith kind, direction,CL, Loss Notes, and admitted use. - CL (Congruence Level) - ordinal congruence class
0..3for one Bridge. - Admitted use - what the Bridge lets a downstream claim do without overclaim.
- Naming-only - cross-context prose label or Concept-Set row label only.
- Role-description naming - a row or label may inform a
RoleDescriptionname for one localU.Role; it does not assign that role and does not attribute performed work. - Type-structure - structural inference across contexts; admissible only at
CL = 3with named invariants. - Explanation-only - interpretation relation across sense families; no row substitution and no direct role, status, work, evidence, gate, or decision effect.
- senseFamily - the local meaning family used by Part F, such as Role, Status, Measurement, Type-structure, Method, Work occurrence, Evidence-use, or Policy-use. A
senseFamilylabel is not a durableU.Typeby itself.
Bridge kinds
F.9 distinguishes substitution bridges from interpretation bridges.
Substitution bridges
These relate SenseCells in the same senseFamily and may admit bounded substitution of sense.
-
Equivalence - near-identity of sense. Symmetric and rare. Use: may admit Type-structure rows only when
CL = 3and invariants match. Loss Notes: none or profile-level differences, with the invariant evidence stated. -
Narrower-than and Broader-than - proper inclusion of sense. Directional. Use: narrower-to-broader may admit Naming-only and, at
CL >= 2, role-description naming or other same-family name reuse. Broader-to-narrower is not admitted unless a separate Bridge states it. Loss Notes: special cases, enforcement conditions, or local constraints that fail to carry. -
Partial-overlap - non-empty intersection where neither sense includes the other. Use: Naming-only at best. It never admits role assignment, performed-work attribution, or Type-structure inference. Loss Notes: A-only sense and B-only sense.
-
Disjoint - explicit contrast. Use: contrastive explanation only. Loss Notes: not applicable; the claim is incompatibility.
Interpretation bridges
These explain connections across senseFamily boundaries. They do not admit substitution or Concept-Set rows beyond local explanation.
-
Design-spec-to-run-occurrence - a design sense relates to a run-time occurrence sense. Example:
BPMN:ProcesstoPROV:Activity. Use: explain design-to-run correspondence. Loss Notes: process model versus occurrence, control structure versus temporal extent. -
Measurement-evidence-for - a measurement sense evidences or quantifies another sense. Example:
SOSA:ObservationtoITIL:SLO fulfilment. Use: explain evaluation; direct evidence-use remains with A.10, B.3, E.17, F.10, or the local status pattern. -
Policy-constraint-on - a policy or deontic sense constrains another sense. Example:
ODRL:Dutyto service behavior. Use: explain a constraint relation; direct policy, gate, or authority claims remain with the governing pattern. -
Viewpoint-correspondence - one view, report, model, dashboard, or viewpoint-bound episteme corresponds to another view over an EntityOfConcern. Use: explain cross-view comparison; direct architecture-description, episteme, publication, or source-use claims remain with their governing patterns.
CL scale and admitted-use thresholds
Thresholds:
- A Naming-only row requires
CL >= 1. - A Role-description naming row requires
CL >= 2, the same RolesenseFamily, and stated local-role losses. It still does not create aU.RoleAssignment. - A Type-structure row requires
CL = 3and matched invariants such as acyclicity, anti-symmetry, unit transform, cardinality, or signature-preserving relation shape. - Interpretation Bridges remain Explanation-only regardless of
CL.
B.3 may convert CL into an assurance penalty when a cross-context claim uses a Bridge.
Bridge Card
Use this compact record when a Bridge claim matters:
AdmittedUse states the strongest use the Bridge permits. NonAdmittedUse names the tempting overclaim, such as role assignment, work attribution, structural inference, source authority, or evidence use. DirectGoverningPatternIfNotF9 points to the pattern that must govern that overclaim before it may become a claim.
BridgeId and policy or edition identifiers cited by a Bridge Card are registry references, not semantic symbols exported by signatures. Do not demand them through SignatureManifest.provides; validate that referenced registry entries exist and are edition-pinned when required.
Boundary to coarsening and quantum-like export
Use F.9 first when meaning, label, relation, field, record, model output, report, or representation crosses a bounded context or publication context. A bridge does not become quantum-like because it is lossy, approximate, contextual, or hard to translate. It becomes quantum-like only when the bridge or export claim still depends on order sensitivity, incompatible frames, a probe that changes represented state, or no faithful-enough export for the intended use.
Boundary sequence:
- Build the ordinary Bridge Card first: cells, sense families, kind, direction,
CL, loss, counter-example or invariant evidence, and admitted use. - State which state, relation, evidence, metric, option, or viability claim is said to survive the crossing.
- State what the crossing omits, coarsens, re-keys, reframes, makes incomparable, or makes unsafe for the intended downstream use.
- If the bridge or export claims to preserve action, intervention, manipulation, explanation, or cross-scale structure, state the causal-abstraction or approximate-causal-abstraction mapping before treating the coarsened bridge as a C.26 issue.
- If asking, measuring, exporting, rendering, or bridging changes the represented state itself, coordinate with C.26.1.
- If coordinated work or live state is not exported faithfully enough for the intended use by any one report or bridge, coordinate with C.26.2.
- If the crossing is a state representation with declared source-loss mode or reduced recoverability, coordinate with A.6.3.CSC, A.6.3.RT, and C.26.
When the bridge result will be reused for decision, comparison, assurance, release, audit, or cross-context action, add a state-export line to the Bridge Card:
A lighter cross-context note may orient readers, but it is not a Bridge Card. Before any equivalence, substitution, Naming-only row, interoperability, release, audit, assurance, or action use, reopen the source-bearing episteme or source publication needed for the Bridge Card and publish the actual Bridge Card.
Invariants
- Locality first. A Bridge relates
SenseCells, never contexts as wholes and never strings alone. - senseFamily discipline. Substitution Bridges preserve
senseFamily. Interpretation Bridges may crosssenseFamilyboundaries but remain Explanation-only. - Direction clarity. Directional kinds state direction explicitly.
- CL honesty.
CL <= 2needs at least one counter-example or boundary case.CL = 3needs invariant evidence. - Loss visibility. Every Bridge carries Loss Notes, even when the note is "none" at
CL = 3. - Weakest-link row discipline. A Concept-Set row's admitted use is bounded by the weakest participating Bridge.
- No role-assignment by bridge. A Bridge may inform RoleDescription naming or comparison;
U.RoleAssignment, required-role satisfaction, and performed-work attribution remain with A.2.1, F.6, and A.15.1. - No interpretation bridge substitution. Interpretation Bridges cannot justify substitution rows.
- Design-run honesty. If a context fixes a design-run distinction, the Bridge respects it or explicitly uses a design-spec-to-run-occurrence interpretation bridge.
- Kernel restraint. Bridges do not promote ad hoc sameness into a new
U.Type; A.11 and F.8 govern that decision. - Non-inheritance of contexts. Bridges do not imply is-a relations between contexts.
Micro-examples
-
Participant versus Agent. Cells:
BPMN:ParticipantandPROV:Agent. Bridge: Partial-overlap,CL = 2. Loss: participation scope versus attribution scope. Admitted use: Naming-only label "actor"; no role assignment. -
Process design versus Activity occurrence. Cells:
BPMN:ProcessandPROV:Activity. Bridge: Design-spec-to-run-occurrence,CL = 2. Loss: model structure versus temporal occurrence. Admitted use: Explanation-only. -
Observation versus SLO fulfilment. Cells:
SOSA:ObservationandITIL:SLO fulfilment. Bridge: Measurement-evidence-for,CL = 2. Loss: sampling window and target definition. Admitted use: Explanation-only; direct evidence or status claim goes to A.10, B.3, F.10, or the local status pattern. -
Subtype across OWL and curated taxonomy. Cells:
OWL:SubClassOfandTaxonomyX:is-a. Bridge: Equivalence,CL = 3only when acyclicity, anti-symmetry, and class-level reasoning match. Admitted use: Type-structure row. -
Accuracy in metrology versus data quality. Cells:
ISO80000:accuracyandISO25024:accuracy. Bridge: Partial-overlap,CL = 2. Loss: instrument perspective versus dataset perspective. Admitted use: Naming-only row "accuracy"; methods and measurements stay context-local.
Worked examples
Service acceptance, executions, and observations
A service team uses an SLO, runtime observations, and an automation-process model.
Bridge Cards:
The same team may publish a Naming-only row for "availability" if each participating Bridge reaches CL >= 1, but no observation becomes the status target and no process design becomes a performed work occurrence by that row.
Behavioral role versus access role
A process model has BPMN:Participant; an access-control catalogue has NIST-RBAC:Role.
Bridge Card result:
- Bridge kind: Partial-overlap.
CL: 2.- Loss Notes: assignment moment, enforcement locus, multiplicity, accountability boundary.
- Admitted use: Naming-only label "actor" and, if a local
U.Roleis separately recovered, role-description naming. - Non-admitted use: no
U.RoleAssignment, no required-role satisfaction, no performed-work attribution.
If a project wants an RBAC role to count for a work step, it must open A.2.1 or F.6 and recover a local U.RoleAssignment; F.9 supplies only the cross-context sense relation and the stated losses.
Equivalence of subtype notions for structural rows
OWL2:SubClassOf and a curated taxonomy is-a relation can admit a Type-structure row only when the curated taxonomy is acyclic, anti-symmetric, and uses class-level reasoning compatible with the OWL profile being cited. If those invariants are absent, the Bridge is demoted to CL = 2 and the admitted use falls to Naming-only or explanation.
Setpoint versus service target
CTRL:setpoint and ITIL:target may look close because both are called targets. F.9 keeps them apart:
CTRL:setpointis a physical reference value in a control context.ITIL:targetis a service objective or requirement-like status claim.- Bridge kind is usually Disjoint or Partial-overlap, not Equivalence.
The result is didactic contrast or Naming-only orientation, not substitution in control or service calculations.
Anti-patterns and repairs
Reasoning primitives
All judgements here are conceptual. They admit or reject specific cross-context sense-use moves; they are not work-enactment records.
Bridge declaration
Interpretation: there is a declared Bridge between two local senses with stated attributes.
Naming-only scope
Interpretation: the shared label remains a label; it carries no structural, role-assignment, status, evidence, or work effect.
Same-family substitution of sense
Interpretation: same-family substitution is bounded by direction, CL, loss, and admitted use. For role material, this reaches RoleDescription naming or comparison only; role assignment itself remains with A.2.1 and F.6.
Type-structure scope
Interpretation: Type-structure use is the strongest F.9 row use and requires invariant evidence.
Interpretation embargo
Interpretation: design-spec-to-run-occurrence, measurement-evidence-for, policy-constraint-on, and viewpoint-correspondence Bridges explain relations across sense families but do not admit substitution.
Weakest-link rule
Interpretation: a row is never stronger than its weakest Bridge.
Direction guard
Interpretation: narrower-to-broader does not invert.
Loss accumulation
Interpretation: chained cross-context substitution is rare. If used, loss and CL degrade rather than disappear.
Relations
Builds on: E.10.D1, F.0.1, F.1, F.2, F.3, F.7, and F.8.
Coordinates with:
- F.4 and F.5. RoleDescription labels and durable names may cite F.9, but only after the local
U.Roleremains clear. - A.2.1, F.6, and A.15.1. Role assignment, required-role satisfaction, and performed-work attribution are direct work-role claims, not bridge results.
- F.8. Mint-or-reuse decisions consume Bridge Cards and choose local phrase, alias, row, RoleDescription label, policy id, direct-pattern name, or block-or-lower decision without strengthening the Bridge.
- A.6.5. Relation-position labels and SlotSpec claims are governed by slot discipline, not by F.9.
- C.29. Mathematical-lens use may cite F.9 when the lens crosses contexts; C.29 still governs the mathematical object, preserved structure, lost structure, and lens-use admissibility.
- B.3. Assurance may apply
CLpenalties to cross-context claims. - A.6.3.CSC, C.26.1, and C.26.2. Coarsened renderings and quantum-like state export need these patterns when export loss, probe effects, or no faithful-enough report becomes the live concern.
Revision law
- Edition shift in a context. Re-evaluate affected cells; if sense moved, split the Bridge or lower
CL. - New mismatch evidence. Add a counter-example; decrease
CLor change kind. - Convergence. Raise
CLonly when invariants demonstrably match and counter-examples no longer apply. - senseFamily correction. If a cell's
senseFamilywas mistyped, fix the cell first in F.3, then revisit Bridges. - Row overreach. If a row's use exceeds the weakest Bridge, split the row or lower its admitted use.
- Bridge sprawl. Consolidate near-duplicates into one Bridge with richer Loss Notes.
Acceptance tests
Static conformance
- SCR-F9-S01 (Well-typed). Every Bridge names two
SenseCells, each bound to a context from F.1, and statessenseFamily, kind, direction when needed,CL, Loss Notes, and admitted use. - SCR-F9-S02 (senseFamily discipline). Any substitution Bridge preserves
senseFamilyand uses Equivalence, Narrower-than, or Broader-than. - SCR-F9-S03 (Loss visibility). Every Bridge has non-empty Loss Notes. "None" is valid only with
CL = 3and stated invariants. - SCR-F9-S04 (Counter-example hygiene). Bridges with
CL <= 2carry at least one counter-example or boundary case; Bridges withCL = 3cite invariants. - SCR-F9-S05 (Row compliance). Every Concept-Set row shows an admitted use no greater than the weakest participating Bridge.
- SCR-F9-S06 (Role boundary). Any role-facing Bridge states that role assignment and performed-work attribution remain with A.2.1, F.6, and A.15.1.
Regression checks
- RSCR-F9-E01 (Edition churn). When a context edition changes, revalidate all Bridges touching it.
- RSCR-F9-E02 (Counter-example drift). New counter-examples lower
CL; deleting examples does not automatically raise it. - RSCR-F9-E03 (senseFamily drift). If a cell's
senseFamilychanges, all Bridges crossing that cell are retyped. - RSCR-F9-E04 (Weakest-link enforcement). Adding a lower-CL Bridge to a row lowers the row's admitted use or forces a split.
- RSCR-F9-E05 (Role-boundary preservation). No Bridge revision creates a
U.RoleAssignmentor performed-work attribution without the direct governing pattern.
Didactic distillation
A Bridge translates between local senses from different contexts. It declares relation kind, direction, CL, loss, and admitted use. Substitution of sense requires the same senseFamily and enough CL; Type-structure use needs CL = 3 with invariants; interpretation Bridges explain but do not substitute. Rows obey the weakest Bridge. Role-description naming is not role assignment. Translate across contexts; never collapse them.
Archetypal grounding
Tell
A Bridge is not a synonym claim and not an enactment edge. It is a context-bounded correspondence record that tells a reader what may be named, compared, or inferred, and what is lost when a sense crosses context.
Show: service lane
A service team may reuse the word availability across monitoring, SLO review, and architecture discussion. F.9 requires Bridge Cards that separate observation, status target, and architectural concern rather than treating the shared label as silent sameness. The practical gain is that naming convenience survives while substitution rights stay bounded by senseFamily, CL, and Loss Notes.
Show: role lane
A process team and an access-control team both use operator. F.9 can admit a Naming-only row and may admit RoleDescription naming when the local U.Role remains clear. It cannot assign the access-control role to a work occurrence. That claim requires A.2.1 and F.6.
Show: episteme lane
A comparative bundle may say that two traditions both discuss readiness. Under F.9, that statement remains explanatory until the author publishes the cells, bridge kind, direction, CL, Loss Notes, and counter-example. The Bridge then becomes auditable correspondence rather than rhetorical shortcut.
Bias annotation
Lenses tested: governance, architecture, ontology and episteme, pragmatics, didactics. Scope: universal for cross-context correspondence and reuse.
- Governance bias. F.9 raises the declaration bar by requiring explicit Bridge Cards. Mitigation: keep the card compact and use weakest-link discipline as the default review heuristic.
- Architecture bias. The pattern prefers typed bridge declarations over friendly synonym prose. Mitigation: allow Naming-only and Explanation-only cases so useful comparisons are not blocked.
- Ontology and episteme bias. F.9 is local-first and resists global meaning claims. Mitigation: reuse remains possible through explicit correspondence, direction, and Loss Notes.
- Pragmatic bias. Conservative
CLassignment may feel slower than informal reuse. Mitigation: F.9 permits bounded use when the Bridge earns it; it blocks only silent overreach. - Didactic bias. The short script can make Bridge Cards look simpler than they are. Mitigation: conformance tests, counter-examples, and weakest-link rules keep the teaching explanation tied to constraints.
Conformance checklist
A Bridge publication conforms to F.9 iff:
- CC-F.9-1 - Well-typed Bridge declaration. Every Bridge names two
SenseCellsbound to declared contexts and publishes kind, direction when needed,CL, Loss Notes, and admitted use. - CC-F.9-2 - Substitution discipline. Same-family substitution comes only from a substitution Bridge on the same
senseFamily; Type-structure use requiresCL = 3plus matched invariants. - CC-F.9-3 - Interpretation embargo. Interpretation Bridges remain Explanation-only and are not used to justify substitution or Concept-Set rows.
- CC-F.9-4 - CL honesty and loss visibility.
CL <= 2needs a counter-example or boundary case;CL = 3needs invariants; every Bridge has Loss Notes. - CC-F.9-5 - Weakest-link row discipline. Cross-context rows never claim a broader use or higher row-level
CLthan their Bridges admit. - CC-F.9-6 - Role-boundary discipline. Role-facing Bridges may inform RoleDescription naming or comparison, but actual
U.RoleAssignment, required-role satisfaction, and performed-work attribution stay with A.2.1, F.6, and A.15.1. - CC-F.9-7 - Registry-reference discipline.
BridgeIdand cited policy pins are registry references, not signature-exported semantic symbols. - CC-F.9-8 - Coarsened-note boundary. A lighter note, summary, or comparison aid is not treated as a Bridge Card until the source-bearing episteme or publication needed for the Bridge Card is reopened and the Bridge is published.
Consequences
Benefits. F.9 lets FPF compare, translate, and partially reuse ideas across contexts without collapsing them into one vocabulary. It gives downstream rows, claims, and assurance reasoning an explicit Bridge Card instead of relying on prose similarity.
Costs. The pattern adds explicit bridge declaration and can feel heavier than informal comparison. Mitigation: use Naming-only or Explanation-only when that is enough, and reserve higher-scope uses for Bridges that carry the required CL, invariants, and direct-pattern boundaries.
Failure mode avoided. A Bridge can no longer be used as a quiet substitute for role assignment, status transfer, evidence authority, publication authority, or performed-work attribution.
Rationale
The core move of F.9 is simple: cross-context work is unavoidable, but silent sameness is unacceptable. A Bridge therefore does two jobs at once:
- it preserves practical comparison and bounded reuse where the relation is genuinely available,
- it keeps non-identity visible through direction, Loss Notes,
CL, and weakest-link use.
Without that discipline, every shared label becomes a hidden ontology merger. With it, cross-context comparison stays teachable, auditable, and compatible with direct governing patterns.
SoTA-Echoing
SoTA note. This section does not create a second bridge rule track. It stays truthful only when Bridge kinds, CL, Loss Notes, weakest-link use, the A.6.3.CSC boundary, and the review matrix below still tell the same story about admissible cross-context sense use.
Bridge Card publication discipline
Minimal declaration
A usable Bridge Card makes visible:
- the two typed
SenseCells, - bridge kind,
- direction when direction matters,
- declared
senseFamilyfor each cell, CL,- Loss Notes,
- counter-example or invariant evidence,
- admitted use and non-admitted use.
If any of these fields is absent, readers are forced back into inference by prose similarity, which F.9 blocks.
One-pair default rule
The default declaration discipline is one primary Bridge per cell pair per relevant senseFamily, with richer Loss Notes rather than many near-duplicate cards. Local exceptions are admissible only when the cards genuinely differ in bridge kind, direction, CL, or admitted use.
Revision over silent drift
If evidence changes bridge CL, direction, loss, or admitted use, revise the Bridge Card explicitly. Do not leave the Bridge in place while surrounding prose quietly changes its practical scope.
Bundle and endpoint interaction
Viewpoint bundles, quality bundles, dashboards, reports, and endpoint bundles may cite Bridges, but they do not absorb bridge semantics. F.9 remains the pattern for cross-context alignment, while the citing bundle keeps its own ontology.
When a quality-family claim crosses contexts, bridge loss and CL affect what may be compared or reused, but they do not retype the quality family itself. Any resulting assurance penalty feeds B.3 rather than changing the ontology of the quality bundle.
A F.9.1 stance overlay may help readers interpret a Bridge, but the Bridge Card remains primary. If the overlay overstates bridge kind, direction, CL, Loss Notes, or admitted use, narrow or remove the overlay.
C.29 mathematical-lens use relation
When meaning, substitution, sense cells, direction, CL, or admitted use crosses context, write the F.9 Bridge Card first. Add the applicable C.29 output only for mathematical-lens use: candidate mathematical object, LensMappingMode, preserved and lost structure, exposed invariants or distinctions, lens-use admissibility value, admissible and non-admissible use, and stop condition. Do not duplicate Bridge semantics inside MathLensUse. A Bridge may make a mathematical lens interpretable across contexts without making it substitution-safe.
Review matrix
A reader can test bridge integrity with seven questions:
- Are the two cells and contexts explicit?
- Is the bridge kind the least-committing truthful kind rather than the friendliest one?
- Does
CLmatch the published counter-example or invariant evidence? - Are Loss Notes specific enough that the admitted use is really bounded?
- If a row or bundle cites the Bridge, does it stay within the Bridge's admitted use?
- If a stance overlay exists, does it stay within the Bridge Card's kind, direction,
CL, Loss Notes, and admitted use? - If a role, status, evidence, source, publication, assurance, gate, decision, method, work, or mathematical-lens claim appears, has the direct governing pattern been opened instead of letting F.9 carry that claim?
Repair from same, equivalent, align, and map prose should therefore recover the Bridge Card first, then any row use, then any optional stance overlay. Doing it in the opposite order recreates silent equivalence under new vocabulary.
F.9:End
Bridge Stance Overlay
Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative
Plain-name. Bridge-card stance overlay.
One-line summary. BridgeStanceOverlay governs one stance annotation over an existing F.9 bridge card so authors can say how to read that bridge without changing its kind, direction, CL, or loss notes and without treating the overlay as bridge authority or as a cure for missing source-bearing return.
Primary EntityOfConcern in plain terms. One overlay annotation attached to an existing F.9 bridge card; not the bridge card itself, not a second bridge kind, and not the pattern that governs coarsened renderings.
Use this when. Use this overlay when an existing bridge card already exists and the real need is one compact stance label such as localRename, operationalizes, partialAnalogy, projection, or nonEquivalent that helps readers interpret that bridge without widening its substitution licence.
Start here when. Your first honest artefact is already an F.9 bridge card, and the practical question is how to read that bridge rather than whether a bridge exists at all.
What goes wrong if missed. Authors fall back to vague phrases like "roughly analogous" or "just a rename", and readers either over-read the gloss as silent bridge authority or under-read it as disposable style.
What this buys. One compact interpretive gloss over an existing bridge card that stays reusable, keeps the bridge taxonomy stable, and still leaves source-bearing return and bridge publication duties where they belong.
Not this pattern when. Not this overlay when the case is the bridge card itself under F.9, or when a coarsened rendering still needs source-bearing return before any bridge-bearing use is admissible; use A.6.3.CSC Controlled Semantic Coarsening for that coarsened-rendering relation.
Problem frame
When positions or trajectories in language-state work are compared across schools or contexts, authors often need a disciplined interpretive gloss on top of a formal bridge card. The gloss must help reading without becoming a second bridge taxonomy.
Problem
Authors often express stance informally ("roughly analogous", "really a projection", "just a rename"), which makes bridge interpretation unstable. A full second taxonomy would be worse: it would compete with the core bridge kinds.
Forces
Solution
A Bridge Stance Overlay is a local interpretive annotation attached to an existing F.9 bridge card. It does not change the underlying bridge kind, direction, CL, or loss notes.
Starter overlay vocabulary
Boundary rule
A stance annotation is interpretive help for authors and readers. It is not a second bridge ontology, not a bridge card, and not a permission and not a publication with named authority-reference relation.
It is also not the coarsening governing pattern. Labels such as projection or nonEquivalent may help a reader interpret an already-declared bridge, but they do not carry source tether, narrower admissible use, non-admissible downstream use, or reopen duty for a coarsened rendering. If that coarsened-rendering relation becomes primary, it belongs to A.6.3.CSC Controlled Semantic Coarsening rather than being absorbed into stance language. If return to the source-bearing episteme or source publication is still needed before any bridge reading is admissible, reopen that episteme or publication before adding stance.
Relation to CL and loss
CLstill governs substitution licence.- loss notes still govern what fails to carry.
- stance annotations merely say how the author wants the bridge to be read.
If the stance materially affects interpretation, the bridge card should publish explicit loss notes that match it.
Archetypal Grounding
Tell. A stance annotation says how to read the bridge, not what the bridge kind structurally is.
Show (System). An operator alarm label may operationalizes a broader control cue without becoming identical to it.
Show (Episteme). A TAE felt-sense phrase may be only a partialAnalogy to a later formal term.
Bias-Annotation
Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Universal for stance overlays attached to existing F.9 Bridge Cards inside FPF.
This pattern favors disciplined cross-school comparison and bridge readability over sweeping synonym claims. The main mitigation is that every stance remains subordinate to the underlying Bridge Card, its direction, CL, and loss notes, with explicit handoff to A.6.3.CSC when the issue under repair is source-bearing return for a coarsened rendering rather than bridge-card reading.
Conformance Checklist
CC-F.9.1-1A stance annotation SHALL NOT replace the underlyingF.9bridge kind.CC-F.9.1-2Stance annotations SHOULD be accompanied by explicit loss notes when they materially affect interpretation.CC-F.9.1-3nonEquivalentSHALL block silent substitution.CC-F.9.1-4A stance annotation SHALL NOT claim higher-CL sameness than the bridge card'sCLand kind allow.CC-F.9.1-5A stance annotation SHALL NOT stand in for source-bearing return when a coarsened rendering still needs reopen before any bridge-bearing reading is admissible; that relation belongs toA.6.3.CSC Controlled Semantic Coarsening.
Common Anti-Patterns and How to Avoid Them
- Annotation as ontology. Do not treat stance as the bridge kind itself.
- Friendly-vague analogy. If the relation is high-loss, say so explicitly.
- Stance inflation. Do not use the annotation to smuggle in substitution rights that
F.9withholds. - Stance as coarsened-rendering cure. Do not add
projection,localRename, or another overlay as if that repaired a coarsened note that still needs source-bearing return before bridge reading.
Consequences
The benefit is reusable interpretive clarity for bridge-heavy bundles and school comparisons. The trade-off is one more declared annotation layer on bridge cards.
Rationale
U.LanguageStateSpace and U.LanguageStateMoveTrajectory create many legitimate cross-school comparisons. F.9.1 gives those comparisons a reusable stance vocabulary without fragmenting the underlying F.9 bridge discipline.
The practical gain is narrow but real: teams already use short stance glosses in review work, and without a governed overlay those glosses either smuggle bridge CL through casual wording or sprawl into a second bridge taxonomy. Keeping the overlay subordinate to the bridge card lets bundles reuse interpretive cues while the boundary rule and the worked projection anti-case keep source-bearing return and bridge publication duty where they belong.
SoTA-Echoing
SoTA note. This section does not mint an independent second bridge rule track. It stays truthful only when the boundary rule, conformance checklist, worked bridge-card examples, and legacy-note repair below still tell the same story about the stance staying subordinate to the bridge card.
Traditions covered. This overlay binds itself to comparative-theory glossing, design-translation annotation, operator documentation, and other practices that add short interpretive stance labels on top of already bridge-stance overlay relation cards.
Worked-slice docking. The nearest practical recovery loci here are the localRename, operationalizes, projection, and partialAnalogy examples in F.9.1:13.1 through F.9.1:13.4, plus the anti-case F.9.1:13.5. If the SoTA claim cannot be recovered through those worked slices and the early boundary rule, do not let the citation stand in for the live pattern law.
Local stance. Best-known current practice supports a narrow rule: stance labels are useful only when they stay visibly subordinate to a published bridge card, its direction, CL, loss notes, and reviewable source-cell and target-cell structure.
Relations
- Builds on:
F.9,C.2.2a. - Primary boundary:
F.9governs Bridge Card discipline;F.9.1governs only stance overlays attached to existing Bridge Cards. - Coordinates with:
A.16.0,E.17.1,A.6.P,A.6.A,C.16.Q,C.25, andB.4.1. - Constrains: local stance annotations on bridge cards used in comparative and tradition bundles.
Worked Bridge-Card Examples
localRename
A bridge card may relate two near-coextensive operational labels inside one declared context fragment and mark the stance as localRename. The bridge card still publishes its own direction, kind, CL, and loss notes. The stance only warns the reader that the author's intended reading is close renaming within that boundary; it does not license export of the rename beyond the stated fragment.
operationalizes
A broad capability cue may be bridged to a more procedural checklist or control ritual. The bridge card may carry the stance operationalizes to show that the target is being read as a procedural or operational gloss over the source. The relation can still be high-loss: the procedural target need not preserve the source's broader theoretical framing, and the stance does not claim type-structure sameness, implementation authority, execution permission, gate approval, or A.15 work authority.
projection
A rich construct may be mapped into a narrower reporting or measurement rendering. The bridge card may declare the stance projection when the target intentionally keeps only one aspect. The required loss notes should name the dropped dimensions, because the stance is informative only when the omitted structure is made explicit.
Table-level note: projection is only a stance over a declared bridge. It does not govern loss, recoverability, narrower admissible use, non-admissible downstream use, or source reopen for a coarsened rendering; that relation belongs to A.6.3.CSC Controlled Semantic Coarsening.
partialAnalogy and nonEquivalent
A comparative bundle may need to mention an explanatory resemblance across traditions without claiming substitution. In such cases partialAnalogy may guide reading when the shared pattern is local and declared. If review concludes that this local resemblance still lacks reuse support, nonEquivalent should be preferred so that apparent similarity does not drift into silent replacement. The label blocks equivalence and silent substitution; it does not by itself assert Disjoint or CL=0 unless the underlying F.9 bridge card says so.
projection is not a coarsened-note cure
A team may write a short comparison note saying that one report-only metric is basically a projection of a richer operations concept. That sentence does not by itself justify a projection overlay. First recover the underlying F.9 bridge card, its direction, CL, and Loss Notes from the source-bearing episteme or source publication needed for the Bridge Card. Only then may the overlay say how to read that bridge. If readers still need return to the source-bearing episteme or source publication before any bridge-bearing use is admissible, the overlay must wait; it cannot repair the missing bridge card.
Practical use guidance
- Publish a stance overlay only on top of a complete bridge card that already declares bridge kind, direction,
CL, and explicit loss notes where needed. - Choose the least-committing stance that truthfully describes the intended reading; do not upgrade the overlay merely because it sounds more helpful.
- If multiple interpretive notes are needed, prefer one primary stance plus explicit loss notes rather than several competing overlays.
- Use
nonEquivalentwhen the main value of the annotation is to warn the reader away from substitution. - In comparative sets or tradition-focused bundles, place the overlay near the bridge card it qualifies so readers can inspect structural bridge data before reading the interpretive gloss.
A practical check is simple: ask whether the overlay merely helps reading or is covertly claiming extra sameness, transport, or substitution rights. If it does the latter, revise the bridge card itself rather than decorating it.
Legacy-note repair and boundary
Legacy comparative notes often contain undeclared stance language such as "roughly the same", "really a projection", or "just an operational version". When such a note is normalized, the first repair step is to recover the underlying bridge card in F.9; only then may a Bridge Stance Overlay be added as an explicit local stance annotation.
The pattern intentionally does not define a second bridge taxonomy, a new substitution calculus, or a score for bridge quality. Those responsibilities remain with the bridge card, CL, and declared loss discipline. Tradition bundles may carry many bridge cards with stance overlays, but the overlays remain local annotations attached to those cards, not free-standing comparative objects.
Overlay Declaration Discipline
A stance overlay is useful only when it stays visibly subordinate to the bridge card it qualifies.
Minimal overlay declaration
A usable stance overlay should normally publish:
- the qualified
F.9bridge card, - the chosen stance term,
- the local reason the stance is helpful,
- and any loss emphasis that becomes especially important under that stance.
Without this declaration set, a stance word becomes a decorative gloss detached from the bridge it is supposed to interpret.
One primary stance per bridge card
A bridge card should normally carry one primary stance overlay. If several interpretive notes are needed, the extras should usually live in explicit loss notes or surrounding commentary rather than in several competing stance tags.
Overlay locality
A stance overlay is local to the bridge card and context fragment that publish it. Reusing the same stance label elsewhere is admissible only when the new bridge card independently supports that reading.
Interaction with CL, Direction, and Loss
CL remains prior
If the stance sounds friendlier than the declared CL, CL wins. An operationalizes or localRename overlay cannot overrule a high-loss bridge or a low-substitution CL declaration.
Direction-sensitive reading
Some stance labels read differently depending on bridge direction. A construct may project into a report-only rendering in one direction while the reverse direction is not admissible at all. Authors should therefore avoid stance prose that sounds symmetric when the bridge card is directional.
Loss emphasis rule
When a stance is likely to invite over-reading, the loss note should state a sharper boundary rather than soften it. The overlay is useful exactly because it helps interpretation; that is also why it can mislead if the losses are understated.
Bundle Use and Comparative Reading
Bundle-level reuse
Tradition bundles and viewpoint bundles may reuse the same stance vocabulary across many bridge cards, but the interpretation remains card-local. Bundle reuse is a readability aid, not a warrant that similarly named overlays are structurally equivalent.
Comparative stance caution
Two bridge cards may both be marked projection while dropping very different dimensions. Reviewers should therefore compare the loss notes and source-cell and target-cell structure, not the overlay term alone.
Boundary to second bridge taxonomy
If authors start grouping bridges primarily by stance label and ignoring bridge kind, direction, CL, or loss, they have implicitly created a rival bridge taxonomy. F.9.1 forbids that drift.
Review Matrix and Migration Tests
A reviewer can test stance-overlay integrity with five questions:
- Is the underlying bridge card complete and still primary?
- Does the overlay stay within the bridge card's structural claims?
- Would the same overlay still be truthful if read in the reverse direction? If not, the locality or directionality needs to be made clearer.
- Do the loss notes carry the interpretive claim that the overlay might otherwise overstate?
- Is the bundle using stance as a readability aid, or as a covert replacement for bridge ontology?
Legacy prose about things being "really the same", "only a projection", or "just an operational version" should therefore be migrated by recovering bridge kind, direction, CL, and loss first, then adding an overlay only if it still adds disciplined interpretive value.
F.9.1:End
Status Families Mapping: Evidence, Standard, and Requirement Status
Type: Boundary and relation-use pattern Status: Stable Normativity: Normative
Problem frame
Use this pattern when a project uses status words such as "observed", "measured", "validated", "approved", "deprecated", "satisfied", "violated", "waived", "pending", "current", or "ready" and needs to know what kind of status is being claimed, what it qualifies, and whether it can be compared or reused in another bounded context.
Use it especially when evidence, standards, and requirements are being mixed: a dashboard says a service is ready, a standard says a method is approved, a measurement says a requirement is satisfied, a model card says a model is validated, or a requirement register says a clause is waived.
Primary EntityOfConcern. The primary EntityOfConcern is the status-use statement and the status-family mapping that make one status value usable in one bounded context. The pattern governs the relation among status cell, target, target kind, scope, window, source or provenance constraint, and intended status use. It does not make an episteme hold a role and does not treat a visible status display as gate passage, permission, assurance, evidence, or performed work by itself.
First useful move. Write the smallest status-use statement: status family, bounded context, status value, target, target kind, scope, window when current, source or provenance constraint, intended use, and stronger use not carried by this relation.
What goes wrong if missed. A single word such as "validated" starts doing the work of evidence, standard approval, requirement satisfaction, gate passage, release readiness, and assurance at once. Cross-context dashboards compare labels without bridge loss. A report or standard is treated as if it had a status role. A design-time approval is read as run-time compliance.
What this buys. Status words stay local, typed, and comparable. Evidence status says what has evidential standing for a claim. Standard status says what a canon or standard-governed context sanctions. Requirement status says what is happening to an obligation or clause. Cross-context movement becomes an explicit bridge claim instead of a synonym guess.
Not this pattern when. If the current claim is full evidence provenance, use A.10. If the current claim is only an episteme being used as evidence or status before full status-family mapping is needed, use A.2.4. If the current claim is assurance, use B.3. If the current claim is causal use, use C.28. If the current claim is a source, publication face, view, explanation, or specification-use question, use E.17, E.17.0, E.17.2, E.17.EFP, E.10.D2, or the direct publication-use pattern. If the current claim is a system or acting holon holding a work-facing role, use A.2 and A.2.1. If the current claim is performed work, use A.15.1.
Problem
Status vocabulary is useful because it is compact. It is dangerous because the same compact label often hides several different claims.
The common failures are:
- Modality collapse. "Validated" is read as evidence, standard approval, requirement satisfaction, and release permission at once.
- Target collapse. A status is asserted without saying whether it qualifies a claim, quantity, method description, standard text, requirement clause, work result, role assignment, publication, gate record, or another exact target.
- Window loss. Positive or negative status is asserted without the time, edition, condition, or relevance window that makes contradiction and freshness checkable.
- Context leakage. A status word from one context is reused in another as if the label itself carried equivalence.
- Episteme role drift. A report, standard, dashboard cell, model card, or requirement document is described as having an "evidence role", "status role", or "standard role" instead of being used in an evidence-use, status-use, source-use, standard-use, or requirement-use relation.
- Design-run substitution. A design-time standard approval is read as run-time evidence, or run-time evidence is read as standard approval, without an interpretation bridge and an evaluation rule.
- Display overread. A badge, traffic-light cell, dashboard tile, register excerpt, screenshot, certificate view, or generated summary is treated as the status source, gate decision, or assurance result without recoverable source relation.
Forces
Solution
Treat a status claim as a context-local status-use statement, not as a free-floating adjective and not as a role assignment.
Three Status Families
F.10 uses three status families as a small spine for common project work:
A project may add local sublevels or local labels, but the local label must map to one of these families or to another direct status pattern named by value. Do not create a new role kind merely because a status word is local.
StatusCell and StatusUseStatement
A StatusCell is a context-local sense cell for a status value. It has a status family, status modality, typical target kind, polarity, and window discipline. A StatusCell is a meaning cell, not a work performer and not a gate decision.
A StatusUseStatement applies one status cell or local status value to a target in a bounded context:
StatusTargetKind decides relation identity. A status that qualifies a method description is not the same status-use statement as a status that qualifies a requirement clause, even when the visible label is the same. NotCarried names the stronger use that this status statement does not carry, such as gate passage, release permission, assurance, performed work, causal identification, global truth, or cross-context substitution.
Relation Slots for Status Use
Use the A.2.4 status-use slots when a status statement must be precise enough for reliance:
These SlotKinds are relation positions. They are not U.Role names, not work-role qualifier slots, and not a new generic status ontic by themselves.
Family Spines
The following spines are deliberately small. They help contexts map local status words without pretending that every domain has the same status vocabulary.
EvidenceStatus values:
Observed- seen or recorded once under declared observation conditions.Measured- quantified under a declared measurement procedure.Corroborated- backed by more than one independent source, procedure, or observation line.Replicated- repeated by others or under varied declared conditions.Refuted- counter-evidence defeats the positive standing inside the same window.Inconclusive- the available evidence is insufficient or mixed for the target claim.
StandardStatus values:
Candidate- proposed and not yet normative in the context.Draft- worked text or profile, not yet the governing edition.Approved- normative in this context and edition.Deprecated- discouraged, allowed only under stated conditions, or being phased out.Superseded- replaced by a newer edition, profile, or governing source.
RequirementStatus values:
Applicable- the clause binds in the stated context and window.Inapplicable- the clause does not bind under stated conditions.Satisfied- met within the stated context and window.Violated- not met within the stated context and window.Waived- binding is suspended or exceptioned by a named source and window.Pending- awaiting evidence, evaluation, decision, or source-currentness repair.
Bridge Discipline
Status meanings do not travel by label. A cross-context comparison, explanation, or substitution uses an F.9 bridge with direction, bridge kind, congruence level, and loss notes.
Explanation is the ordinary cross-context use. Substitution is admitted only when the bridge kind, congruence level, window alignment, target kind, and local evaluation rule all admit the substitution. Cross-modality movement, such as evidence status being used to evaluate requirement status, is an interpretation relation; it is not equivalence.
Design-Run Discipline
Keep three questions separate:
- What does the evidence show about a claim or measured quantity in this window?
- What does the standard or canon sanction for a method description, profile, or governed project entity in this edition?
- What is the requirement clause doing in this context and window?
A standard-approved method description can be a source for method selection or a condition for allowed use. It does not by itself show that a run-time clause is satisfied. Run-time evidence can help evaluate a requirement clause. It does not by itself approve the method or standard profile unless a governing context has a rule for that promotion.
Archetypal Grounding
Service Acceptance from Run-Time Evidence
A service dashboard reports uptime for July. In the monitoring context, the measurement episteme gives EvidenceStatus = Measured for the claim "uptime was 99.95 percent in July." In the service-management context, the SLO clause has RequirementStatus = Satisfied only if the service pattern's evaluation rule says that the measured uptime meets the clause.
F.10 records two status-use statements and an interpretation bridge. It does not infer requirement satisfaction from the word "measured" alone.
Approved Method Description
A safety controller method description is StandardStatus = Approved in one standard profile and edition. That approval makes the method description admissible under that profile. It does not prove that a particular controller run met response-time obligations. A run-time log can be assigned EvidenceStatus = Corroborated for a response-time claim; a separate requirement-use statement can then evaluate the duty clause.
Model Card and Fairness Requirement
A model card says a model is "validated" because cross-validation AUC is high. In F.10 this becomes an EvidenceStatus statement for a predictive-performance claim inside the validation context. It does not decide the policy requirement "demographic parity delta <= 0.1" unless production-window fairness evidence and the policy evaluation rule are present.
Status Display Cue
A release dashboard cell shows Ready. The cell is a cue. A status-use statement is available only when the source, target, value, scope, window, and provenance constraint are recoverable. If the status is consumed for a gate, release, assurance, or admission use, the direct governing pattern for that use must also admit it.
Bias-Annotation
F.10 is vulnerable to three recurring biases.
- Label authority bias. A familiar status word is treated as source authority. Repair by recovering status target, source, window, and intended use.
- Semio-bias. A visible display, publication face, badge, or label becomes the center of the pattern. Repair by making the status-use relation the
EntityOfConcern; display and publication questions go toE.17,A.10, orE.10.D2. - Role drift. A standard, report, dashboard, or requirement is described as having a role. Repair by using status-use, standard-use, requirement-use, evidence-use, or source-use relations; reserve
U.RoleandU.RoleAssignmentfor work-facing holders.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
F.10 adds a small amount of relation work before a status claim can be relied on. That cost is intentional: the user names context, target kind, window, source, and use instead of letting one status word decide everything.
The payoff is practical. Teams can compare statuses across disciplines, explain why a status was accepted or rejected, see where bridge loss enters, and stop a status display from becoming permission, assurance, or performed-work evidence by accident.
The main limitation is that F.10 does not decide the downstream claim. It does not compute assurance, pass a gate, authorize work, prove causal effect, perform source-currentness repair, or evaluate a requirement clause by itself. It supplies the status-family and status-use relation that the direct pattern may consume.
Open the direct governing pattern when the attempted use depends on evidence provenance, assurance level, gate decision, permission, performed work, causal identification, source freshness, publication interpretation, standard authority, requirement evaluation, or contested source order.
Rationale
Status words sit at the meeting point of evidence, norms, and action. That makes them tempting shortcuts. A shortcut is safe only when the status target and intended use remain visible.
F.10 keeps the shortcut by using a small family spine, but it prevents ontology drift by making the status-use statement explicit. A status value is not a role. A status display is not the status source by itself. A standard approval is not run-time satisfaction. Evidence status can explain requirement status only through an interpretation relation and an evaluation rule.
This keeps Part F naming and bridge machinery useful while letting A.10, B.3, C.28, E.17, A.2, A.15, and gate or requirement patterns govern their own stronger claims.
SoTA-Echoing
Relations
Builds on: A.2.4 for evidence-use and status-use relation slots; F.1 through F.3 for context, seed, and local-sense discipline; F.9 for bridges across contexts; F.18 for local-first naming discipline.
Coordinates with:
A.10when a status claim depends on evidence provenance, evidence source, source-currentness, or evidence-producing work.B.3when a status is consumed as assurance input.C.2.1when the identity of the episteme, claim graph, reference scheme, or grounding holon matters.C.28when the status is causal, counterfactual, intervention-facing, or simulation-output-facing.E.17,E.17.0,E.17.2,E.17.EFP, andE.10.D2when a publication face, view, explanation, source, description, or specification-use question is current.A.2,A.2.1, andA.15when a system or acting holon holds a work-facing role or performs work.- Gate, release, standard-use, requirement-use, decision, and source-currentness patterns when status is consumed for those stronger uses.
Feeds: A.6.RSIR and E.10.ARCH as the repair destination when source wording says "status role", "approved role", "standard role", "validated means compliant", "green means ready", or another status-shaped phrase hides target kind, status family, window, bridge, source, or direct-pattern use.
F.10:End
Method Quartet Harmonisation
“Keep the how (Method), the recipe (MethodDescription), the happening (Work/Execution), and the control push (Actuation) in their own Contexts—then relate them explicitly.”
Status. Architectural pattern.
Builds on: E.10.D1 D.CTX (Context discipline); A.3/A.3.1/A.3.2 (Transformer Constitution; U.Method, U.MethodDescription); A.15/A.15.1 (U.Work as record of occurrence); Sys‑CAL (control/actuation semantics); KD‑CAL (observation).
Coordinates with. F.1–F.3 (Contexts, Seeds → SenseCells), F.4 (Role Description), F.5 (Naming), F.6 (Role Assignment & Enactment Cycle (Six-Step)), F.7/F.9 (Bridges), F.10 (Status families & Windows).
Aliases (informative). Method/Spec/Work or Actuation split; DesignRunTag harmonisation.
Intent & applicability
Intent. Provide a notation‑free, Context‑aware map that keeps four notions distinct and connectable:
U.Method— the abstract way of doing (design‑time concept).U.MethodDescription— the recipe episteme that describes a Method.U.Work(informal: Execution) — the run‑time occurrence of doing (recorded event).U.Actuation— the control output applied to a plant (domain‑specific Work in Sys‑CAL).
The pattern makes the split usable across FPF patterns (Role Assignment & Enactment, Sys-CAL, KD-CAL, Kind-CAL, planned LCA-CAL) and legible across Contexts (SPEM/BPMN for design; PROV-O/SOSA for run; IEC 61131-3/state-space for control).
Applicability. Any time a discussion risks mixing designs with executions, recipes with runs, or workflow with control signals; whenever you need to name or reason about “how we do X”, “the SOP/script/model”, “the actual run”, or “the actuator push”.
Non‑goals. No team workflow, no editors, no tools. No prescriptive file formats. Only conceptual distinctions and safe reasoning moves.
Problem frame
When Method, MethodDescription, Work, and Actuation collapse into one another, models drift:
- DesignRunTag blur. A BPMN process (design graph) is cited as if it had happened.
- Recipe/approval fallacy. An approved SOP (MethodDescription) is treated as proof that the service met its SLO.
- Execution ≟ control. PLC task execution logs are conflated with control outputs (actuation), hiding stability issues.
- Cross‑context homonymy. Activity, task, execution, process, command change sense across Contexts; inferences quietly break.
Forces
Core idea (didactic)
Four boxes, four arrows, zero leakage.
- Box 1 — Method (design). The idea of how to achieve an effect (algorithm, clinical pathway, welding technique).
- Box 2 — MethodDescription (design, epistemic). The written/encoded recipe that describes a Method (SOP, code, BPMN/SPEM model, theorem‑prover script).
- Box 3 — Work (run). The occurrence where a System‑in‑Role enacts (some version of) the Method.
U.Workis the record of this event. - Box 4 — Actuation (run, Sys‑CAL). The control output (setpoint/command) issued to influence a plant during Work.
Arrows (conceptual relations).
MethodDescription ↦ Method(describes) — design stance.Work ↦ MethodDescription(followedRecipe? yes/no/variant) — run stance referencing design.Work ↦ Method(enacts) — run stance referencing the abstract way.Actuation ↦ Work(part‑of / occurs‑during) — control output inside execution.
Each box/arrow is context‑local (SPEM, PROV‑O, IEC…). Cross‑context relations use Bridges (F.7/F.9) with CL/Loss.
Minimal vocabulary (this pattern only)
- Context =
U.BoundedContext(per D.CTX). - Local‑Sense → SenseCell (F.3): the address (Context × sense) for a term like process, task, activity, command.
- Concept‑Set (F.7/F.8): row aligning multiple SenseCells as “what we regard as the same” (after Bridges & losses are declared).
- Window (F.10): temporal/conditional envelope (e.g., July, during test run T42, under load ≥ 70%).
- StatusCell (F.10): laddered status about methods/specs/works (e.g., Approved (spec); Observed/Measured (work)).
Solution — the quartet lens (notation‑free)
Not steps for a team—lenses for a thinker. Use them to sanity‑check any statement about “how”, “script”, “run”, or “signal”.
The stance split (design vs run)
- If the claim is about what should be done or how it is described, you are on the design stance (Method or MethodDescription).
- If the claim is about what happened or what was emitted, you are on the run stance (Work or Actuation).
- Guard rule. Never let a conclusion cross stances without (a) an explicit Bridge kind (interpretation vs substitution), and (b) an acceptable CL (F.7/F.9, F.10).
The recipe/idea split
- Method is the idea; MethodDescription is the recipe describing that idea.
- Different recipes may describe the same method (profiles, languages, detail profiles); one recipe may encode several methods (composite SOP).
- Naming guard. Keep labels distinct: compressive‑strength test (Method) vs ASTM C39‑18 (MethodDescription).
The happening (Work) with signal (Actuation)
- Work is the occurrence (a PROV Activity, an IEC Task executing a program, a lab run).
- Actuation is the control output (setpoint, PWM command, valve open %) emitted during Work.
- You can have Work without Actuation (analysis job), or Actuation without a complex Method (manual push). Many scenarios have both.
The Role Assignment & Enactment touch-points
- Roles (F.4) bind who enacts the Method at run‑time (behavioural masks), not what permissions they hold (RBAC is a different Context).
- Statuses (F.10) bind to the right box: Approved → MethodDescription; Measured/Observed → Work; Satisfied/Violated → Requirement clause about the Work’s outcomes within a Window.
Harmonisation map (Context‑first)
Examples of local SenseCells and safe Bridges. You may keep the exact Contexts from your F.1 cut.
Design (ideas & recipes).
- SPEM/ISO 24744 Context:
SenseCell{Method}= Activity Definition / Task Definition;SenseCell{MethodDescription}= Process Description / WorkProduct (as recipe). - BPMN 2.0 Context:
SenseCell{MethodDescription}= Process (diagram) as design‑time recipe (do not confuse with run). - OWL/Kind-CAL Context: labels for Method kinds (type taxonomies) when needed (naming, not behaviour).
Run (occurrences & outputs).
- PROV‑O Context:
SenseCell{Work}= Activity (time‑bounded occurrence). - SOSA/SSN Context: Observations about Work results (feeds EvidenceStatus).
- IEC 61131‑3 Context:
SenseCell{Work}= Task executes Program (runtime);SenseCell{Actuation}= Output command / setpoint emitted by the program.
Typical Bridges (with intent).
BPMN:Process (design)≈SPEM:Process Definition(design↔design; CL depends on modelling profile; Loss: expressiveness gaps).IEC:Task execution⊑PROV:Activity(run↔run; Loss: control‑specific timing semantics, scan cycles).Actuation (IEC)⋂Activity (PROV)(intersection: the sub‑intervals where outputs are emitted).SOSA:ObservationinterpretsRequirement clause(F.10) about Work outcomes (cross‑StatusModality: epistemic→deontic; never substitution; declare Bridge(kind=Interpretation, CL, Loss)).
Invariants (normative)
- DesignRunTag honesty. Statements about Method or MethodDescription (design) MUST NOT be used as if they were statements about Work or Actuation (run) without an explicit Bridge and Window.
- Box discipline. Every claim about “how”, “recipe”, “run”, or “control output” MUST point to the correct box in the quartet.
- Context locality. Terms (process, activity, task, command) MUST be read as SenseCells in their Contexts (F.3); Cross‑context equivalence is a matter for F.7/F.9 Bridges.
- Status placement. Approved attaches to MethodDescription; Observed/Measured attach to Work; Satisfied/Violated attach to clauses about Work outcomes within a Window (F.10).
- Actuation as Work‑part. Actuation MUST be modelled as occurring within (or as a specialised form of) Work on the run stance; it does not replace Work.
- Naming clarity. Technical/Plain labels for the quartet SHOULD be distinct (F.5); avoid homonymous single‑word labels when Contexts collide.
- Bridge guard. Cross‑context moves MUST declare kind (≈, ⊑, ⊒, ⋂, ⊥, Interpretation), CL, and Loss (F.7/F.9).
Micro‑examples (didactic)
-
Data pipeline deploy (software). Method: “Delta‑load transform”. MethodDescription:
etl_delta.py@v3. Work: nightly run 2025‑07‑14. Actuation: none. Statuses: Spec Approved (governance Context); Work Measured (rows processed) → Evidence for SLO (F.10). -
Valve control (industrial). Method: PID tuning heuristic. MethodDescription: SOP sheet + IEC program. Work: PLC task cycle 18:00–18:30. Actuation: PWM duty sequence. Bridge:
IEC:Task⊑PROV:Activity(CL=2). Observed setpoint tracking interprets requirement “settling time ≤ 5 s”. -
Clinical assay (lab). Method: ELISA. MethodDescription: Kit IFU v7. Work: run batch #B217. Actuation: pipetting robot commands. Statuses: Spec Approved ≠ batch Satisfied (requires evidence at batch Window).
Anti‑patterns & remedies
Worked examples (extended)
Each scenario names Contexts (from your F.1 cut), identifies the quartet boxes, and shows safe Cross‑context moves.
ML service rollout (software + services + sensing)
-
Contexts: SPEM/ISO 24744 (design), PROV‑O (run), SOSA/SSN (sensing), ITIL 4 (services).
-
Quartet:
- Method: Canary deployment strategy.
- MethodDescription: Canary plan document with traffic slices and rollback rules (design Context).
- Work: Two canary runs 2025‑08‑02 10:00–12:00 (PROV‑Activities).
- Actuation: Traffic‑shifting commands (if modeled, they are outputs inside Work; optional in pure software).
-
Statuses (F.10): Spec Approved; Work Observed (latency/err‑rate via SOSA Observations); SLO clause Satisfied in Window if measured ≤ thresholds.
-
Bridge(s): BPMN (if used) Process (design) → PROV Activity (run) Interpretation, CL=2, Loss: path vs time granularity.
Pay‑off: No one infers SLO satisfaction from a plan. Evidence is about Work; the plan stays design‑time.
Industrial furnace control (control + sensing + services)
-
Contexts: State‑space control texts (design), IEC 61131‑3 (run), PROV‑O (run), SOSA/SSN (sensing), ITIL 4 (services).
-
Quartet:
- Method: PID with feed‑forward.
- MethodDescription: Controller tuning sheet + program description.
- Work: PLC task cycles 14:00–14:30 (IEC Task executes Program), Bridged as PROV Activity.
- Actuation: Setpoint & valve duty cycle outputs emitted during Work.
-
Statuses: Spec Approved; Work Observed (temperature curve); requirement settling time ≤ 5 s Satisfied if the observation within Window meets it.
-
Bridge(s):
IEC:Task⊑PROV:Activity(CL=2, Loss: scan‑cycle semantics).SOSA:Observationinterprets requirement clause (CL=3).
Pay‑off: Separates doing from pushing, and both from measuring; compliance judged where it belongs.
Clinical assay
-
Contexts: SPEM/ISO 24744 (design), Lab assay canon (DesignRunTag split as per discipline), PROV‑O (run), SOSA/SSN (sensing).
-
Quartet:
- Method: ELISA.
- MethodDescription: Kit IFU v7 (instructions for use).
- Work: Batch B217 performed 2025‑06‑21 (PROV Activity).
- Actuation: Pipetting robot commands (optional detail).
-
Statuses: Spec Approved; Work Observed (absorbance readings); Quality gate Satisfied within batch Window.
-
Bridge(s): IFU (design) interprets Activity (run) for acceptance (CL=2, Loss: deviations allowed per kit tolerances).
Pay‑off: A clean line from recipe → run → measurement → decision, without role-assignment and status-assertion conflation.
F.11:11.4 Incident response (services + enactment)
-
Contexts: ITIL 4 (services/design), BPMN 2.0 (design), PROV‑O (run).
-
Quartet:
- Method: Triage‑first incident handling.
- MethodDescription: Incident workflow diagram + playbook.
- Work: Handling INC‑3421, 09:10–10:02 (PROV Activity).
- Actuation: none (unless modeling command invocations as outputs).
-
Statuses: Spec Approved; Work Observed (timestamps, response time); SLO “MTTR ≤ 60 min” Satisfied within the incident Window.
-
Bridge(s): BPMN (design) → PROV (run) Interpretation, CL=2, Loss: gateways vs real‑time branching.
Pay‑off: MTTR claims are tied to Work, not to the playbook.
Reasoning primitives (judgement schemas)
Pure mental moves; no storage or workflow is implied.
-
Box classifier
statement s, Contexts fixed ⊢ box(s) ∈ {Method, MethodDescription, Work, Actuation}Reading: Classify any claim by its box (design idea, design recipe, run occurrence, control output). -
Stance firewall
box(s) ∈ {Method,MethodDescription} ⊢ s ∉ {claims about Work outcomes}Reading: A design‑time (stance) statement does not assert a run‑time (stance) outcome. -
Followed‑recipe judgement
Work w, MethodDescription m ⊢ follows(w,m) ∈ {exact, variant, none}Reading: A Work may follow a recipe exactly, with a variant, or not at all; later inferences must respect this value. -
Enactment link
Work w, Method h ⊢ enacts(w,h)Reading: The occurrence enacts the abstract Method (even if several specs describe it). -
Actuation inclusion
Actuation a, Work w ⊢ occursWithin(a,w)Reading: Control outputs are within (or are parts of) a Work interval. -
Observation binding (KD‑CAL handshake)
Observation o about outcome(x) during Window W of Work w ⊢ evidenceFor(w, clause(x,W))Reading: Measurements about a Work outcome within a Window serve as evidence for clauses about that Work. -
Clause evaluation (F.10 handshake)
evidenceFor(w,clause) ⊢ status(clause,w) ∈ {Satisfied, Violated, Inconclusive}Reading: A clause about Work yields a status via the observation set. -
Context locality
term t, Context C ⊢ meaning(t)@C is localReading: A term’s sense is local to its Context; Cross‑context claims require Bridges. -
Bridge application (F.7/F.9)
Bridge B: (X@A) ~kind,CL,Loss~ (Y@B); fact about X ⊢ transferableTo(Y) with penalty(CL,Loss)Reading: Facts may transfer across Contexts only along a declared Bridge, with the stated penalty. -
Version non‑retroactivity
MethodDescription m updated → m' ⊢ ∀ past Work w: follows(w,m')=none (unless w references m')Reading: New recipes don’t rewrite history. -
Composite reasoning
MethodDescription m = m1 ; m2, Work w executes steps w1,w2 ⊢ enacts(w1,m1) ∧ enacts(w2,m2)Reading: Composition on design does not force composition on run, but when it aligns you may relate sub‑runs to sub‑methods. -
SLO attachment guard
SLO clause about service outcome ⊢ attachesTo(Work-window), not MethodDescriptionReading: Service obligations concern what happened within a Window, not the existence of a plan.
Relations
Builds on:
E.10.D1 D.CTX (Context ≡ U.BoundedContext); A.3/A.3.1/A.3.2/A.15 (Method/Spec/Work foundations); Sys‑CAL (Actuation semantics); KD‑CAL (Observation); F.1–F.3 (Contexts → SenseCells); F.10 (Status families & Windows).
Constrains:
- F.4 Role Description: Roles or Statuses must point to the right box (e.g., Approved → MethodDescription; Observed → Work).
- F.5 Naming: Enforce distinct Tech/Plain labels for Method/Spec/Work or Actuation where homonyms threaten.
- F.7/F.9 Bridges: All Cross‑context assertions among quartet terms must go through explicit Bridges with kind/CL/Loss.
Used by. Part C patterns (Sys‑CAL, KD‑CAL, Method‑CAL, Kind-CAL, LCA‑CAL) when describing examples, proofs, and cross‑disciplinary mappings.
Migration notes (conceptual)
- Split conflated “process”. Where a single “process” node stands for both plan and run, refactor into MethodDescription (design) and Work (run); add a Bridge if the prose relied on identity.
- Reassign statuses. Move any Approval-like statuses from Work to MethodDescription; move Satisfied/Violated from Spec to clauses about Work within Windows.
- Expose actuation. If control outputs are buried in “execution logs,” mint Actuation SenseCells and relate them within Work.
- Version fences. Past Works keep references to the version of MethodDescription they attempted to follow; don’t update those links retroactively.
- Name collisions. Where task/activity/process appear with mixed meanings, prefix with Contexts and relabel per F.5 (Tech/Plain).
- Backfill Bridges. If earlier text implied Cross‑context equivalence, add explicit Bridges (F.7/F.9) declaring kind/CL/Loss.
Acceptance tests (SCR/RSCR — concept level)
Static conformance checks (SCR)
- SCR‑F11‑S01 (DesignRunTag honesty). Every normative claim about outcomes is attached to Work (with Window), not to Method or MethodDescription.
- SCR‑F11‑S02 (Box placement). Labels and statuses appear on the correct box (e.g., Approved on MethodDescription only).
- SCR‑F11‑S03 (Actuation inclusion). All Actuation statements are modeled as within a Work interval.
- SCR‑F11‑S04 (Context discipline). Each quartet term is expressed as a SenseCell with its Context; no Cross‑context identity is asserted here.
- SCR‑F11‑S05 (Bridge guard). Any Cross‑context reasoning among quartet terms references an explicit Bridge with kind/CL/Loss.
Regression checks (RSCR)
- RSCR‑F11‑E01 (Spec update). When a MethodDescription changes, previous Works remain valid and unchanged; their statuses don’t shift unless re‑evaluated with explicit rationale.
- RSCR‑F11‑E02 (Bridge drift). If a Context updates, revisit Bridges that touch quartet terms; adjust CL/Loss only via F.7/F.9.
- RSCR‑F11‑E03 (Status drift). Adding new statuses does not move them across boxes (e.g., no new “Work‑Approved”).
- RSCR‑F11‑E04 (Signal creep). Introducing new Actuation details does not erase or replace Work context.
Didactic distillation (90‑second script)
“When you talk about how something is done, decide which of the four boxes you mean. Method is the idea (the way). MethodDescription is the recipe (the description). Work is the happening (what actually occurred). Actuation is the control push (signals emitted during Work). Keep design and run as distinct stances. Plans and approvals live in the design stance; measurements and obligations live in the run stance within Windows. Words like process, task, activity, command are context‑local—say process (BPMN), activity (PROV), task (IEC). If you must relate them, draw a Bridge and declare its kind, CL, and Loss. For compliance, don’t point at the plan—point at Work, show Observations, and judge clauses in F.10. Hold this quartet in your head and you’ll stop mixing plans with facts, signals with outcomes, and names across Contexts. + Everything else—naming (F.5),
U.RoleDescription(F.4) andU.RoleAssignment/U.RoleEnactment(A.2.1/F.6), Bridges (F.7/F.9)—falls into place.
F.11:End
F.12 — Service Acceptance–Work Evidence Link
“Judge promises on what happened, not on what was planned.” Status. Architectural pattern. Builds on: F.1 context of meaning (U.BoundedContext); F.2 Term Harvesting; F.3 Intra‑Context Sense Clustering; F.5 Naming Discipline; F.7/F.9 Bridges & CL; F.10 Status Families & Windows; F.11 Method Quartet Harmonisation; A.2.3 U.PromiseContent. Coordinates with. KD‑CAL (Observation/Characteristic/Scale); Sys‑CAL (Work or Actuation contexts). Non‑goals. No team workflows, no tooling, no editorial procedures. This pattern specifies how to think about acceptance, not how to store or operate systems.
Intent & applicability
Intent. Provide a conceptual binding that turns a service promise (SLO/SLA clause) into a clear, local, time‑bounded judgement about actual Work, using Observations as evidence and explicit Bridges where Cross‑context notions must meet. The result is a Status (Satisfied/Violated/Inconclusive) that attaches to the clause‑about‑that‑Work‑in‑that‑Window.
Applicability. Any situation where a service promise clause (promise content) is published (availability, latency, safety margin, response time, quality gate, compliance duty) and its fulfilment must be decided from what occurred. Works across digital services, industrial control, laboratory processes, clinical pathways, logistics, etc.
Problem frame
- Plan ≠ proof. Diagrams and playbooks are treated as if they demonstrated fulfilment.
- Signal ≠ outcome. Control signals (Actuation) are mistaken for the consumer‑perceived outcome (the outcome promised by the clause).
- Global meanings. Availability, incident, latency are used as if universal, ignoring context‑local senses.
- Unstated translation. Metrics from one canon are mapped to clauses from another without declaring losses.
- Timeless verdicts. Judgements are asserted with no explicit Window (day, month, batch).
Forces
Core idea (didactic)
Bind promises to runs with measurements in time. Acceptance is a quadruple of anchors (all context‑local):
- ClauseCell — a deontic/Standardual SenseCell stating the promise (availability ≥ 99.9%, MTTR ≤ 60 min, temperature within band).
- WorkCell — a SenseCell for the Work that enacted service delivery work in the relevant situation.
- MeasureCell — a SenseCell for the Observation/Characteristic used as evidence (KD‑CAL).
- Window — the explicit period in which the judgement is made (F.10).
A Predicate compares the Measure against the Clause within the Window. The Status (Satisfied/Violated/Inconclusive) attaches to ClauseCell@Window about WorkCell, never to a plan.
Minimal vocabulary (this pattern only)
- ClauseCell. A context‑local deontic/Standardual concept (SLO, obligation, target), typically from services/deontics Contexts (e.g., ITIL 4, ODRL).
- WorkCell. A context‑local run‑time occurrence (PROV Activity, IEC Task Execution, etc.).
- MeasureCell. A context‑local observation concept (KD‑CAL Observation over a Characteristic with a Scale/Unit).
- Window. A time envelope (calendar month, batch, incident interval, shift) per F.10.
- Predicate. A clause‑shape: threshold, percentile, count‑within‑limit, band‑conformance, etc.
- Bridge. An explicit Cross‑context relation with kind/CL/Loss (F.7/F.9).
Context discipline. Terms like availability, activity, task, observation are always read as context‑local. Cross‑use requires a Bridge.
The binding, as five mental rules (notation‑free)
R1 — Attachment rule.
An acceptance verdict attaches to the Clause, scoped by a Window, about a specific Work:
status(ClauseCell, WorkCell, Window) ∈ {Satisfied, Violated, Inconclusive}.
Reading: We do not place “Satisfied” on the plan or on the whole service concept.
R2 — Evidence rule. Only Observations (MeasureCell) that refer to the outcome of the same Work and lie within the Window may support the verdict. Reading: Control commands and approvals are not evidence of outcome.
R3 — Predicate rule. Every ClauseCell is read with a Predicate schema that defines how Measures decide:
- Threshold:
value ≥/≤ target. - Percentile:
Pₚ(value) ≤ target. - Ratio/Share:
good_time / total_time ≥ target. - Count‑within‑limit:
count(events of type E) ≤ target. - Band:
min(value) ≥ L ∧ max(value) ≤ U.
R4 — Bridge rule. If Clause, Work, and Measure live in different Contexts, apply declared Bridges with kind, CL, and Loss notes. Reading: Without a Bridge, do not presume transferability of meanings.
R5 — Window rule. Every verdict is time‑bounded. Changing the Window can change the result; no retroactivity from new clauses or specs (cf. F.10).
Clause templates (conceptual schemata)
These are shapes of meaning, not data fields.
- Availability (share‑of‑time)
- ClauseCell: service availability ≥ 99.9% monthly (services Context).
- MeasureCell: uptime indicator over Work (KD‑CAL).
- Predicate:
good_time/total_time ≥ 0.999. - Window: calendar month.
- Bridge: from monitor semantics → consumer‑perceived availability (kind: proxy; CL: 2; Loss: blind to partial degradations).
- Latency (percentile)
- ClauseCell: p95 latency ≤ 120 ms during incidents (services Context).
- MeasureCell: response time observation for the same Work episode (KD‑CAL).
- Predicate:
P95(latency) ≤ 120ms. - Window: incident interval.
- Bridge: from request‑level telemetry → service‑level promise (kind: aggregation; CL: 2; Loss: sampling bias).
- Safety margin (band)
- ClauseCell: temperature ∈ [L,U] during batch (deontics/quality Context).
- MeasureCell: process temperature observation (KD‑CAL).
- Predicate:
min ≥ L ∧ max ≤ U. - Window: batch run interval (Work).
- Bridge: not needed if Measure and Clause are in the same Context; otherwise declare.
- MTTR (count‑within‑limit + duration)
- ClauseCell: MTTR ≤ 60 min per incident.
- MeasureCell: timestamps of Work phases (start fix → restore).
- Predicate:
restore_time − start_fix ≤ 60 min. - Window: each incident’s Work interval.
- Bridge: BPMN design steps → PROV Work Interpretation (CL=2; Loss: gateways ≠ real branching).
Invariants (normative)
- DesignRunTag split. Clauses live on the design stance; judgements live on the run stance about Work (F.11).
- Context locality. All terms are context‑local; Cross‑context meaning flows only across declared Bridges.
- Observation‑only evidence. Verdicts require Observations that about‑refer to Work outcomes; Actuation and Approvals are not sufficient.
- Window explicitness. Every verdict carries a Window; no timeless acceptance.
- Predicate declared. The Clause’s Predicate is explicit; no hidden aggregation or default percentile.
- Non‑retroactivity. Updating clauses or specs does not alter past verdicts; re‑evaluation must be explicit.
- One‑Work focus. A verdict references a specific Work (or a defined population of Works) matched to the Clause’s scope.
- Loss honesty. Each Bridge states kind,
CL, and loss; wider claims require Bridges with the neededCLor same-Context alignment. - No detached pass. When the ClauseCell is a
U.PromiseContent(service promise clause),Satisfiedabout a Work is admissible only if that Work also delivers the promised outcome spec for the clause (A.2.3:8.1fulfilsPromiseContent). This keeps acceptance on the same delivery evidence base (Work facts + Δ anchors + Observations) and prevents “pass verdict separate from delivery”.
Micro‑examples (didactic, multi‑domain)
SaaS uptime (services + sensing)
- Contexts: ITIL 4 (Clause), PROV‑O (Work), SOSA/SSN (Measure).
- ClauseCell: availability ≥ 99.9% monthly.
- WorkCell: service delivery work Activities during June.
- MeasureCell: uptime observation from synthetic probes.
- Predicate: share‑of‑time ≥ 0.999.
- Bridge: probe result → user availability (kind: proxy; CL: 2; Loss: regional gaps).
- Verdict: Satisfied (June) if the ratio holds; attaches to Clause@June about those Works.
Furnace band (industrial control)
- Contexts: quality/deontics canon (Clause), IEC 61131‑3/PROV (Work), KD‑CAL (Measure).
- ClauseCell: product temperature within [720,740] °C during soak.
- WorkCell: soak phase Work interval.
- MeasureCell: thermocouple Observations (KD‑CAL).
- Predicate: band conformance.
- Bridge: IEC task interval → PROV Activity (Interpretation, CL=2).
- Verdict: Violated if any measured value exits the band.
Incident MTTR (services + enactment)
- Contexts: ITIL 4 (Clause), PROV‑O (Work).
- ClauseCell: MTTR ≤ 60 min per incident.
- WorkCell: each incident’s handling Activity.
- MeasureCell: timestamps (Observed facts) of start‑fix and restore events.
- Predicate: duration ≤ 60 min.
- Bridge: BPMN steps → PROV Activity (Interpretation, CL=2).
- Verdict: Satisfied if the measured interval meets the target.
Anti‑patterns & remedies
Extended worked examples
Each example identifies Contexts, the quadruple ⟨ClauseCell, WorkCell, MeasureCell, Window⟩, any Bridge(s), and the Predicate. The verdict attaches to ClauseCell@Window about WorkCell.
CDN latency across regions (services + sensing + types)
- Contexts. ITIL 4 (Clause), PROV‑O (Work), SOSA/SSN (Measure), OWL 2 (type labels).
- ClauseCell. p95 end‑user latency ≤ 200 ms per region per month.
- WorkCell. delivery Activities per region during the month (PROV).
- MeasureCell. response‑time Observations tagged by region and path (SOSA/SSN).
- Predicate. For each region in the Window,
P95(latency) ≤ 200 ms. - Bridges. probe→user (kind: proxy; CL 2; Loss: last‑mile bias).
- Verdict. Region‑wise statuses; a global “all‑regions met” is the logical AND of region statuses (declare this aggregation explicitly).
- Manager cue. “Green map ≠ one green verdict”; acceptance is per Clause per Window per Work population.
Stroke care: door‑to‑needle (method + enactment + status)
- Contexts. clinical guideline canon (Clause), PROV‑O (Work), SOSA/SSN (Measure), F.10 (status windows).
- ClauseCell. 90% of ischemic‑stroke episodes achieve door‑to‑needle ≤ 30 min per quarter.
- WorkCell. Population of patient‑episode Activities started in the quarter.
- MeasureCell. Timestamps Observation of door and needle events (KD‑CAL).
- Predicate.
|{episodes with (needle−door ≤ 30)}| / |{episodes}| ≥ 0.9. - Bridges. EHR event semantics → PROV Activity (Interpretation, CL 2; Loss: missing triage tags).
- Verdict. If data gaps exceed a declared tolerance, status is Inconclusive rather than “Satisfied by assumption”.
Cold‑chain warehouse (control + sensing + deontics)
- Contexts. quality/deontics canon (Clause), IEC 61131‑3/PROV (Work), SOSA/SSN + ISO 80000‑1 (Measure).
- ClauseCell. temperature ∈ [2,8] °C for ≥ 99.5% of each day.
- WorkCell. The warehouse’s daily storage Activity.
- MeasureCell. Thermistor Observations with calibrated units (KD‑CAL/ISO 80000‑1).
- Predicate.
(good_time / 24h) ≥ 0.995. - Bridges. sensor position → product exposure (kind: proxy; CL 2; Loss: stratification).
- Verdict. Violated if any day fails; annotate Loss to communicate assurance limits.
SaaS incident MTTR (services + enactment)
- Contexts. ITIL 4 (Clause), PROV‑O (Work).
- ClauseCell. MTTR ≤ 60 min per incident.
- WorkCell. Each incident’s handling Activity.
- MeasureCell. Observations of start‑fix and restore timestamps.
- Predicate.
(restore − start_fix) ≤ 60 min. - Verdict. Per incident; a quarter’s report is an explicit aggregation of incident‑scoped verdicts.
Reasoning primitives (judgement schemas, notation‑free)
These are mental inferences; they neither read nor write artefacts. Each reads “if these thoughts hold, you may safely conclude …”.
-
Clause–Work match
covers(ClauseCell, WorkCell) ⊢ admissible(ClauseCell, WorkCell)Reading: The Clause speaks about the kind of Work under judgement (scope alignment). -
Window adequacy
Window is explicit ∧ Window intersects WorkCell-occurrence ⊢ admissible(Window)Reading: There is a concrete time envelope; the Work actually occurred within it. -
Evidence sufficiency
Observations E about WorkCell within Window ⊢ sufficient(E)Reading: There exists a non‑empty set of outcome Observations relevant to the Work and Window. -
Evidence insufficiency → Inconclusive
¬sufficient(E) ⊢ status = Inconclusive(ClauseCell, WorkCell, Window)Reading: Absent admissible evidence, do not guess; mark Inconclusive. -
Predicate evaluation
sufficient(E) ∧ eval(Predicate, E) = true ⊢ status = Satisfied(ClauseCell, WorkCell, Window)sufficient(E) ∧ eval(Predicate, E) = false ⊢ status = Violated(ClauseCell, WorkCell, Window)Reading: The Predicate (threshold/percentile/share/band/…) decides directly from E. -
Bridge discipline
usesCrossContexts(ClauseCell, WorkCell, MeasureCell) ∧ Bridges B declared ⊢ admissible(B)usesCrossContexts … ∧ ¬admissible(B) ⊢ status = InconclusiveReading: Cross‑context comparisons require explicit Bridges; without them, Inconclusive. -
CL aggregation (assurance hint)
Bridges B = {b₁…bₖ} ⊢ effectiveCL = min(CL(bᵢ))Reading: The weakest Bridge governs the assurance level communicated with the verdict (advisory to B.3 calculus). -
Population clauses
Clause quantifies over population W = {w₁…wₙ} ⊢ status = agg({status(Clause, wᵢ, Window)})Reading: For “≥ p%”‑style clauses, compute per‑Work verdicts, then apply the Clause’s quantifier. -
Non‑retroactivity
newClause or newMonitor after Window ⊢ doesNotAlter(status@Window)Reading: Later changes do not rewrite past verdicts. -
Conflict exposure
two admissible Bridge sets ⇒ conflicting statuses ⊢ escalate as Inconclusive, expose Loss notesReading: If equally defensible translations disagree, the honest outcome is Inconclusive plus an explanation.
Relations (with other patterns)
-
Builds on: F.1 (Contexts): keeps all meanings local. F.2–F.3: provide the SenseCells that become Clause/Work/Measure anchors. F.5: ensures labels for Clause/Work/Measure and Windows are didactically clear. F.7–F.9: supply Bridge kinds / CL and loss semantics. F.10: defines Status families and Window constructs. F.11: protects Method, MethodDescription, Work, and Actuation distinctions.
-
Uses (Part C patterns). KD‑CAL (Observation/Characteristic/Scale/Unit). Sys‑CAL (Work or Actuation Contexts). Kind-CAL (type labels for populations or cohort selection).
-
Constrains: Later reporting and assurance rules (B.3) must not collapse CL/Loss; they report them alongside status.
Migration notes (conceptual)
- Clause revisions. Introduce a new ClauseCell; keep old verdicts intact (Non‑retroactivity).
- Monitor changes. Update or replace Bridges (kind/CL/Loss). Future verdicts use the new Bridge; past ones are annotated, not rewritten.
- Scope corrections. If evidence was about the wrong Work, retire the verdict and restate the quadruple; do not patch by redefining the Clause.
- Unit harmonisation. When scales/units change, apply KD‑CAL conversions inside the Measure’s Context; if Cross‑context mapping is needed, declare a Bridge.
- Population refinement. If a Clause’s quantifier is refined (e.g., per‑region → per‑AZ), treat each as a new ClauseCell or a new Window partition; avoid hidden re‑baselining.
- Proxy retirement. When direct Observations become available, prefer them; keep earlier proxy‑based verdicts with their CL/Loss notes.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR‑F12‑S01 (Quadruple present). Every acceptance statement names ClauseCell, WorkCell, MeasureCell, and Window.
- SCR‑F12‑S02 (context‑locality). Each of the three Cells cites a Context (U.BoundedContext).
- SCR‑F12‑S03 (Evidence admissibility). The Observation(s) are about the same Work and lie within the Window.
- SCR‑F12‑S04 (Predicate explicit). The Predicate shape is stated (threshold/percentile/share/band/…) with any needed aggregation scope.
- SCR‑F12‑S05 (Bridge discipline). Any Cross‑context use declares Bridge(kind, CL, Loss).
- SCR‑F12‑S06 (Status trichotomy). The verdict is exactly one of {Satisfied, Violated, Inconclusive} and attaches to ClauseCell@Window about WorkCell.
- SCR‑F12‑S07 (Unit honesty). MeasureCell specifies Characteristic, Scale, Unit (KD‑CAL).
- SCR‑F12‑S08 (Temporal honesty). No verdict is asserted without a Window; no clause retroactively changes past verdicts.
Regression checks (RSCR)
- RSCR‑F12‑E01 (Bridge update). When a Bridge CL changes, past verdicts stand; future verdicts reference the new CL; reports surface the difference.
- RSCR‑F12‑E02 (Edition churn). When a Context’s canon updates, Cells reference the edition; old verdicts remain bound to their original editions.
- RSCR‑F12‑E03 (Scope drift guard). If the Work population definition changes, verdicts are not silently re‑interpreted; new verdicts cite the new population.
- RSCR‑F12‑E04 (Window partition). Changing from monthly to weekly windows creates new verdicts; monthly summaries are expressed as explicit aggregations of weekly statuses.
- RSCR‑F12‑E05 (Proxy retirement). When direct Observations replace proxies, the status computation is re‑run forward‑only; past proxy‑based verdicts retain their CL/Loss annotations.
F.12:15.3 Didactic distillation (60‑second recap)
Bind promises to runs with measurements in time. Name the Clause, the Work it talks about, the Measure of what actually happened, and the Window. Evaluate the Clause’s Predicate on Observations about that Work in that Window. If any concept crosses Contexts, declare a Bridge with kind/CL/Loss. The verdict (Satisfied/Violated/Inconclusive) attaches to Clause@Window about Work, never to a plan or to the abstract service.
F.12:End
Lexical Continuity & Deprecation
“Change names without changing history.” Status. Architectural pattern. Builds on: F.1 context of meaning; F.2 Term Harvesting; F.3 Intra‑Context Clustering (SenseCell); F.5 Naming Discipline; F.7 Concept‑Set (row) construction; F.8 Mint‑or‑Reuse decision; F.9 Bridges; F.10 Status windows. Coordinates with. Part C CALs when canon editions change (Sys/KD/Type/Method/LCA). Non‑goals. No registries, workflows, editors, or storage formats. No by‑name Cross‑context equivalence. No silent rewrites of old texts.
Intent & applicability
Intent. Provide a conceptual discipline for evolving labels (for SenseCells, Concept‑Set rows, and Role Description names) so that:
- new names clarify without erasing what earlier texts meant;
- aliases remain local to Contexts;
- genuine sense changes cause explicit splits/merges (F.7/F.9), not cosmetic renames.
Applicability. Whenever you consider renaming, aliasing, deprecating, or retiring any label in FPF: a SenseCell label in a Context, a Concept‑Set row label, or a Role Description name.
Problem frame
Unification efforts rot when names drift faster than senses or, worse, when senses change under a constant name.
- Silent relabeling. A new label is introduced as if nothing changed; readers cannot connect past to present.
- Alias bloat. Synonyms accumulate without discipline; reading becomes guesswork.
- Cross‑context aliasing. A single alias is made to stand for different Contexts (“global slang”), defeating locality.
- Retroactive edits. Old texts are silently rewritten to today’s names, corrupting provenance.
Forces
Core idea (didactic)
Treat names as lenses, not objects. The thing that persists is the sense (a SenseCell inside a Context, or the Cross‑context alignment embodied by a Concept‑Set row, or a Role Description that points to such sense). Names are lenses we look through. When the lens improves, we record a continuity relation between lenses; when the underlying sense changes, we split/merge the thing, then name accordingly.
Contexts keep names local. A label (including aliases) always belongs to one context or to one Concept‑Set row. Cross‑context similarity is handled by Bridges (F.9), never by shared names.
Minimal vocabulary (this pattern only)
- Legacy label — a previously used label in the same Context (or same Concept‑Set row / Role Description).
- Preferred label — the current F.5‑conformant label for that item.
- Alias (context‑local) — a read‑path from a legacy label to the preferred one inside the same Context (or the same row/template). For writing, prefer the current label.
- Continuity relation — a small set of relations over labels (below) that capture whether a change is just wording or a real sense change.
- Epoch note — an informative time marker (“used before 2024‑07”) attached to a legacy label to help readers of old texts. (No storage format implied.)
Solution — Continuity, not “registries”
Rather than maintain a tool or workflow, think with five continuity relations. Use the least-committing relation that tells the truth.
Continuity relations (normative meanings)
-
renames(label_old → label_new)— wording improved, sense unchanged. Use when: Same SenseCell / same Concept‑Set row / same Role Description; only the lexical form changed to satisfy F.5 (morphology, disambiguation, plain/tech harmony). Effect:label_oldbecomes a context‑local alias oflabel_new; both resolve to the same SenseCell, Concept-Set row, or Role Description. Past texts remain valid. -
aliases(label_legacy ↔ label_pref)— legacy synonym kept for reading. Use when: A common historical synonym exists in the same Context for the same SenseCell. Effect: Two‑way read‑path only; writing useslabel_pref. Keep at most one legacy alias per register to avoid bloat. -
splits(label_old ⇒ {label_A, label_B})— one label covered multiple senses; now separated. Use when: Your SenseCell was really two local senses; F.3 has split them; or a Concept‑Set row is refactored into two rows. Effect:label_oldis deprecated (read‑path allowed to a disambiguation note); new writing useslabel_A/label_B. No claim that either continues the old label wholesale. -
merges({label_A, label_B} ⇒ label_new)— two labels now recognized as one sense. Use when: F.3 shows same SenseCell; or two Concept‑Set rows collapse after F.9 raised CL sufficiently. Effect:label_Aandlabel_Bbecome aliases oflabel_new. Keep one epoch note on each legacy label. -
retires(label_old)— name withdrawn without successor. Use when: The label proved misleading and no single successor exists (e.g., it spanned different Contexts, or it was metaphorical). Effect: Only a read‑warning remains (“avoid in new writing; see Contexts X/Y”). Readers are pointed to Bridges or to multiple rows.
Important: All five relations are context‑local (SenseCell level) or row‑local (Concept‑Set). Never use them to “alias” across Contexts. If a change crosses Contexts, it is not a rename; it requires a Bridge (F.9) and often a split/merge of rows (F.7).
Invariants (normative)
- Locality of alias.
aliases(-)andrenames(-)operate within one context (SenseCell) or within one Concept‑Set row / Role Description. - Truth over comfort. If the sense changed, use
splits/merges(and possibly adjust rows/Bridges), notrenames. - Non‑retroactivity. Past texts remain phrased as written; continuity only adds read‑paths, never rewrites.
- Alias parsimony. per Context and per row, keep ≤ 1 legacy alias per register (Tech/Plain); prefer the one readers will most likely encounter.
- Prefer present for writing. In normative writing, use the current preferred label (F.5). Aliases are for reading comprehension.
- Bridge discipline. If a label shift would require crossing Contexts to “explain”, it is not a rename; use F.9 Bridge and, if needed, refactor the Concept‑Set row(s).
- Epoch honesty. When declaring continuity, attach a succinct epoch note (“pre‑2023 usage”) if it aids readers.
Self‑checks (mental, not procedural)
- Same‑sense test. Can you point to the same SenseCell (or same row) before and after? If yes →
renames/aliases. If no →splits/merges. - Context test. Does the change stay inside one context? If it needs two Contexts to explain, it’s a Bridge, not a rename.
- Reader test. What two legacy strings would a newcomer actually meet in old texts? Keep those two as aliases; drop the rest.
- History test. Does your “continuity” require editing old claims? If yes, you’re attempting a retroactive rewrite—stop.
- Didactic test. Can you explain the continuity relation in one sentence? If not, you are hiding a sense change.
Micro‑examples (illustrative)
Pure rename inside a Context (ITIL → clearer plain label)
Context: ITIL 4 (services).
Old: “SLO” (plain: service target) → New: “service‑level objective” (plain unchanged).
Relation: renames("SLO" → "service‑level objective").
Why: F.5 morphology & expansion; SenseCell unchanged (same clause semantics).
Effect: Old guidance remains readable; new writing spells out the term.
Alias for a common legacy synonym (Sys‑CAL)
Context: state‑space control (design).
Preferred: “actuation”. Legacy: “control output”.
Relation: aliases("control output" ↔ "actuation").
Why: Same SenseCell; legacy term appears in older textbooks.
Effect: Readers resolve to the SenseCell; new texts use “actuation”.
Split of a muddled local sense (Enactment)
Context: BPMN 2.0.
Legacy label “process” was used to mean both “collaboration” and “executable process” in a team’s prose.
Relation: splits("process" ⇒ {"collaboration","executable‑process"}).
Effect: The single Concept‑Set row becomes two; old label is deprecated with a disambiguation note.
Merge after clustering raised confidence (Kind-CAL row)
Two Concept‑Set rows {“DBaaS”, “Database‑Service”} converge after F.3 within the same context profile and F.9 raised CL.
Relation: merges({"DBaaS","Database‑Service"} ⇒ "Database‑Service").
Effect: “DBaaS” becomes a legacy alias with an epoch note.
Not a rename: Cross‑context temptation (forbidden)
Contexts: BPMN (design graph) vs PROV‑O (run activity). Temptation: “Let’s rename process to activity.” Diagnosis: Cross‑context; different SenseCells. Action: No continuity relation. Keep labels; if needed, declare a Bridge (F.9) explaining design→run mapping with CL/Loss.
Anti‑patterns & remedies
Extended examples
KD‑CAL × Services — metric target labels over time
- Contexts: ITIL 4 (services, design); SOSA/SSN (sensing, run).
- Before: Role Description used “SLO” (plain “target”) and readers often saw “service target”.
- Move:
renames("SLO" → "service‑level objective")(Context: ITIL). Keepaliases("service target" ↔ "service‑level objective"). - Why: Same local sense; clearer morphology for F.5; SOSA/SSN labels untouched.
- Pay‑off: Runtime Observations (SOSA) are later compared to service‑level objective clauses (ITIL) without Cross‑context aliasing.
Sys‑CAL × LCA‑CAL — separating execution vs actuation
- Contexts: IEC 61131‑3 (run); state‑space control texts (design).
- Temptation: Rename “task execution” to “actuation” “to sound control‑ish”.
- Diagnosis: Different Contexts; different SenseCells (program run vs control output).
- Move: No rename. Keep labels; later add Bridge “
execution (IEC)produces signals that realiseactuation (control)” with CL stating partial coverage. - Pay‑off: Plant narratives stop calling programs “actuators”; runtime vs control semantics stay crisp.
Kind-CAL × Method‑CAL — false merge avoided
- Contexts: OWL 2 (types, design); SPEM 2.0 (methods, design).
- Issue: A row labeled “Class” tried to absorb “WorkProductKind” by a
renames. - Diagnosis: Not same sense; different calculi (type vs artefact category).
- Move: Split the row:
splits("class" ⇒ {"type‑class","work‑product‑category"}). - Pay‑off: Downstream Role Descriptions can point to the correct SenseCell without redefining ontological commitments.
Enactment × KD‑CAL — retiring a misleading metaphor
- Context: BPMN 2.0 (design).
- Legacy: Team jargon “heartbeat” used for a timer event. Newcomers confuse it with sensor heartbeats (KD‑CAL).
- Move:
retires("heartbeat")in BPMN Context with note “use timer event; ‘heartbeat’ refers to sensor liveness in KD‑CAL”. - Pay‑off: Two different ecosystems stop colliding on the same catchy word.
Concept‑Set row refactor after rising CL
- Rows:
{“DBaaS”, “Database‑Service”}representing service notions across several Contexts. - F.3 + F.9 outcome: High CL; evidence of same Cross‑context alignment.
- Move:
merges({"DBaaS","Database‑Service"} ⇒ "Database‑Service")at row level. Both legacy labels become row‑local aliases with epoch notes. - Pay‑off: One clearer row label; old articles still understandable.
Reasoning primitives (judgement schemas, notation‑free)
Each judgement is a pure thought: premises ⇒ safe conclusion. No storage, no workflow, no roles.
Let ContextOf(ℓ) be the Context of label ℓ (when ℓ names a SenseCell); rowOf(ℓ) the Concept‑Set row (when ℓ names a row); senseOf(ℓ) the SenseCell it denotes (if local); pref(thing) the current preferred label of a SenseCell / row / Role Description.
Same‑sense & same‑place
ContextOf(ℓ₁)=ContextOf(ℓ₂) ∧ senseOf(ℓ₁)=senseOf(ℓ₂) ⊢ mayRename(ℓ₁→ℓ₂)
Reading: If two labels denote the same SenseCell in the same Context, a rename is legitimate.
F.13:12.2 -Local alias
ContextOf(ℓ₁)=ContextOf(ℓ₂) ∧ senseOf(ℓ₁)=senseOf(ℓ₂) ⊢ aliases(ℓ₁↔ℓ₂)
Reading: Legacy synonym can be kept as a read‑path; writing uses pref.
Split detection
coversMultipleLocalSenses(ℓ) ⊢ splits(ℓ ⇒ {ℓA,ℓB,… })
Reading: If one label straddles several local senses, declare a split and prefer the new precise labels.
Merge admission
ContextOf(ℓA)=ContextOf(ℓB) ∧ senseOf(ℓA)=senseOf(ℓB) ⊢ merges({ℓA,ℓB} ⇒ ℓN)
Reading: Once F.3 shows identity of sense within a Context, merging labels into one preferred label is safe.
Retirement
misleading(ℓ) ∧ ¬∃ℓ' sameSense(ℓ,ℓ') ⊢ retires(ℓ)
Reading: If a label misleads and has no single successor, retire it and point readers to relevant Contexts/rows.
Cross‑context guard
ContextOf(ℓ₁) ≠ ContextOf(ℓ₂) ⊢ ¬mayRename(ℓ₁→ℓ₂)
Reading: Different Contexts forbid rename/alias; any relation goes to Bridge (F.9).
Writing discipline
thing t ⊢ writeWithPreferred(t) = pref(t)
Reading: Normative prose uses the current preferred label; aliases are for reading.
Reading resolution
legacyLabel ℓ ⊢ readResolve(ℓ) = ⟨thing, pref(thing), epoch?⟩
Reading: A reader can mentally resolve a legacy label to the thing and its present name, with epoch hint if needed.
Alias budget
aliasesFor(thing, register=r) = A ⊢ |A| ≤ 1
Reading: Keep at most one legacy alias per register (Tech/Plain) for any one thing.
Row‑level continuity
rowOf(ℓA)=rowOf(ℓB)=R ∧ intension(R) stable ⊢ mayRenameRow(R,ℓB)
Reading: A row label can change if the row’s membership/intension did not change; otherwise refactor rows first (F.7).
Relations
Builds on: F.1 context of meaning (keeps locality), F.2 Harvesting (provides attested strings), F.3 Clustering (establishes SenseCells), F.5 Naming Discipline (supplies preferred labels), F.7 Concept‑Set rows, F.8 Mint‑or‑Reuse, F.9 Bridges, F.10 Status windows, F.11 Method harmonisation, F.12 Service acceptance.
Constrains:
- F.5 (Naming): may select preferred labels only after applying these continuity relations.
- F.7 (Rows): row relabels require row intension stability; otherwise use split/merge rows.
- F.9 (Bridges): Cross‑context changes must not be expressed as renames/aliases.
Used by. All Part C patterns when editions shift; all examples and tutorials when teaching with legacy terminology.
Migration notes (conceptual playbook)
- Ask the same‑sense question first. If the underlying SenseCell/row is unchanged, prefer
renames; else reach forsplits/merges. - Keep it inside the Context. If your explanation crosses Contexts, stop—this is Bridge territory (F.9), not a rename.
- Prefer clarity over fashion. Rename only when the new label removes a real ambiguity (F.5 criteria), not to chase style.
- Limit nostalgia. Admit one legacy alias in each register that readers will most likely meet; leave the rest to footnotes in examples.
- Deprecate with kindness. When retiring a label, add a one‑line pointer note (e.g., “see
timer eventin BPMN; ‘heartbeat’ in KD‑CAL means sensor liveness”). - Rows before names. If a rename request coincides with a shift in what the row covers, refactor rows (F.7) first, then choose labels.
- Edition bumps. When a canon updates, check labels used in that Context: if definitions shift, it’s a split/merge; if not, you may
renamesfor style/uniformity. - Teach the delta. In primers, show a mini table with legacy → preferred pairs only where readers will encounter both.
Acceptance tests (SCR/RSCR — concept‑level)
Static conformance (SCR)
- SCR-F13-S01 (context-local continuity). Every
renames/aliasesrelates labels within the same context or the same row/Role Description; none cross Contexts. - SCR‑F13‑S02 (Truthfulness). For each
renames, there exists an unchanged SenseCell/row; otherwise the move is rejected. - SCR‑F13‑S03 (Alias budget). For any one thing and register, the number of deprecated aliases is ≤ 1.
- SCR‑F13‑S04 (Non‑retroactivity). No requirement or suggestion to rewrite past texts is present; continuity is expressed as read‑paths.
- SCR‑F13‑S05 (Row integrity). A row rename occurs only when the row’s intension is stable; if membership changed, a row split/merge is documented (F.7).
- SCR‑F13‑S06 (Bridge discipline). No alias/rename is used to imply Cross‑context sameness; any such relation belongs under F.9.
Regression (RSCR)
- RSCR‑F13‑E01 (Edition drift audit). When a canon edition changes, all labels from that Context are checked against definitions; moves are
renamesif senses stable, elsesplits/merges. - RSCR‑F13‑E02 (Alias creep check). Periodically ensure alias budgets remain within ≤ 1 per register; surplus aliases are pruned.
- RSCR‑F13‑E03 (Bridge leak check). Scan continuity notes for Cross‑context hints; any such case is converted into a Bridge or deleted.
- RSCR‑F13‑E04 (Didactic continuity). Sampling of examples shows that readers can resolve legacy labels to current ones without confusion (via the continuity notes).
Didactic distillation (60‑second script)
Names are lenses. The thing that persists is the sense (a SenseCell in a Context, a Concept‑Set row, a Role Description). When you improve a lens, use
renamesoraliasesinside that same place. When the thing changes, say so withsplits/merges—and adjust rows/Bridges accordingly. Never rename across Contexts. Keep at most one legacy alias per register. Do not rewrite history; give readers read‑paths and brief epoch notes. With this discipline, you can clarify language without erasing meaning, and your models keep both continuity and truth.
F.13:End
Anti-Explosion Control for Role and Status Name Families
Status: Stable
"Name less; recover the kinds first."
Type. Architectural pattern.
Status. Stable.
Normativity. Normative.
Builds on: A.2 for work-facing U.Role; A.2.1 for U.RoleAssignment; A.2.5 for role state; A.2.7 for context-local role relation structure; A.15.1 for performed work; F.4 for RoleDescription; F.5 for local naming discipline; F.8 for mint-or-reuse decisions; F.9 for cross-context bridges; F.10 for status families and windows; F.18 for durable naming; A.6.5 for relation-slot discipline.
Coordinates with: A.2.2 for capability, A.3.1 and A.3.2 for method and method-family naming, A.10 and B.3 for evidence and assurance use, E.17 and E.10.D2 for publication and description use, and F.17 only when public or cross-context term-sheet reuse is current.
Plain entry cues (informative). Name explosion guard; role-name economy; status-name economy.
Intent and applicability
Intent. Keep role-like and status-like vocabularies small without losing real distinctions. F.14 is a control pass over candidate names and local name families. It does not define U.Role, does not define status ontology, and does not assign a holder. It asks what each proposed name is trying to name and blocks new durable names when the needed value is already a role value, role-relation expression, status family, status value, status window, qualifier, direct-pattern value, local phrase, or alias.
Applicability. Use F.14 when a project proposes several new role, status, access, evidence, requirement, source, method, capability, or work-like labels and the vocabulary starts to grow faster than the underlying distinctions. Use it before adding RoleDescriptions, Concept-Set rows, public names, cross-context rows, or role-relation names.
Primary EntityOfConcern in plain terms. One anti-explosion control pass over a candidate family of names in a bounded context or bridge family. The EoC is not the role value, not the status value, not the holder, not the work occurrence, and not a publication.
Admissible move in plain terms. Recover the kind of each candidate name, choose reuse or direct-pattern naming where possible, and record why no new durable role or status name is needed unless F.8 and F.18 admit it.
Primary working reader. A method author, terminology steward, architect, manager, or checker who sees names such as NightOperatorRole, EvidenceRole, SeniorReviewer, AtRiskStatus, PreValidated, AccessRole, or RequestApproverRole and must stop the vocabulary from becoming a second ontology.
Use this when. Use F.14 when name growth hides one of these questions:
- Is this one work-facing
U.Role, a RoleDescription label, a role-relation expression, a role assignment, a capability requirement, a method name, a work name, or only a local phrase? - Is this one status family, status value, status window, status-use relation, evidence-use relation, source-use relation, requirement-use relation, or presentation label?
- Is the candidate cross-context and therefore dependent on F.9 or F.17 before durable reuse?
What goes wrong if missed. Role labels become capability models, status labels become role families, access-control labels become work roles, and role-relation expressions become fake holders. The corpus then gets many small near-duplicate names that look precise but hide different kinds.
What this buys. A smaller vocabulary with stronger type separation: fewer durable names, clearer role relation structure, cleaner status families, fewer aliases with hidden claims, and more reliable F.8 and F.18 naming decisions.
Not this pattern when. Not F.14 when the question is one candidate expression only; use F.8. Not F.14 when the question is assigning a holder or attributing performed work; use A.2.1, F.6, and A.15.1. Not F.14 when the question is a status-use or evidence-use claim; use F.10, A.10, B.3, or the direct governing pattern. Not F.14 when the question is public terminology publication; use F.17 and F.18 after kind recovery.
Recognition versus assurance note. The recognition block is the name-growth situation plus the first kind-recovery move. The assurance block is the record, invariants, role-relation and status-family boundaries, conformance tests, and SoTA note. Assurance text tightens the same anti-explosion control pass; it must not turn F.14 into role ontology, status ontology, or naming authority for every value.
Problem frame
Name explosion usually begins with a helpful shortcut:
- Hybrid role shortcut.
RequestApproverRole,DevOpsEngineerRole, orIncidentLeadOnCallis minted because several roles often appear together. - Modifier-as-role shortcut.
NightOperatorRole,RemoteOperatorRole, orAPIApproverRoleis minted because a qualifier is visible. - Status-as-type shortcut.
AtRisk,Grace,PreValidated, orTemporarilyBreachedis minted as if time stance or status value were a new essence. - Source-suffix shortcut.
EvidenceRole,RequirementRole,AccessRole, orProviderRoleis minted because a source tradition uses role-like language. - Prestige shortcut.
SeniorReviewerorLeadApproveris minted to bypass a separation or assurance question. - Cross-context shortcut. The same label in two contexts is treated as one durable name without an F.9 bridge.
F.14 prevents those shortcuts from becoming durable ontology.
Forces
Core idea
Use the anti-explosion sequence before minting a durable role or status name.
- Recover kind first. Split the candidate family into role values, RoleDescription labels, role-relation expressions, assignments, work, capability, method, status, evidence, source, publication, requirement, policy, bridge, and local-phrase cases.
- Reuse existing values. If a role value, status family, Concept-Set row, local sense, or public term already admits the current use, reuse it and record aliases where needed.
- Use role relation structure instead of hybrid roles. If one role can satisfy another role requirement, two roles conflict, or roles travel together, use A.2.7 role relation structure. Do not mint a fused role unless the bounded context deliberately creates a new
U.Rolewith RoleDescription and F.8 and F.18 admission. - Use assignment checks instead of prestige names. If the issue is who may hold a role, whether a separation holds, or whether work occurred, use A.2.1, F.6, A.15.1, and role state checks.
- Use status families and windows instead of status-name sprawl. If the issue is time stance, evaluation state, grace, confidence, or presentation, use F.10 or the direct status pattern.
- Use direct patterns for qualifiers. Capability, method, work, evidence, source, publication, requirement, policy, and assurance qualifiers stay with their direct patterns. They may inform a name later; they do not become role or status ontology by suffix.
Minimal vocabulary
- Anti-explosion control pass - one review of a candidate family of related names to prevent unnecessary durable names.
- Candidate name family - a local set of proposed names that appear to cover related work, role, status, evidence, source, capability, method, or policy concerns.
- Recovered value - the typed FPF value or relation that the candidate name is trying to name.
- Role-relation expression - a context-local role-requirement substitution, incompatibility, qualification, or bundle expression governed by A.2.7.
- Status-family expression - a status family, value, window, confidence, or status-use relation governed by F.10 or a direct status pattern.
- Qualifier value - a value governed by a direct pattern that narrows use without becoming part of the role or status kind.
- Blocked minting - a decision that the candidate name remains an alias, local phrase, qualifier, role-relation expression, or direct-pattern name rather than a new durable role or status name.
Anti-explosion record
Use this record when more than one related candidate name is under pressure.
RecoveredValues is the center of the record. Each candidate expression is mapped to the value or relation it is trying to name. If no typed value is recovered, the expression stays local or goes to F.8 for a mint-or-reuse decision. DurableNamingRefs cites F.5, F.17, or F.18 only after the relevant value is recovered.
Levers
Recover kind before naming
Ask what the candidate expression is trying to name.
Reuse before minting
Reuse a value when the recovered value, bounded context, and admitted use match. Use F.9 when reuse crosses context. Use F.8 when a candidate appears new. Use F.18 only when a durable name is needed after kind recovery.
Role Relation Structure Before Hybrid Role
If two roles often appear together, state a role-bundle expression in A.2.7. If two roles must stay apart, state an incompatibility relation in A.2.7 and check assignments with A.2.1 and F.6. If one role value can satisfy another role requirement, state a role-requirement substitution relation in A.2.7. The role-relation expression does not assign a holder and does not become a role value by itself.
Status window before status family multiplication
If the proposed name marks evaluation, active use, grace, archival state, confidence, or presentation, keep the status family and use F.10 windows, values, or direct status-use relations. A new status family needs a recovered value difference, not a new adjective.
Qualifier before role-name clone
If the proposed role name adds time, location, object type, seniority, permission, method, capability, evidence, or source, recover the qualifier's direct pattern. Only keep it in a durable role name if F.18 admits that the bounded context truly needs a separate role value.
Invariants
- Kind first. A candidate name is not admitted as a durable role or status name until its recovered value is named.
- No status roles. Status, evidence, requirement, source, publication, and access uses do not become work-facing roles by suffix.
- No assignment by name. A RoleDescription label or role-relation expression does not assign a holder and does not prove performed work.
- No hybrid role by convenience. Role-bundle and incompatibility expressions stay in A.2.7 unless a bounded context deliberately creates a new role value with F.8 and F.18 admission.
- No capability by role label. Role names do not prove capability, skill, permission, assurance, or method validity.
- Status windows stay status-side. Time, confidence, grace, or presentation variation stays with F.10 or the direct status pattern unless a new status family is recovered.
- Cross-context reuse needs a bridge. Shared labels across contexts use F.9 before any Concept-Set row, public name, or durable cross-context reuse.
- Lineage labels do not preserve ontology. A historical label may be recorded as lineage or source wording, but it does not carry its old fused ontology forward.
Reasoning primitives
Interpretation: the expression is a cue. The recovered value governs the naming decision.
Interpretation: a bundle expression may be named as an expression, but it does not mint a fused U.Role.
Interpretation: separation questions need A.2.1 and F.6 checks, not prestige names.
Interpretation: status values and windows do not multiply status families by default.
Interpretation: capability, method, work, evidence, source, publication, policy, and assurance qualifiers must not hide inside role or status names.
Worked cases
Requester and approver
Candidate family: RequesterRole, ApproverRole, RequestApproverRole, SeniorApprover.
Result:
RequesterRoleandApproverRoleare work-facing role values with RoleDescriptions.RequestApproverRoleis blocked as a fused role. Use an A.2.7 role-bundle expression when the two roles travel together.- If the same holder must not carry both assignments in the same change window, use A.2.7 incompatibility plus A.2.1 and F.6 assignment checks.
SeniorApproveris not proof of independence or assurance. Recover role state, capability, assurance, or local policy before durable naming.
Operators across shifts
Candidate family: OperatorRole, NightOperatorRole, RemoteOperatorRole, OnCallOperatorRole.
Result:
OperatorRoleis the role value.night,remote, andon-callare recovered as schedule, location, role-state, work-plan, or policy qualifiers.- A new role is blocked unless the bounded context shows a distinct role value with different RoleDescription, assignment predicates, and method or work implications.
SLO compliance labels
Candidate family: Compliant, AtRisk, Grace, Breached, Waived.
Result:
- These are not role names.
- F.10 recovers status family, status value, status window, confidence, or deontic or policy use.
- Presentation labels may stay local or be named by the direct status pattern. They do not become
U.Role, RoleDescription, or role relation structure.
Evidence and requirement suffixes
Candidate family: EvidenceRole, RequirementRole, StandardRole, SourceRole.
Result:
- No work-facing role is recovered from suffix alone.
- Evidence, requirement, standard, and source uses go to A.10, B.3, E.10.D2, E.17, or the direct requirement or source pattern.
- A durable name may be admitted for the recovered relation, but not as a role value.
Cross-context role labels
Two contexts both use Operator. One is a plant-control role; the other is an access-control permission grouping.
Result:
- F.9 Bridge Card first.
- The bridge may admit Naming-only or RoleDescription naming for a local work-facing role when the role value is recovered.
- The bridge does not import access permission as
U.RoleAssignment, capability, or performed work.
Ordinary composite role names
A project says: "Vasya is an engineer, he works on musical robots, and he is also a musician who teaches robots to play music."
Result:
- The ordinary phrase may remain "robotics engineer and musician" or "robotics engineer-musician" when the reader can recover it without ambiguity. FPF does not require a
Rolesuffix in ordinary prose. - Recover at least two work-facing role values when they are current:
EngineerRole@RobotEngineeringContextandMusicianRole@MusicPracticeContext. If the engineering work is specifically robotics engineering, use a role qualifier, RoleDescription, or A.2.7 role-relation expression rather than mintingEngineerRoboticistRoleautomatically. - If "robotics engineer" is a stable local bundle or qualification relation, record it as
RoleRelationStructure@BoundedContextunder A.2.7. The relation structure may be named for local use, but it is not a new role value by itself. - Recover method and work values separately: engineering method, robotics-engineering method family, music teaching method, robot-training work, and performed music work stay under the method and work patterns. They may motivate a role name only after F.8 and F.18 admission.
- A durable role value is selected only when the bounded context needs different assignment predicates, capability expectations, incompatibilities, method/work implications, or public naming. Otherwise keep the ordinary composite phrase and cite the recovered role relation, method, work, and capability values where they matter.
Anti-patterns and repairs
Conformance checklist
Regression checks
Relations
- A.2. Governs the work-facing role value; F.14 only prevents unnecessary role-name growth.
- A.2.1 and F.6. Govern assignment and performed-work attribution; F.14 blocks names that hide those relations.
- A.2.5. Governs role state and enactable-state admission; F.14 blocks role-state qualifiers from becoming unexamined new roles.
- A.2.7. Governs role-requirement substitution, incompatibility, qualification, and bundle expressions; F.14 chooses that expression before hybrid-role minting.
- F.4 and F.5. Govern RoleDescription and local naming; F.14 supplies pressure to keep names few.
- F.8. Governs one candidate mint-or-reuse decision; F.14 uses F.8 when a family-level pass leaves a candidate unresolved.
- F.9 and F.17. Govern bridge and public term-sheet reuse; F.14 does not admit cross-context durable names by label alone.
- F.10. Governs status families, status values, windows, and status-use relations; F.14 prevents status-name sprawl.
- F.18. Governs durable naming after value recovery.
- A.10, B.3, E.17, and E.10.D2. Govern evidence, assurance, publication, source, description, and specification-use cases that often arrive with role-like suffixes.
SoTA-Echoing
SoTA note. F.14 does not import access-control, policy, terminology, or status taxonomies as FPF ontology. It uses their shared discipline: separate the named value from assignment, permission, status, evidence, and currentness claims before making a durable name.
Didactic distillation
When names multiply, do not ask for a better name first. Ask what values are being named. Reuse existing roles and status families when they already admit the use. Use role relation structure for role-requirement substitution, incompatibility, qualification, and bundles. Use status windows and values for temporal or evaluative variation. Send capability, method, work, evidence, source, publication, requirement, policy, and assurance qualifiers to their direct patterns. Mint durable names only after the recovered value deserves one.
F.14:End
Static and Regression Conformance Harness for Unification
Status: Stable
"Prove locality and parsimony first; only then prove composition."
Type. Architectural pattern.
Status. Stable.
Normativity. Normative.
Builds on: E.10.D1 for U.BoundedContext discipline; F.1 for context selection; F.2 and F.3 for term harvesting, Local-Sense, and SenseCell formation; F.4 for RoleDescription as description episteme for one local U.Role; F.5 for local naming discipline; F.7 and F.8 for Concept-Set rows and mint-or-reuse decisions; F.9 for Bridge Cards and CL; F.10 for status families, values, and windows; F.13 for aliases; F.14 for anti-explosion control; F.18 for durable naming.
Coordinates with: A.2, A.2.1, A.2.5, A.2.7, F.6, and A.15.1 for work-facing role, assignment, role state, role relation structure, and performed-work claims; A.10, B.3, E.17, and E.10.D2 for evidence, assurance, publication, source, and description-use claims; A.6.5 for relation-slot discipline.
Plain entry cues (informative). SCR and RSCR harness; unification slice check; context-bridge regression check.
Intent and applicability
Intent. Give one compact harness for checking whether a unification slice is locally sound now and remains sound across changes. F.15 does not define contexts, senses, rows, roles, status families, bridges, aliases, or names. It checks that the current slice uses those values under their direct patterns without collapsing them into one convenient table or one global meaning.
Applicability. Use F.15 when a project declares or revises a slice that contains several of these moving parts: U.BoundedContext cards, Local-Senses, SenseCells, Concept-Set rows, RoleDescriptions, Bridge Cards, status families or windows, aliases, or durable names.
Primary EntityOfConcern in plain terms. One unification slice under static and regression conformance check. The EoC is not a registry, not a work process, not a role assignment, not a status value, and not a publication.
Admissible move in plain terms. Check the slice against static conformance rules for the current snapshot and regression conformance rules for the changed snapshot, then treat any failed claim under the direct governing pattern.
Primary working reader. A terminology steward, method author, architect, manager, or checker who needs to decide whether a proposed unification row, bridge, role-description label, status window, or rename is safe enough to reuse.
Use this when. Use F.15 when a slice feels "almost unified" but one of these questions is still open:
- Do all local senses still stay inside their own bounded contexts?
- Does each RoleDescription still describe one local
U.Rolethrough one SenseCell? - Does a row really relate at least two contexts, or is it a row-shaped local note?
- Does a Bridge Card state kind, direction,
CL, loss, and admitted use? - Did an edition change, row change, rename, bridge change, or status-window change preserve the earlier commitments?
What goes wrong if missed. Local meanings become global by shared labels, rows multiply without real distinctions, role descriptions quietly become status or evidence templates, bridges become equivalence by habit, and changed editions rewrite earlier claims without a visible continuity decision.
What this buys. A small safety harness for Part F: context-local meaning remains local, cross-context use stays bridge-bound, role and status claims leave through direct patterns, and changes can be checked without turning the harness into a new governance format.
Not this pattern when. Not F.15 when the only question is one word, one role value, one role assignment, one status family, one bridge, one public term, one source relation, or one publication-use claim. Use the direct pattern first. Return to F.15 only when the slice combines several moving parts and their joint conformance is live.
Recognition versus assurance note. The recognition block is the unification slice and the current or changed moving parts. The assurance block is the static and regression rule set, the record, witnesses, and worked cases. Assurance text must not turn F.15 into a registry format, publication authority, role ontology, or status ontology.
Problem frame
Unification work fails when composition is claimed before locality and continuity have been checked:
- Locality leak. A same-spelled label is treated as one meaning across contexts.
- Row sprawl. Concept-Set rows grow laterally with near-duplicates.
- Role or status inflation. Adjectival, temporal, or source-looking variants become new role or status types.
- Silent rewrite. An edition or rename changes meaning while keeping the old row or name.
- Bridge hardening. A weak Bridge is later used as equivalence without a new witness set.
- Register split. Unified Tech and Plain labels drift apart and no longer refer to the same local sense.
F.15 catches these failures before the slice is used for cross-context reuse, naming, assurance, or downstream claims.
Forces
Core idea
The harness has two families of rules.
- Static Conformance Rules (SCR). Check the current snapshot. Contexts, Local-Senses, SenseCells, rows, RoleDescriptions, bridges, windows, aliases, and names must satisfy their direct local rules now.
- Regression and Stability Conformance Rules (RSCR). Check a changed snapshot against the earlier snapshot. The rule asks what stayed the same, what changed, what must be forked, what must be retired, and which bridge or name needs a fresh witness.
Both families are judgement schemas over content claims. They do not prescribe storage, implementation, team responsibility, or publication format.
Minimal vocabulary
- Unification slice - the small set of contexts, senses, rows, RoleDescriptions, bridges, windows, aliases, and names being checked together.
- Static Conformance Rule (SCR) - a check that must hold in the current snapshot.
- Regression and Stability Conformance Rule (RSCR) - a check that compares an earlier and later snapshot.
- Check claim - one content assertion such as "this row spans two contexts" or "this RoleDescription refers to one SenseCell".
- Witness - one small example, counterexample, invariant, or edition note that makes the check inspectable.
- Moving part - any context, local sense, row, role-description label, bridge, status window, alias, or public name whose change could affect the slice.
- Failed conformance - a check result that makes the claim governed by the direct pattern before reuse.
Objects under check
F.15 may check these values together, but does not redefine them:
U.BoundedContextcards from F.1.- Local-Senses from F.2 and F.3.
- SenseCells, meaning
(Context, Local-Sense). - Concept-Set rows from F.7.
- RoleDescriptions from F.4, each describing one local
U.Rolethrough one SenseCell. - Bridge Cards from F.9.
- Status families, values, confidence, and windows from F.10 or the direct status pattern.
- Aliases from F.13.
- Candidate names and durable names from F.5, F.8, F.14, F.17, and F.18.
If the slice contains role assignments, performed work, evidence use, source use, publication use, assurance, gate, decision, method, capability, or policy claims, F.15 records that those claims leave the harness for direct governing patterns. It does not absorb them.
Unification conformance record
Use this record when several moving parts are being checked together.
StaticRuleResults and RegressionRuleResults name only the checks that matter for the current slice. NonAdmittedUses names the tempting claim that the slice does not permit, such as direct role assignment, performed-work attribution, evidence use, source authority, publication authority, status transfer, or bridge-based equivalence.
Static conformance rules for local material
All local rules stay inside one U.BoundedContext.
SCR-F15-S1 (Context in view).
Seed sigma has context C -> C is among the slice contexts.
Every harvested seed lives in a bounded context that is deliberately in view for this slice.
SCR-F15-S2 (Attestation currentness).
Occurrence omega attests seed sigma -> omega states edition and locus.
A Local-Sense can be reconstructed from attestations rather than from memory or a fashionable label.
SCR-F15-S3 (In-context clustering).
Local-Sense lambda clusters seeds sigma_i -> every sigma_i belongs to context(lambda).
No cross-context items are hidden inside one Local-Sense.
SCR-F15-S4 (Two registers).
Local-Sense lambda -> Unified Tech label and Plain label both refer to lambda.
The two labels differ in register, not in kind or sense.
SCR-F15-S5 (Minimal gloss).
gloss(lambda) -> states only the needed local meaning.
The gloss does not smuggle behavior, permission, evidence, source authority, publication status, or global sameness.
SCR-F15-S6 (Context-local normal form).
normalize_C(sourceExpression) = n -> n is used only inside C unless F.9 or F.17 admits wider use.
Normalization inside one context does not create a global name.
Static conformance rules for cross-context material
Cross-context rules connect local material without collapsing locality.
SCR-F15-S7 (Single-cell RoleDescription).
RoleDescription tau -> refersTo(tau, one SenseCell) and describes(tau, one local U.Role).
A RoleDescription is not a status template, evidence template, source template, publication template, or role assignment.
SCR-F15-S8 (Name discipline).
RoleDescription tau or NameCard n -> name obeys F.5, F.8, F.14, and F.18 as applicable.
Naming follows kind recovery before durable naming.
SCR-F15-S9 (Row spans contexts).
Row rho lists cells cell_i -> at least two distinct contexts occur.
A row of one context is not cross-context unification.
SCR-F15-S10 (Row purity).
Row rho -> each listed item is one SenseCell.
No cell is a pre-merged bundle, hidden bridge, or global meaning.
SCR-F15-S11 (Reuse before minting).
Proposed row rho2 overlaps intended use of row rho -> reuse rho or record the F.8 mint decision.
New rows need a visible difference, not merely a new label.
SCR-F15-S12 (Bridge explicitness).
C1 != C2 and relation asserted between cells -> BridgeCard states cells, kind, direction, CL, loss, witness, and admitted use.
A cross-context relation appears as a Bridge Card before it is consumed by rows, names, assurance, or downstream claims.
SCR-F15-S13 (Bridge locality).
BridgeCard beta -> beta relates cells from different contexts.
Within one context, use clustering or local relation discipline rather than a bridge.
SCR-F15-S14 (Status window honesty).
Status family Sigma varies by time, scale, phase, confidence, or use -> F.10 names value or window; no new status family by adjective alone.
Temporal and scale variation does not create status ontology by suffix.
SCR-F15-S15 (Role-relation preservation).
role bundle or incompatibility expression is live -> A.2.7 states it; no fused RoleDescription is minted by convenience.
Role-relation expressions are not role assignments and do not prove performed work.
SCR-F15-S16 (Direct-pattern boundary for non-unification claims).
Slice contains assignment, work, evidence, source, publication, assurance, gate, decision, method, capability, or policy claim -> cite the direct governing pattern.
F.15 checks whether the slice is safe to compose; it does not decide those claims.
SCR-F15-S17 (Public or cross-context naming admission).
Name is public, cross-context, or term-sheet-facing -> F.17 and F.18 admit it after kind recovery.
Public reuse is not created by repeated local labels.
Twin-register checks
Use these checks when a Unified Tech label and Plain label are both present.
SCR-F15-T1 (Same local sense).
TechLabel t and PlainLabel p -> both resolve to the same SenseCell or NameCard target.
SCR-F15-T2 (Same kind).
TechLabel t names kind K -> PlainLabel p does not suggest another kind.
SCR-F15-T3 (Ambiguous head guarded).
PlainLabel p has a high-risk head -> first use includes a kind head or short gloss.
SCR-F15-T4 (No normative displacement).
PlainLabel p is reader-facing -> it does not replace the Unified Tech label in normative Core claims.
SCR-F15-T5 (Bridge before copying).
PlainLabel p is reused in another context -> F.9 Bridge Card or F.17 public term-sheet row exists first.
Regression and stability rules
The RSCR family compares an earlier snapshot @t0 and a later snapshot @t1.
Contexts and editions
RSCR-F15-E1 (No silent replacement).
Context C@t0 edition e0, Context C@t1 edition e1, e1 != e0 -> new context or explicit recency decision.
A new edition becomes a new context when sense changes; otherwise the recency decision is visible.
RSCR-F15-E2 (Known confusion check).
C@t1 derives from C@t0 -> known confusion cases from C@t0 are rechecked or explicitly retired.
Old traps do not disappear merely because an edition changed.
Local-Senses and SenseCells
RSCR-F15-E3 (Reconstructible Local-Sense).
Local-Sense lambda@t0 changes attestations -> lambda@t1 remains reconstructible from attestations@t1.
RSCR-F15-E4 (SenseCell context stability).
SenseCell (C, lambda)@t0 -> (C2, lambda2)@t1 -> same cell only if C2 = C and lambda2 preserves local sense.
A SenseCell does not migrate across contexts through edits.
Concept-Set rows
RSCR-F15-E5 (Row identity).
Row rho@t0 with cells cell_i -> row rho@t1 is same row only if each cell preserves its local sense.
If a cell changes sense, mint a new row and retire the old row.
RSCR-F15-E6 (Add or retire before silent mutation).
Row rho loses or gains a cell because an edition split occurred -> preserve old row and add or retire rows explicitly.
RoleDescriptions
RSCR-F15-E7 (Single-cell continuity).
RoleDescription tau@t0 -> tau@t1 -> refersTo(tau@t1, one SenseCell) and same cell or justified switch.
RSCR-F15-E8 (Alias for rename, new RoleDescription for meaning change).
name(tau@t0) -> name(tau@t1) -> alias if only label changed; new RoleDescription if described role or local sense changed.
Bridges
RSCR-F15-E9 (Recheck Bridge on endpoint movement).
Bridge beta@t0 and either endpoint cell changes -> beta is rechecked; CL, loss, admitted use, and witness may change.
RSCR-F15-E10 (No drift to equivalence).
Bridge beta kind is not equivalence at t0 and equivalence is claimed at t1 -> new witness set is required.
Equivalence is rare and cannot arrive by gradual wording drift.
Status windows and role relation structure
RSCR-F15-E11 (Window stability).
Status family windows@t0 -> windows@t1 -> changed only when variance of meaning or use is shown.
RSCR-F15-E12 (Role-relation stability).
role incompatibility, bundle, qualification, or role-requirement substitution@t0 -> @t1 -> preserved, retired, or restated before assignment or naming use.
No later RoleDescription fuses roles that were kept distinct by A.2.7.
Public naming
RSCR-F15-E13 (Public name continuity).
Public or term-sheet-facing name changes -> F.17 or F.18 records lineage, alias, split, merge, or retirement.
Local rename is not enough when the name already faces other contexts.
Reasoning primitives
Interpretation: F.15 checks only triggered rows. It does not require every possible object slot to be present.
Interpretation: a change that matters to context, sense, row, RoleDescription, Bridge, status window, alias, or name must be stated.
Interpretation: a failed Bridge rule is governed by F.9; a failed RoleDescription rule is governed by F.4; a failed status-window rule is governed by F.10; a failed naming rule is governed by F.8, F.17, or F.18.
Interpretation: a Bridge may admit naming, explanation, or type-structure use. It does not admit role assignment, work attribution, or evidence use by itself.
Worked cases
Activity and task in two run contexts
Contexts: PROV-O run context and IEC 61131-3 run context.
Local senses: activity in the first context and task in the second.
F.15 result:
- SCR-F15-S9 passes only if a Concept-Set row lists both SenseCells.
- SCR-F15-S12 requires a Bridge Card. The admitted use may be comparison or explanation, not direct substitution.
- A RoleDescription named
ExecutionRolemay use one local SenseCell only. It does not describe both senses at once. - If a later edition makes the
tasksense cyclic while theactivitysense remains non-periodic, RSCR-F15-E9 rechecks the Bridge and may lowerCL.
Service availability row across service and observation contexts
Contexts: ITIL service-management context and SOSA observation context.
Row: ServiceAvailability with one SLO SenseCell and one uptime-observation SenseCell.
F.15 result:
- SCR-F15-S9 passes because two contexts are present.
- SCR-F15-S12 requires Bridge kind, direction,
CL, loss, and admitted use. - SCR-F15-S16 treats evidence and assurance claims under A.10 and B.3; the row itself does not make the observation adequate evidence.
- SCR-F15-S14 treats time-window and confidence variation under F.10.
Rename a RoleDescription without changing meaning
Slice: IncidentStatusRoleDescription is renamed to ServiceIncidentRoleDescription, while the described local U.Role and SenseCell stay the same.
F.15 result:
- RSCR-F15-E7 checks single-cell continuity.
- RSCR-F15-E8 admits an alias because only the label changed.
- F.18 updates durable naming if the name is reusable outside the local context.
- If the described role changed, F.15 rejects alias-only treatment; F.4, F.8, and F.18 govern the repaired claim.
Weak bridge later claimed as equivalence
Slice: a Bridge between an OWL subclass sense and an FCA order-edge sense was partial overlap at CL = 2. A later formal result claims equivalence inside one constrained fragment.
F.15 result:
- RSCR-F15-E10 requires a new witness set for equivalence.
- SCR-F15-S12 updates kind, direction, loss, and admitted use.
- C.29 may govern the mathematical-lens claim; F.15 only checks that the changed Bridge is not silently strengthened.
Peak-hours status proposal
Slice: a team proposes PeakHoursAvailabilityStatus as a new status family.
F.15 result:
- SCR-F15-S14 fails if the only difference is a time window.
- F.10 governs the status-family and window claim.
- F.14 and F.18 block a new durable name unless a new recovered status family is present.
Anti-patterns and repairs
Closure conditions
A unification slice is locally admissible for reuse when:
- every triggered static conformance rule holds for the current snapshot;
- every changed moving part has a regression result;
- each failed rule names the direct governing pattern before reuse;
- at least one witness exists for each live Bridge, row, RoleDescription rename, status-window change, or public naming change;
- the record names tempting non-admitted uses such as role assignment, performed-work attribution, source authority, publication authority, status transfer, and evidence use.
Closure is local to the slice and current use. A later context edition, row change, Bridge endpoint change, RoleDescription change, public-name change, or status-window change reopens the relevant RSCR rows.
Relations
- F.1, F.2, F.3. Provide contexts, terms, Local-Senses, and SenseCells checked by SCR-F15-S1 through S6.
- F.4, A.2, A.2.1, F.6, A.15.1. Govern RoleDescription, role assignment, and performed-work claims that F.15 must not absorb.
- F.7 and F.8. Govern rows and mint-or-reuse decisions checked by SCR-F15-S9 through S11 and RSCR-F15-E5 through E6.
- F.9 and B.3. Govern Bridge Cards,
CL, loss, and assurance penalties. - F.10. Governs status family, value, confidence, and window claims.
- F.13, F.17, F.18. Govern aliases, public term sheets, and durable names.
- F.14. Governs anti-explosion before names are minted for role-like and status-like families.
- A.10, E.17, E.10.D2. Govern evidence, publication, source, and description-use claims when they appear inside a slice.
SoTA-Echoing
Currentness rule: treat the current Part F and role-method-work patterns named in Builds on and Coordinates with as the source of governing interpretation. If F.4, F.9, F.10, F.17, F.18, A.2.1, F.6, A.15.1, A.10, B.3, E.17, or E.10.D2 changes a governed value, relation, admitted use, or boundary, recheck only the affected SCR or RSCR rows and the worked case that exercises the changed boundary.
Didactic distillation
Use F.15 as a small check over a slice, not as a new vocabulary machine. First, check locality: contexts are named, local senses are inside their contexts, rows really cross contexts, RoleDescriptions describe one local role, bridges state kind and loss, and status variation stays with status windows. Then check change: editions, rows, bridges, role descriptions, aliases, names, and status windows either preserve their earlier meaning or state the change. When a check fails, do not patch the label. Treat the claim under the direct governing pattern and repair the value.
F.15:End
Worked‑Example Template (Cross‑Domain)
“Show the thought, not the tooling.” Status. Architectural pattern. Builds on: E.10.D1 Lexical Discipline for “Context” (D.CTX); F.1–F.15. Coordinates with. B.3 Trust & Assurance Calculus (CL on Bridges); Part C patterns (Sys‑CAL, KD‑CAL, Kind-CAL, Method‑CAL).
Intent & applicability
Intent. Provide a single, didactic page template for cross‑domain worked examples that makes every claim local to a Context (Context), every Cross‑context step explicit via a Bridge, and every named role template or status template traceably tied to one SenseCell. The template is notation‑free and tool‑agnostic; it captures how to think the example so others can replay it.
Applicability. Use whenever you illustrate any FPF construct that spans more than one Context: Role Assignment & Enactment bindings, acceptance checks, measurement-driven claims, type alignment, control/actuation stories, etc.
Non‑goals. No registries, workflows, editors, or storage formats; no step‑by‑step “team procedures.” This pattern shapes the page a reader sees, not how it was produced.
Problem frame
Cross‑domain examples often fail in four predictable ways:
- Global words. Process, role, service, execution used without the Context, inviting drift.
- Hidden bridges. “It’s basically the same” across disciplines, with losses left implicit.
- Name without sense. A Role Description name appears with no visible tie to a SenseCell.
- List without structure. Facts line up but never meet in a single Concept‑Set row.
The template counters these by forcing Contexts → senses → row → bridges, in that order.
Core idea (didactic)
A robust worked example is a compact theatre:
- Stage = a declared unification line (which threads of Part C are in play).
- Backdrop = Context set (Contexts from F.1), each with a one‑line Card.
- Actors = SenseCells (⟨Context, Local‑Sense⟩) you will actually use.
- Plot = one Concept‑Set row where those SenseCells are aligned for this example.
- Cues = Role Descriptions that reference exactly one SenseCell each.
- Cross‑talk = Bridges across Contexts (with kind, CL, and loss).
- Timing = Windows (if status varies across time/scale) and SoD (if duties must remain separate).
- Moral = a handful of harness checks (F.15) that the reader can verify mentally.
Minimal vocabulary (this pattern only)
- Context / Context — always U.BoundedContext (E.10.D1).
- Local‑Sense — a sense clustered within one context (F.3).
- SenseCell — address
⟨Context, Local‑Sense⟩. - Concept‑Set row (ρ) — a Cross‑context alignment for “what we treat as one” in this example (F.7/F.8).
- Role Description (τ) — a Role or Status that points to one SenseCell (F.4–F.6).
- Bridge (β) — explicit Cross‑context relation with kind (≡ / overlaps / broader‑than / narrower‑than), CL, and loss note (F.9).
- Window — a bounded interval (time/scale/phase) tied to a Status (F.10).
- SoD — Separation-of-Duties constraint among Roles (F.14).
The one‑page Worked‑Example Canvas
Each bullet is a thought you make visible, not a form field.
-
Title & claim. A short name + one‑sentence claim you will demonstrate. Example: “Service Uptime as Evaluated by Runtime Executions” — “We compare Execution (IEC) observations to SLO (ITIL) within a declared window.”
-
Unification line. Which Part C threads are active. Example: Enactment + KD‑CAL (sensing) + Sys‑CAL (execution).
-
Context set (compact Cards). 3–6 Contexts from F.1 with one‑line scope and, if inherent, design vs run stance. Example: BPMN 2.0 (design: workflow graph); PROV‑O (run: Activity uses/generates); ITIL 4 (design: SLO/SLA); SOSA/SSN (run: Observation); IEC 61131‑3 (run: task executes).
-
SenseCells in play. List exactly the Local‑Senses you will use, each prefixed by its Context. Example: ⟨ITIL: service‑level‑objective⟩, ⟨SOSA: observation⟩, ⟨IEC: execution‑task⟩, ⟨PROV: activity⟩.
-
The Concept‑Set row (ρ). A single line that places the cells you treat as “the same” for the claim, with a one‑breath justification. Example row ρ: { ⟨ITIL:SLO⟩ ↔ ⟨SOSA:observed‑availability⟩ } — We treat “target availability” and “observed availability” as comparable magnitudes in a specific window.
-
Bridges (β). For any Cross‑context relation not captured by ρ (or that requires nuance), state kind, CL, loss. Example β₁: ⟨IEC:execution‑task⟩ overlaps ⟨PROV:activity⟩, CL=2, loss: PROV lacks cyclic scheduling semantics. Example β₂: ⟨SOSA:observation⟩ narrower‑than ⟨ITIL:measurement⟩, CL=2, loss: ITIL omits procedure metadata.
-
Role-Description hooks. Name the Role or Status templates and the one SenseCell each references. Example:
AvailabilityStatus→ ⟨ITIL:SLO⟩;Execution→ ⟨IEC:execution‑task⟩;EvidenceObservation→ ⟨SOSA:observation⟩. -
Windows & SoD (if relevant). Spell any status windows and any SoD you rely on. Example: Window: monthly, business‑hours; SoD: Operator ⟂ SLO‑Owner.
-
Micro‑narrative (5–7 lines). Walk the reader through the claim using Context‑prefixed words and the row/bridges above. Example (abridged): “A task (IEC) runs the control program. Its observations (SOSA) yield availability over the monthly window. We compare those to the SLO (ITIL) in the same window. Where we refer to activity (PROV) we do so via β₁ (overlap, CL=2). The row ρ carries the comparison; the Bridge β₂ explains why ‘measurement’ in ITIL is broader than ‘observation’ in SOSA.”
Harness pings (F.15). S-Row-Cross, S-RoleDesc-SingleCell, E-NoSilentEdition. Example: S‑Row‑Cross, S‑RoleDescription‑SingleCell, E‑NoSilentEdition.
Memory rule. If your Canvas cannot fit on a single page (or one slide), the example is teaching the wrong thing.
Invariants (normative)
- Locality of meaning. Every term in the narrative appears with its Context at first mention (process (BPMN), activity (PROV), …).
- At least one row. The example MUST include ≥ 1 Concept‑Set row spanning ≥ 2 Contexts.
- Single-cell Role Description. Every Role Description in the example MUST point to one SenseCell.
- Explicit bridges. Any Cross‑context step not explained by the row MUST appear as a Bridge with kind, CL, and loss.
- Temporal honesty. If a Context fixes design vs run, the narrative respects it.
- Window discipline. If comparison depends on time/scale/phase, a window is stated rather than minting a new Status type.
- SoD integrity. If duties are involved, SoD is explicit and unbroken.
- Didactic parsimony. One page, one claim, one row (or a tiny bundle of closely related rows).
The row panel (how to show it without notation)
Show the row as a compact two‑to‑five‑column list:
- Column header = Context.
- Cell =
Local‑Sense label(tech register; optional plain label on next line). - Footline (one line) = “row reason”—why these cells belong in this row for this claim.
Example visual (linear text): ITIL 4: service‑level‑objective | SOSA/SSN: observed‑availability → Row reason: both quantify availability for the same window; units harmonised by KD‑CAL; procedural metadata differs (captured in loss of β₂).
Worked micro‑example (didactic)
Title. Alarms Should Not Satisfy Uptime Claim. An alarm‑only Execution (IEC) cannot satisfy the SLO (ITIL) because observation (SOSA) windows exclude time in “alarm state.”
Contexts. IEC 61131‑3 (run), SOSA/SSN (run), ITIL 4 (design).
SenseCells. ⟨IEC:execution‑task⟩, ⟨SOSA:observation⟩, ⟨ITIL:SLO⟩.
Row ρ. { ⟨ITIL:uptime‑SLO⟩ ↔ ⟨SOSA:observed‑availability⟩ } — comparable magnitudes in the calendar‑month window.
Bridge β. ⟨IEC:alarm‑state⟩ narrower‑than ⟨SOSA:observation‑qualifier⟩, CL=2, loss: SOSA does not prescribe plant‑specific alarm semantics.
Role-Description hooks. AvailabilityStatus → ⟨ITIL:SLO⟩; EvidenceObservation → ⟨SOSA:observation⟩.
Window. Calendar month, business‑hours, exclusion: alarm‑state intervals.
Micro‑narrative (4 lines). A task (IEC) runs; when the plant is in alarm state, observations (SOSA) are flagged and excluded from the availability window. We then compare the remaining interval to the SLO (ITIL) via row ρ. The Bridge β clarifies why the flag is a qualifier in SOSA, not a Status type in ITIL.
Harness pings. S‑Row‑Cross, S‑RoleDescr‑SingleCell, S‑Window, S‑TemporalHonesty.
Relations (with other patterns)
Builds on: F.1 (Contexts), F.2–F.3 (terms & senses), F.4–F.6 (roles), F.7–F.8 (rows), F.9 (bridges), F.10 (windows), F.14 (SoD), F.15 (harness).
Constrains: Any example placed in Part C or Part B must render its claim through this canvas (or a faithful reduction), so readers can run F.15 mentally.
Didactic distillation (60‑second script)
“A good cross‑domain example fits on one page. First, name the claim. Then show the Contexts you’re using. List the SenseCells you will actually touch. Draw one row that makes them the same for this claim. Every Cross‑context nuance you can’t justify in that row becomes a Bridge with a kind, a CL, and a loss sentence. Point each Role Description to one cell. If time/scale matters, state the window; if duties matter, state SoD. Finish with two or three harness pings from F.15. That’s it—no tooling, no long procedures. The reader can now replay your thought and agree (or disagree) at the right place.”
Anti‑patterns & remedies
Extended worked micro‑examples
Each example fits the one‑page canvas (§5) and makes the row and bridges do the work.
Type alignment: OWL class vs FCA concept (design‑time only)
Title & claim. “Two Lenses on Pump: OWL class and FCA concept align for catalogue reasoning.”
Unification line. Kind-CAL (design) + FCA (design).
Contexts. OWL 2 (profiles) — classes, subClassOf (design). FCA corpus — formal concepts, lattice order (design).
SenseCells. ⟨OWL:class ‘Pump’⟩, ⟨FCA:formal‑concept ‘Pump’⟩.
Row ρ. { ⟨OWL:Pump⟩ ↔ ⟨FCA:Pump⟩ } — same practical extension in this product catalogue.
Bridge β. ⟨FCA:lattice‑order⟩ overlaps ⟨OWL:subclass‑order⟩, CL=2, loss: FCA intents may include context attributes not modeled in OWL restrictions.
Role-Description hooks. TypeLabel → ⟨OWL:class⟩ (for naming), no runtime Role Assignment/Enactment.
Micro‑narrative (3 lines). For catalogue queries, the instances covered by OWL class Pump match those of the FCA concept created from the same attributes; we treat them as one row. The orderings diverge in nuance (β), but not for membership in this example.
Harness pings. S‑Row‑Cross, S‑TemporalHonesty (design only), S‑Bridge‑Kind‑CL.
Role vs permission: SoD in enactment vs access control
Title & claim. “Behavioral role (BPMN) is disjoint from access role (RBAC); keep duties separate.”
Unification line. Role Assignmnent and Enactment (design & run) + access/deontics (design).
Contexts. BPMN 2.0 — participant/lanes (design). NIST RBAC (2004) — roles/permissions (design).
SenseCells. ⟨BPMN:participant⟩, ⟨RBAC:role⟩.
Row ρ. — (intentionally none) — we do not treat them as the same.
Bridge β. ⟨BPMN:participant⟩ disjoint ⟨RBAC:role⟩, CL=3, loss: none—different dimensions (behavioral mask vs permission grouping).
Role-Description hooks. Operator → ⟨BPMN:participant⟩; AccessRole → ⟨RBAC:role⟩. SoD: Operator ⟂ AccessRole‑Admin.
Window. Not applicable.
Micro‑narrative (3 lines). We show SoD by prohibiting the same actor from holding Operator and AccessRole‑Admin. The disjoint β prevents leakage between behavioral masks and permission bundles.
Harness pings. S‑RoleDescr‑SingleCell, S‑SoD, S‑Bridge‑Disjoint.
Method quartet: from MethodDescription to Work with observations
Title & claim. “Behavioral role (BPMN) is disjoint from access role (RBAC); keep duties separate.”
Unification line. Role Assignment & Enactment (design & run) + access/deontics (design).
Contexts. SPEM 2.0 (design: Method or MethodDescription), PROV‑O (run: Activity), SOSA/SSN (run: Observation), ITIL 4 (design: SLO).
SenseCells. ⟨SPEM:MethodDescription⟩, ⟨PROV:activity⟩, ⟨SOSA:observation⟩, ⟨ITIL:SLO⟩.
Row ρ. { ⟨ITIL:SLO:build‑time⟩ ↔ ⟨SOSA:observed‑build‑duration⟩ } — compare promised vs observed duration on the same window.
Bridges. β₁: ⟨SPEM:MethodDescription⟩ narrower‑than ⟨PROV:activity‑plan⟩, CL=2, loss: PROV lacks prescriptive structure; β₂: ⟨SOSA:observation⟩ narrower‑than ⟨ITIL:measurement⟩, CL=2, loss: ITIL abstracts from procedure.
Role-Description hooks. Operator → ⟨BPMN:participant⟩; AccessRole → ⟨RBAC:role⟩. SoD: Operator ⟂ AccessRole-Admin.
Window. Release window: calendar week.
Micro‑narrative (4 lines). The MethodDescription (SPEM) implies a target build‑time; Work (PROV activity) occurs; observations (SOSA) provide actuals; we compare against the SLO (ITIL) via row ρ over the calendar week window. Bridges β₁–β₂ explain why plan/measure semantics do not collapse.
Harness pings. S‑Row‑Cross, S‑Window, S‑RoleDesc‑SingleCell, S‑TemporalHonesty.
Reasoning primitives (judgement schemas)
These are mental checks you can perform on any example page.
-
Row validity
cells(ρ) = {⟨Cᵢ,Sᵢ⟩} with |Contexts(ρ)| ≥ 2 ⊢ validRow(ρ)Reading: A row is valid only if it spans at least two Contexts and all entries are legitimate SenseCells (from F.3). -
Bridge coverage
coRef(Ca,Cb) ∧ ¬sameRow(Ca,Cb) ⊢ requires β(Ca↔Cb)Reading: If two Contexts are co‑referenced in the narrative but their senses are not placed in the same row, an explicit Bridge is needed. -
Role-Description single-cell
Role Description τ used ⊢ ∃!⟨C,S⟩ : ref(τ)=⟨C,S⟩ -
Window sufficiency
compare(qᵢ@Cᵢ, qⱼ@Cⱼ) ⊢ windowDeclaredReading: Any Cross‑context quantitative comparison calls for a stated Window. -
Temporal honesty
C has stance s ∈ {design, run} ⊢ claims@C must respect sReading: Do not assert run‑facts in a design‑only Context, or vice versa. -
SoD integrity
SoD(D₁ ⟂ D₂) ∧ assign(actor, D₁) ∧ assign(actor, D₂) ⊢ violationReading: A declared SoD cannot be violated inside the example. -
Bridge clarity
β given ⊢ kind(β) ∧ CL(β) ∧ loss(β)Reading: Every Bridge shows kind, CL, and a one‑line loss. -
Edition clarity
card(C) ⊢ has(name, edition)Reading: Each Context Card specifies name + edition/profile. -
Harness ping mapping
ping ∈ {S‑*, E‑*} ⊢ ping ⇒ subset of judgements aboveReading: Each named harness check (F.15) has a clear reading in these judgements.
Acceptance tests (SCR/RSCR)
Static conformance (SCR)
- SCR‑F16‑S01 (Row present). The page contains ≥ 1 Concept‑Set row spanning ≥ 2 Contexts.
- SCR‑F16‑S02 (Bridge explicit). Every Cross‑context assertion not justified by a row is shown as a Bridge with kind, CL, loss.
- SCR-F16-S03 (Role-Description anchoring). Each Role Description appearing in the page references exactly one SenseCell.
- SCR‑F16‑S04 (Context prefixes). First mention of each ambiguous term is Context‑prefixed.
- SCR‑F16‑S05 (Window discipline). Any numeric comparison across Contexts names a Window.
- SCR‑F16‑S06 (DesignRunTag). Claims respect each Context’s DesignRunTag stance.
- SCR‑F16‑S07 (SoD). If duties are named and SoD is relevant, SoD is stated and unviolated.
- SCR‑F16‑S08 (One‑page parsimony). The example fits the one‑page canvas; if extended, each sub‑page still respects §6 invariants.
Regression (RSCR)
- RSCR‑F16‑E01 (Edition drift). When a Context’s edition changes, the example either (a) is unaffected or (b) adds a note adjusting β or the row; no silent rewrites.
- RSCR‑F16‑E02 (Bridge re‑score). If an upstream CL definition changes (B.3), affected Bridges on the page show the new CL and, if needed, an updated loss sentence.
- RSCR‑F16‑E03 (Row resilience). If a SenseCell is split in F.3 (sense refinement), the example either keeps the same row using one child sense, or splits into two rows with a short justification.
- RSCR‑F16‑E04 (Window clarity). If organisational cadence changes (e.g., from monthly to weekly), windows on the page are updated explicitly.
Migration notes (conceptual)
- Refactor long tutorials. Extract the claim; pick 3–6 Contexts (Cards); list the SenseCells you actually use; write one tight row; surface any cross‑talk as Bridges with loss notes; delete everything else.
- Split crowded rows. If a row tries to carry more than ~4 cells, split into two rows and write a one‑line purpose for each.
- Stabilise vocabulary. If you find yourself rewriting terms mid‑page, you likely forgot a Context; return to F.1 and add a Card.
- Teach the bridge itch. Leave “these are the same” feelings ungratified until you can articulate kind, CL, loss in one sentence.
- DesignRunTag respect. If a design‑only Context tempts you into runtime talk, move that part of the narrative into a run‑Context and Bridge as needed.
- Keep the page living. When upstream rows/bridges evolve (F.7–F.9), adjust the page minimally and call out the change in a margin note (conceptual, not procedural).
Teaching variants (all obey §6 invariants)
- Two‑Context equivalence. Smallest case: 1 row, 2 Contexts, β (≡, CL=3) to explain why they’re truly the same for this claim.
- Triangulation. 1 row, 3 Contexts; typical for measurement ↔ service ↔ execution.
- Disjointness lesson. No row; one β (disjoint) plus a short SoD story.
- Window primer. Same sense across Contexts but different default windows; the page is about the window choice, not the term.
Didactic checklist (author’s quick scan)
- One sentence claim?
- Contexts (with editions) visible?
- SenseCells named (tech & plain labels acceptable)?
- Exactly one tight row (or two, each justified)?
- All Cross‑context steps shown as β(kind, CL, loss)?
- Role Description → one SenseCell each?
- Window present where numbers meet?
- SoD stated where duties appear?
- Page fits a single view?
Closing distillation (30‑second echo)
A useful worked example is a one‑page alignment: claim → Contexts → cells → one row → explicit bridges → Role-Description hooks → window/SoD if needed. No tooling, no process charts—just visible thinking that any careful reader can replay and critique at the right place.
F.16:End
Unified Term Sheet
Status: Stable
Status: stable pattern.
Use this when a term decision must become reader-facing, durable, public, Core-facing, or cross-context. Use it when a role name, status name, relation name, slot name, FPF kind name, local concept name, or bridgeable term set has outgrown one local repair and must be shown as one reviewed term row.
First useful move: identify the governed term decision, not the wording alone. Name the bounded context, the governed FPF kind or governed object kind, the local senses, the bridge claim if cross-context use is present, and the current direct pattern that owns the underlying object. Then publish only the term-row facts that are already governed there.
Do not use this pattern for one sentence repair, one private glossary note, one local synonym choice, or one attempt to make an object real by putting it into a table. Use E.10, A.6.P, C.2.P, F.18, or the direct domain pattern first when the kind, relation, slot position, admissible use, or name-card decision is still unsettled.
Intent and applicability
UnifiedTermSheet is a reader-facing term publication for one bounded unification thread. It gives a careful reader one compact table of reviewed term rows: the chosen Tech and Plain names, the specified governed kind or governed value, the local senses, the bridge relation when cross-context use is claimed, and the small rationale that makes the naming decision reviewable.
The pattern is useful when a team has already done enough local sense work that a name can be reused without redoing the whole unification argument each time. It is especially useful for:
- public or cross-context role names;
- status-family names and status-window labels;
- durable relation, slot, interface, or signature names;
- FPF kind names and local concept names that appear in more than one bounded context;
- term rows cited by examples, training material, project standards, or tool interfaces;
- Part G, architecture, transformation, and evaluation vocabulary where row ids must stay stable across editions.
F.17 does not create U.Role, U.Status, U.Evidence, U.Method, U.Work, U.Episteme, U.Relation, U.SlotKind, or any other underlying object. It publishes a term row for an already governed object, relation, slot, or local concept. The direct pattern remains responsible for the object and its admissible use.
Problem frame
Unification work often succeeds locally and then fails in reuse. A term looks stable in one section, but another reader cannot see which bounded context, local sense, bridge, name-card decision, or direct governing pattern was used. Teams then invent new labels, import a local tradition as if it were universal, or treat a teaching block as if it were an ontology.
The damage is practical:
- local meanings become global slogans;
- one row silently mixes a role, a role description, a status value, a capability claim, and a work assignment;
- public names drift because no row id, edition, or name-card reference stays stable;
- cross-context sameness is asserted by spelling rather than by an
F.9bridge; - examples in other patterns cite a term but not the term decision that makes the example portable.
F.17 fixes this by making the term row itself reviewable. Each row says what kind of thing is being named, where the local senses came from, what bridge is claimed, which name was selected, and which direct pattern owns the underlying object.
Forces
Core idea
A Unified Term Sheet is a table of term rows for one bounded unification thread.
Each row has one primary term decision:
The row may cite several local senses and several bridges, but it does not fuse their underlying objects. If a source phrase points toward multiple typed FPF values, split the row or cite the direct pattern that keeps the values distinct.
Minimal vocabulary
UnifiedTermSheet is the whole reader-facing term table for one bounded unification thread.
UnifiedTermRow is one row in that sheet. It publishes one reviewed term decision.
ThreadContextRef names the bounded context and edition in which the sheet is current.
GovernedObjectKindOrValueRef names the specified kind, local concept, relation, slot kind, status family, role, or other governed value being named. Use U.Type only when the row really names a U-kind. Do not force local concepts, slot kinds, relation kinds, status values, or role assignments into U.Type.
DirectGoverningPatternRef names the pattern that owns the underlying object or claim. F.17 owns the term-row publication, not the object.
SenseCell is a bounded-context local sense reference. It names the context, edition, local expression, local sense, and source reference when source use is current.
BridgeRef cites an F.9 bridge when one row uses senses from more than one bounded context or when sameness, near-identity, retargeting, or loss matters.
UnifiedTechName and UnifiedPlainName are the selected names governed by F.5 and F.18. Extra aliases belong in the name-card or local lexicon material, not as rival unified names in the row.
BlockPlan is the didactic grouping of rows. A block is a memory and teaching device, not an ontological parent.
When to create or update a UTS row
Create or update a UTS row when at least one condition is present:
- the name will be public, Core-facing, or reused across bounded contexts;
- a row id is needed for later examples, checks, dashboards, training material, or tool interface labels;
- a role name, status-family name, slot name, relation name, or local concept name is being reused outside the immediate local repair;
- a bridge claim is being used for cross-context term reuse;
- a name-card decision from
F.18needs a compact reader-facing term row; - a direct pattern changes the governed object in a way that changes the name, local sense, bridge, or admissible use.
Do not create a row only because a word was noticed. First recover the kind, relation, slot position, and admissible use under the direct governing pattern.
Row schema
Use these columns unless the sheet has a justified specialization.
For SenseCells, cite the bounded context and edition. If the source is a publication or source text, cite the source through the source-governing pattern; do not let the source title substitute for the local sense.
Block plan
A UTS must declare its block plan. Blocks should be few enough for a careful reader to remember and specific enough to make row search easy.
Example block plan for a role, method, work, and status thread:
- Context and governed values.
- Roles and role descriptions.
- Role assignments and performed work.
- Methods, method descriptions, and work plans.
- Status families and status windows.
- Relation, slot, interface, and bridge terms.
- Evidence, assurance, source, and publication terms when those are the governed values.
This example is not a required ontology. It is a didactic grouping. The sheet may use different blocks when the unification thread is about architecture, transformation flows, evaluation characteristics, Part G search packs, or another area.
Layouts
F.17 admits two common layouts.
Layout A, context-first: keep the left rail fixed and add one bounded-context column per selected context. Use this when the reader must compare local senses across named contexts.
Layout B, comparison-column: keep context and edition inside SenseCells and use a smaller set of comparison columns such as tradition, discipline, language, or project family. Use this for teaching when the direct bounded-context cells would be too wide. The comparison columns are presentation aids; they have context authority only when each cell still cites the bounded context and edition.
Never mix a context column and a discipline column as if they had the same kind. A bounded context is a meaning scope; a discipline column is a didactic comparison view.
Static conformance rules for a UTS
Use these checks before citing a UTS row outside its local sheet.
Regression and stability rules
Recheck only the rows affected by the changed object, name, bridge, or source.
Worked cases
Role name becomes public across two project contexts
A project has ReviewerRole@DesignReview and ReviewerRole@ExternalAudit. The local expressions both say "reviewer", but one concerns a system-in-role performing design review work and the other concerns an assurance actor producing an audit report.
The UTS row does not declare one universal reviewer. It either creates two rows or one row with an explicit F.9 bridge and loss note. Each row cites the direct role pattern, the RoleDescription when current, and the F.18 NameCardRef. If evidence or assurance is current, A.10 or B.3 governs that separate row or note.
Status label looks like a role name
A team proposes BlockedReviewer as a public label. F.17 does not accept it as a row until the direct patterns are separated. Reviewer is a role value; blocked is a status-family value or status-window value. The sheet may publish Reviewer as a role row and Blocked as a status row, with a note that a local UI may render them together. The table does not create a role called "blocked reviewer".
Relation and slot names become reusable
An architecture pattern needs public names for interfaceSlot, providedPort, and requiredPort. The UTS row cites A.6.5 for slot discipline, A.6.RSIR when the relation-signature-interface boundary is current, and F.18 for durable names. The row does not treat a slot name as a component, role, or capability. If a project context uses port differently, the UTS row keeps the local sense and bridge explicit.
Misleading evidence-role row
A sheet has a row labelled Evidence role. F.17 repairs the row by recovering the governed object instead of treating that label as a U-kind. If the claim is that an episteme is being used as evidence for another claim, A.10, B.3, or A.2.4 governs the evidence relation. If the claim is that a system performs evidence-producing work, A.2.1, F.6, and A.15.1 govern role assignment and performed work. The UTS may publish names for these values, but it must not keep a generic evidence-role row that fuses them.
Anti-patterns and repairs
Closure conditions
A UTS row is ready for ordinary reuse only when:
- the governed kind or value is explicit;
- the direct pattern is named;
- Tech and Plain names are selected under
F.5andF.18; - local senses are bounded-context and edition scoped;
- cross-context claims cite
F.9; - the row names admissible use and blocked use;
- currentness conditions are stated;
- any role, status, evidence, source, publication, description, method, work, relation, slot, interface, or characteristic claim remains under its direct pattern.
Relations
Builds on: F.1, F.2, F.3, F.5, F.7, F.8, F.9, F.15, and F.18.
Coordinates with: A.2, A.2.1, A.2.7, A.6.5, A.6.P, A.10, A.15.1, A.19.SPR, B.3, C.2.P, E.10, E.10.D2, E.17, F.4, F.6, F.10, and F.14.
Constrains: any public, Core-facing, durable, or cross-context term sheet row that cites FPF vocabulary, local concepts, relation names, slot names, role names, status names, or bridgeable sense clusters.
SoTA-Echoing
Currentness rule: when F.5, F.8, F.9, F.10, F.15, F.18, A.2, A.2.1, A.2.7, A.6.5, A.10, B.3, E.17, or E.10.D2 changes the governed value, admissible use, bridge, source-use boundary, status-family boundary, role boundary, or naming decision, recheck only the affected UTS rows and examples.
Didactic distillation
A Unified Term Sheet is not the ontology and not the object. It is the table that lets people reuse the naming decision without guessing. Each row says: what kind of thing is named, which direct pattern governs it, which local senses were used, which bridge is claimed, which Tech and Plain names were selected, and what use the row permits.
F.17:End
Local-First Unification Naming Protocol
Status: Stable Pattern state: stable pattern. Audience: engineer-managers, lead architects, ontology editors, and authors who must make one name reusable without turning that name into a hidden ontology.
Use This When
Use F.18 when a name must become stable, public, Core-facing, reusable across contexts, or durable enough that later work can cite it without guessing. Typical cases:
- a local expression becomes a durable name for a role, relation, slot, method, work, characteristic, status value, architecture element, or other already governed value;
- two teams use different words for the same candidate sense and need one reusable term plus preserved local wording;
- one tempting head word is useful in one context but misleading in another;
- a role-derived, method-derived, status-like, evidence-like, interface-like, or slot-like name risks creating a second ontology by wording alone.
First useful move: recover the governed object or governed value before choosing the name. Ask: what already-governed value is being named, in which bounded context, by which governing pattern, for which use, and with which local sense? Only then decide whether a NameCard and, when public or cross-context use is current, a UnifiedTermRow are needed.
Do not use F.18 for one-off wording repair. If the phrase is local and not becoming a reusable name, use E.10, E.10.ARCH, A.6.P, A.6.RSIR, C.2.P, or the governing pattern for the object being named.
Context
Names are handles for use, not creators of ontology. A good name lets people talk about a governed value without smuggling in extra role, capability, method, work, status, evidence, interface, or cross-context claims.
F.18 supplies the naming discipline for Part F and for any FPF pattern that needs a durable public term. It coordinates with:
F.5for type-name and role-description label form;F.8for mint-or-reuse decisions;F.9for cross-context bridges;F.13for renames, aliases, splits, and merges;F.14for anti-explosion control;F.17for public term-row publication;A.6.5andA.6.RSIRwhen relation, signature, interface, slot, or role wording hides the governed object.
The central EntityOfConcern is the naming relation around a governed value:
The NameCard describes and governs the name. It does not create the governed value. A UnifiedTermRow publishes the selected name for public, Core-facing, durable, or cross-context use; it also does not create the governed value.
Problem
FPF texts fail when names are treated as if they carried ontology by themselves.
- A short label appears in another context and gets treated as the same value, although no bridge says what survives.
- A role-looking name quietly bundles role value, holder assignment, capability, method fit, work evidence, or authorization.
- A status-like or evidence-like phrase becomes a fake role or fake type because the row says "evidence role", "status role", or similar wording.
- A relation, slot, interface, port, or signature name hides the relation position or governed pattern that should own the claim.
- A term chosen for convenience becomes a permanent Core-facing name without candidate comparison, rejected alternatives, or lineage.
- Local names proliferate until the corpus has several almost-synonyms and no recoverable reason for choosing one.
The repair is not to choose prettier words. The repair is to recover the governed value and then publish a name whose scope, kind, context, and use are visible.
Forces
Solution
Use a local-first naming protocol:
- Recover the governed value and its direct governing pattern.
- Decide whether the name is only local wording or a durable reusable name.
- If durable, create or update a
NameCard. - Choose the Tech label and Plain label from a visible candidate set.
- Record why the selected pair is better for the declared use than rejected candidates.
- Use
F.17only when the name needs public, Core-facing, durable, or cross-context publication. - Keep bridge, status, evidence, slot, role, method, work, and interface claims in their own governing patterns.
Naming Invariants
Every durable name must satisfy these invariants.
NameCard Fields
Use this compact form when a durable name is live:
Field discipline:
GovernedValueRefnames the value, relation, slot, claim record, or local concept being named. It is not a row id by default.GoverningPatternRefnames the pattern that decides the value, not the pattern that merely publishes or teaches the name.CandidateSetrecords the plausible labels considered, grouped by head-term family.RejectedCandidatesrecords why tempting names were not selected.UnifiedTermRowRefis present only when[F.17](/generated/patterns/F.17)term-row publication is current.RefreshConditionsays when the name must be reconsidered: context edition change, bridge change, governing-pattern change, or repeated reader error.
Candidate Selection
Do not pick a durable label in one stroke. Build a small candidate set, normally five to ten candidates, from at least two head-term families. Judge candidates on:
- semantic fidelity: does the label preserve the governed value without adding or losing required conditions?
- reader ergonomics: can the intended reader say and remember it?
- morphology fit: does the word shape fit the kind being named, for example role value, method, work, description, relation, slot, characteristic, or status value?
- alias risk: will a careful reader import a wrong sense from nearby FPF patterns or external practice?
Use these as ordinal comparisons. Do not average them into one score. If a Pareto-front or quality-diversity method is used, the dimensions and dominance rule must be visible on the card.
One candidate can win even when it is not perfect, but the SelectionRationale must say what it buys and what risk remains.
Public Term Rows
Use F.17 when the name becomes public, Core-facing, durable across contexts, or cross-context. The term row carries the publication object:
- row id;
- governed object kind or governed value reference;
- direct governing pattern;
- Tech and Plain labels;
- sense cells;
- bridge references;
- edition and currentness condition.
The term row is not the governed value. A row for ReviewerRole publishes the role name; it does not create the role. A row for EvidenceUseRelation publishes a relation name; it does not make an episteme into a role. A row for SlotKind or EndpointSlot publishes slot vocabulary; it does not create a generic interface ontology.
Role, Assignment, Slot, and Status Naming Settlement
This settlement makes several naming boundaries explicit.
Role Names
A durable role name names a U.Role value in a bounded context. Good role names normally use role morphology, for example ReviewerRole, ShipbuilderRole, or ServiceProviderRole.
A role name must not include:
- the holder that fills a role assignment;
- capability evidence or skill level;
- method or method-family selection;
- performed work;
- status value or gate result;
- source, evidence, publication, or assurance use.
If a phrase such as SeniorReviewer, NightOperator, or source wording like evidence role appears, recover the governed values first. The result may be a role value, a holder assignment, a status assertion, an evidence-use relation, a work admission condition, or a local source phrase. Do not force all of them into one role name.
Holder Assignment Names
A holder assignment is governed by A.2.1, not by the role name itself. If the assignment needs a public name, name the assignment relation as such, for example:
Holder#Role:Context@Window may be used as a compact assignment notation where accepted by [A.2.1](/generated/patterns/A.2.1). It is not a role name and not proof of capability.
Capability, Method, and Work Names
Keep these separate:
ShipbuilderRolenames a role value;ShipbuildingCapabilitynames a capability of a system or acting holon;ShipbuildingMethodnames a method or method family;HullAssemblyWorknames work or a work family.
Role-derived or role-method-coupled method names are method names when the current governed value is a method, method family, method description, work plan, or work occurrence. They are governed by A.3.1, A.3.2, and A.15, with F.18 only choosing the durable name. A role relation structure may constrain who may use or perform the method; it does not produce the method name.
Method-relation and method-composition names are method-side names too. If a phrase names serial composition, parallel composition, guarded choice, iteration, refinement, substitution, decomposition, parameterization, method-family membership, fallback, or dispatch among methods, recover MethodRelationStructure@BoundedContext under A.3.1, A.3.2, A.15, G.5, or a direct method-composition pattern when current. Algebraic, graph, categorical, process-calculus, matrix, embedding, distributed, or neural notation names the lens or representation only when that lens is the governed value.
Role-Relation, Method-Relation, Role-Method, and Lens Names
Role-relation expressions remain expressions or relations unless the bounded context creates a durable role value through A.2, A.2.7, role description, and F.18 naming. A role-algebra, graph, matrix, embedding, distributed, or neural description is a lens over the selected role relation structure; it is not automatically the named role, holder, method, or work.
First recover what the name is for:
Status, Evidence, Source, and Publication Names
Status-like and evidence-like wording must go to direct patterns:
- status value or status assertion:
F.10orA.19.SPR; - evidence-use relation:
A.10; - assurance use:
B.3; - source use:
E.10.D2or source-use patterns; - publication or description use:
E.17andC.2.1; - gate or admission result: the relevant gate, decision, or assurance pattern.
Do not name these as U.Role values unless a work-facing role value is actually current. "This standard plays the role of evidence" is repaired to the appropriate evidence-use, source-use, or status-use relation; it is not a work-role assignment for the standard.
Relation, Slot, Interface, Port, and Signature Names
If a name touches relation, slot, interface, port, boundary, protocol, API, or signature wording, use A.6.RSIR and direct governing patterns.
A.6.5governs relation slot discipline and SlotSpecs.A.6.0governs signatures and law-governed declarations.A.6.Mand architecture patterns govern module interfaces and architecture interfaces.A.6.F, transformation, and architecture patterns govern functional ports and functional structures.A.6.C, protocol, service-access, and commitment patterns govern API, protocol, and service-access cases.E.17governs publication or description interfaces.
F.18 can publish a durable name for the recovered value. It does not decide which value the interface word names.
What Belongs In The Label
Belongs in the label:
- a head word that helps readers recognize the governed value;
- a stable qualifier that is part of the local sense;
- role morphology when the governed value is a role;
- relation, slot, method, work, or characteristic morphology when those kinds are current.
Does not belong in the label:
- numbers and thresholds;
- temporary admission state;
- holder identity;
- capability evidence;
- method fit unless the governed value is a method or method family;
- work occurrence;
- gate result;
- source or evidence authority;
- context label used as if it were universal.
Quick check: if removing the word changes only current admission, holder, evidence, date, or gate use, it does not belong in the durable label.
Worked Cases
Role, Holder, Capability, Method, And Work
A shipyard team wants one public name for "shipbuilder".
Recovered values:
ShipbuilderRoleinShipyardProductionContext;- holder assignment for a named worker or team under
A.2.1; ShipbuildingCapabilitywith envelope and measures under capability patterns;ShipbuildingMethodor method family underA.3.1andA.3.2;HullAssemblyWorkunder work patterns.
F.18 settlement:
The rejected candidates are not "worse synonyms." They name different governed values.
Engineer-Roboticist and Musician
A lab says: "Vasya is an engineer, does robot engineering, is therefore an engineer-roboticist. These are musical robots, and Vasya is also a musician, performs music, and teaches robots music."
Recovered values:
- Vasya as holder in
MusicalRobotLab_2026; - engineering role value or local engineering-role expression;
- robotics as domain, practice, method-family, or work-field qualification of the engineering role expression;
MusicianRoleas an independent role value when music performance matters separately;- robot-engineering method or work, music-performance work, and robot-music-teaching method or work under method and work patterns;
- optional role-algebra, graph, matrix, embedding, or neural representation only if the project actually uses such a lens to describe the role relation structure.
F.18 settlement:
If the current sentence is for ordinary project communication, "Vasya is our engineer-roboticist and musician" is admissible. If the current record is a method record, name RobotEngineeringMethod or the relevant method family under [A.3.1](/generated/patterns/A.3.1)/[A.3.2](/generated/patterns/A.3.2). If the current record is performed work, name the work occurrence under [A.15.1](/generated/patterns/A.15.1). Do not make one compressed label carry all of these values.
Method Relation Structure and Method Algebra Name
A lab says: "Use the robot-engineering method algebra: choose scouting, then calibration, then training; fall back to teleoperation if training fails."
Recovered values:
- one or more robot-engineering methods or method families under
A.3.1; - a method-family registry or selector outcome under
G.5when the family registry or selector result is current; MethodRelationStructure@MusicalRobotLab_2026when the current claim is serial composition, guarded fallback, or family selection among methods;- a method description when the source notation describes that structure;
- a
C.29mathematical-lens use when "algebra" is the selected representation for checking composition, fallback, or preserved/lost structure; - work plan or dated work only when a concrete plan or occurrence is current.
F.18 settlement: RobotEngineeringMethod names a method or method family only when that is the governed value. RobotEngineeringMethodRelationStructure may be a Tech-register name for the selected method relation structure when durable naming is needed. RobotEngineeringMethodAlgebra names the lens only when the algebraic representation itself is the governed value. Do not use a role label such as RoboticsEngineerRole to name the method relation structure, and do not use "method algebra" to hide a work plan or performed work.
Evidence-Like Source Phrase
A review table contains the phrase "model card evidence role".
Recovered values:
- a model-card episteme;
- an evidence-use relation to a target claim;
- possible source-currentness and assurance-use relations;
- no work-facing role unless an acting system is assigned one.
F.18 settlement: no durable role name is minted. If a public term is needed, name the relation, for example ModelCardEvidenceUse, with A.10 as governing pattern and F.17 publication only when the term row is current.
Interface-Like Source Phrase
A software team says "the payment interface owns customer identity".
Recovered candidates:
- module interface under
A.6.M; - API description or protocol under
A.6.C; - signature or SlotSpecs under
A.6.0andA.6.5; - publication or description interface under
E.17; - responsible role assignment under
A.2.1.
F.18 settlement: do not mint PaymentInterfaceRole. First recover which governed value the phrase names. Then name that value through its governing pattern.
Cross-Context Name
Two teams use component, module, and unit for nearby meanings.
Recovered values:
- structural component under architecture and part-whole patterns;
- deployable module under module-interface patterns;
- management unit under organizational patterns.
F.18 settlement: choose a Tech label only for the governed value in its bounded context. Use F.9 bridges for cross-context comparison. Use F.17 only if a public term row is needed.
Anti-Patterns And Repairs
Conformance Checks
Use these checks before a durable name enters a pattern or UnifiedTermSheet.
Regression checks:
- When a context edition changes, re-check local sense and bridge claims.
- When a role description changes, re-check role name and any holder-assignment name.
- When a method, capability, work, evidence, or status pattern changes, re-check any name that borrowed morphology from that area.
- When repeated reader errors occur, reopen candidate comparison instead of adding aliases indefinitely.
SoTA-Echoing
F.18 uses current terminology and naming practice as source material, but keeps the FPF ontology primary.
Relations
Builds on F.0.1, F.1, F.2, F.3, F.5, F.8, F.9, F.13, F.14, F.15, and F.17.
Coordinates with:
A.2,A.2.1,A.2.5,A.2.7, andA.15for role value, role assignment, role state, role relation structure, role-algebra lens use, and work-role alignment;A.3.1andA.3.2for method and method-family names;A.6.5,A.6.RSIR,A.6.0,A.6.M,A.6.F, andA.6.Cfor relation, slot, signature, interface, port, and protocol names;A.10,B.3,F.10,E.10.D2,E.17, andC.2.1for evidence-use, assurance-use, status-use, source-use, publication-use, and description-use names;C.16,C.18, and Part G search patterns when candidate comparison uses Pareto or quality-diversity vocabulary.
Constrained non-use:
F.18does not createU.Role,U.RoleAssignment,U.Status,U.Method,U.Work,U.Episteme,U.Relation,U.Signature, generic interface kinds or values,U.SlotKind, or any other governed value.F.18does not decide whether two values are the same across contexts; it requires the bridge or direct pattern that decides that claim.F.18does not turn a publication row, card, table, or glossary entry into the thing being named.
F.18:End
Ontology-First Plain Technical Rewriting
Type: Plain-technical precision-restoration pattern Status: Stable Normativity: Normative for FPF-governed technical prose unless explicitly marked informative; informative for external source prose until it is rewritten for FPF use
Plain-name. Ontology-first plain rewriting.
Intent.
Repair technical prose whose object, claim, relation, action, role, or flow is buried under extra apparatus. The repair is not cosmetic plain-language editing. It first separates content from apparatus by ontology, then writes the remaining content in the shortest plain technical form that preserves FPF kinds, slots, claim boundaries, and admissible use. Remaining word, head, naming, or wording-use problems then apply E.10, E.10.ARCH, F.18, or the governing pattern for the object.
Builds on. E.8, E.10, E.10.ARCH, F.18, A.6.P, A.7, E.18, E.21, and source-use, evidence, assurance, gate, work, decision, publication, architecture, characteristic, state-family, and relation patterns when those objects carry the repaired span's claim.
Coordinates with. E.19, E.22, E.23, A.19.SPR, C.2.P, C.16.P, C.30.P, E.11, I.2, pattern-quality records, review records, DRRs, projection loci, and source-side notes.
Use this when
Use F.19 when a bounded piece of technical prose is trying to say something precise, but the reader must pass through role labels, container words, status words, process traces, quality proof, repeated negative catalogues, reference boilerplate, or pattern-application metaphors before the object and action are visible.
Typical in-scope prose includes:
- FPF pattern prose;
DRRtext and architecture notes;- review findings and quality-loop records;
- project-facing FPF guidance;
- source prose being rewritten for FPF use;
- other technical prose whose accepted ontology, domain model, controlled vocabulary, or role model must survive simplification.
What goes wrong if missed. Authors replace one official-sounding phrase with another. The text becomes smoother or shorter while the hidden kind error remains, or it becomes easy to read by losing the FPF kind, slot, role, claim boundary, or admissible-use boundary.
What this buys. Plain technical wording becomes an ontological discipline with less apparatus: fewer words, clearer objects, fewer repeated negative catalogues, and no loss of technical semantics.
First useful move. Mark the span under repair. Split it into content candidates and apparatus candidates before rewriting either side.
Not this pattern when.
- If the problem is only one overloaded word or head after the content is visible, apply
E.10. - If the problem is a durable reusable name, apply
F.18. - If the span already names the content-bearing relation, source-use relation, state-family value, architecture label, characteristic, quality term, function wording, evidence claim, gate claim, work claim, decision claim, or other FPF object named by value, apply the governing pattern for that object.
- If the source text is only being observed and not admitted into FPF-governed prose, keep the observation source-side.
Primary EntityOfConcern in plain terms. One phrase-level, sentence-level, row-level, paragraph-level, or small-section technical-prose repair whose goal is kind-preserving plain expression.
Problem frame
Mature technical languages accumulate enough ontology that many bad sentences are not bad because the terms are unknown. They are bad because a simple technical claim is wrapped in process language, role language, status language, quality-proof evidence, pattern-reference apparatus, or repeated negative distinctions.
The repair question is:
What content remains when words that add no object, kind, relation, claim, role, flow, evidence value, or user move are removed?
Examples inside FPF:
- "
A.15handles the claim" when the text needs to say thatA.15applies to a work-planning claim; - "pattern text" when the text means "the pattern" or "the pattern of concern";
- "governing relation" when the named object is a pattern, not a relation;
- long "not X, not Y, not Z" paragraphs when the text needs a positive object, action, and one stop condition;
- corpus-projection proof written inside a pattern whose own user move is not corpus projection.
The same defect appears outside pattern prose. A system note may hide an evaluation claim inside process language; a project note may treat a dashboard as evidence authority when it is a publication form; an architecture memo may replace a scale-preference claim over alternatives with a platform label.
These failures confuse coupled transformation flows. A pattern under development, a pattern being applied, a quality evaluation of that pattern, a project work occurrence, a source publication, and a projection record are different objects. They may influence one another; they do not become one another by being mentioned in the same paragraph.
Problem
How can FPF make technical prose plain without:
- treating plain language as a synonym-replacement exercise;
- deleting content-bearing technical terms as "jargon";
- replacing established terms with colourful synonyms or role nicknames;
- letting process, review, projection, or quality proof become pattern content;
- repeating the same boundary doctrine in every local pattern;
- hiding current ontic slot, relation-position, use-relation, or claim-kind changes under a shorter phrase;
- turning every phrase repair into a new local mini-ontology?
Forces
Solution
Use OntologyFirstPlainRewrite as a five-step repair over one bounded span.
- Bound the span. Name the sentence, row, paragraph, or small section under repair. Name visible apparatus candidates: pattern-application drift, role label, container word, status word, process trace, quality proof, negative catalogue, reference boilerplate, record, card, table, schema, data-structure wrapping, or other overwrap.
- Separate content from apparatus by ontology. For each phrase part, ask what object, head kind, claim kind or relation kind, current ontic slot, relation position, use relation, publication relation, admissible use, concerned actor or reader role when a role is current, and design, run, or coupled-flow position when flow separation matters. If a phrase part changes one of those values, keep it as content. If it only restates process, role label, negative catalogue, reference boilerplate, record, card, table, schema, data-structure wrapping, or quality proof without changing content, classify it as apparatus.
- Remove or move apparatus. Delete the apparatus or move it to the document, record, note, or publication relation where it belongs:
DRR, review record, quality result, architecture note, README, ToC,E.11, orI.2entry locus, projection record, release or landing evidence document, or source-side note. Do not replace it with a smoother synonym, role label, container word, status word, record, card, table, schema, data-structure wrapper, or publication-form word. - Restore remaining content precision. Apply
E.10,E.10.ARCH,F.18, or the governing pattern when a remaining word, head, relation, claim, current ontic slot, relation position, use relation, source-use relation, durable name, or admissible-use boundary is still hidden. - Rewrite and check loss. Write the shortest plain technical sentence that preserves the repaired object, kind, claim, relation, action, current ontic slot, relation position, use relation, actual role value when current, flow position when current, established term, and admissible use. The rewrite fails if it changes one of those values without an accepted semantic decision, or if it becomes harder for the declared reader to use.
Keep ontology visible only where it carries the sentence. A term-source or type annotation is needed when the wording can change the object, kind, relation, current ontic slot, relation position, use relation, publication relation, admissible use, or governing pattern. A record, card, table, schema, data structure, dashboard, or named form remains apparatus unless it carries one of those values. If ordinary domain wording already preserves those values, keep the ordinary sentence. "The aircraft flies" is better than a typed expansion unless the flight function, system kind, or slot relation is under repair.
Use the full result form when the repair must be inspectable; otherwise a local rewrite plus the kind-preservation check is enough.
Result form
Pattern-prose specialization
When the repaired prose is an FPF pattern, apply the same algorithm with one role test:
Does this sentence address the pattern's intended user, or does it record development, review, projection, landing, quality, or source-management evidence about the pattern version?
If it records evidence about the pattern version, keep that evidence outside the pattern unless the pattern's own primary EntityOfConcern is that evaluation or projection object. The evidence can cause edits to the pattern; it is not automatically pattern content.
Pattern prose keeps:
- the pattern's own primary
EntityOfConcern; - the first useful move;
- the practical delta and cost of missing it;
- local boundary prose only for a documented local confusion and named stop condition;
- short declarative references to related patterns after the pattern's own content is visible.
Pattern prose moves out:
- package-placement rationale;
- correspondence about producing the draft rather than using the pattern;
- quality-status proof;
- README, ToC,
E.11,I.2, retrieval, card, monolith-parity, or landing evidence; - repeated boundary doctrine already carried by another pattern.
Archetypal Grounding
Bias-Annotation
F.19 deliberately biases toward shorter, reader-facing prose. The protected value is kind-preserving clarity, not brevity by itself. A rewrite that removes terms while losing object kind, relation kind, current ontic slot, relation position, use relation, source-use relation, or admissible-use boundary is worse than the original.
F.19 also protects against two common reviewer biases:
- negative-catalogue bias: explaining a class by long lists of what it is not;
- apparatus-preservation bias: replacing one process, role, record, card, table, schema, data-structure wrapper, locus, flow, status, or quality-proof phrase with another phrase that still hides the object.
Conformance checklist
Common anti-patterns and how to avoid them
Consequences
F.19 makes technical prose easier to read because it removes apparatus before shortening the sentence. It also makes reviews stricter: a pleasant paraphrase does not count unless the pre-rewrite and post-rewrite kind, relation, current ontic slot, relation position, use relation, admissible use, and scope are preserved or deliberately changed by accepted decision.
The cost is that some edits need a short repair note before they look simple. That cost is intentional. Without the note, agents tend to do lexical replacement, narrow a graph into a sequence, widen a work occurrence into a method, turn a publication into evidence, or hide a pattern application under a route-like metaphor.
Rationale
Plain technical style in FPF is not a separate aesthetic layer. It is the visible result of ontology-first repair with less apparatus. The order matters:
- remove or move boilerplate apparatus;
- restore the remaining content through wording-use, naming, relation, slot, source-use, or object-governing patterns named by value;
- write the shortest sentence that keeps the recovered meaning.
Putting F.19 beside wording-use restoration keeps E.10 from becoming a phrase-style super-pattern. E.10 catches words and heads whose kind or use is hidden. F.19 catches the earlier phrase-level problem: the content may not even be visible until process, role, status, reference, quality, or negative-catalogue apparatus is removed.
SoTA-Echoing
Relations
F.19:End
Last Updated: 2026-06-17 — upstream FPF commit 646b0b9b (github.com/ailev/FPF)