@memoarchitect/ontology 0.13.2 → 0.15.1

package/examples/gpca-pump/memo.package.yaml

@@ -1,3 +1,5 @@
 name: gpca-pump
-entrypoint: model/catalog/project.sysml
+entrypoint: model/methodology/project.sysml
 include: [model]
+toolchain:
+  packager: internal

package/examples/gpca-pump/methodology/gpca_profiles.sysml

@@ -8,7 +8,7 @@
 //
 // Two differences from the pre-flip behaviour are deliberate and recorded:
 //
-//  1. Cybersecurity is excluded by *not* selecting `memo_assurance_cybersecurity`
+//  1. Cybersecurity is excluded by *not* importing `memo_assurance_cybersecurity`
 //     and by two explicit RulePolicy entries disabling the cybersecurity closure
 //     rules. Before, `excludedKind` named eleven cybersecurity kinds; naming the
 //     discipline once is the same selection stated at the level the methodology
@@ -28,64 +28,73 @@ package memo_examples_gpca_pump_methodology_gpca_profiles {
 
     private import memo_methodology_core::*;
     private import memo_methodology_profiles::*;
-    private import memo_core_enumerations::*;
-    private import memo_rules_closure::*;
 
-    private import memo_core_common::*;
+    // ── The selection ────────────────────────────────────────────────────
+    //
+    // What this methodology selects is what this package publicly imports.
+    // The five architecture layers, each through the package that publicly
+    // imports the whole layer:
+    public import memo_architecture_operational::*;
+    public import memo_architecture_functional::*;
+    public import memo_architecture_logical::*;
+    public import memo_architecture_implementation::*;
+    public import memo_architecture_realization::*;
+
+    // Explicit means explicit. A methodology that names its assurance
+    // disciplines and stops there selects no rules at all, because rules
+    // live in their own packages. Before the flip an empty list read as
+    // "everything", which hid exactly this: the selection said nothing and
+    // the tools behaved as though it said everything. Cybersecurity is the
+    // discipline not imported.
+    public import memo_core_common::*;
+    public import memo_core_enumerations::*;
+    public import memo_core_relationships::*;
+    public import memo_core_annotations::*;
+    public import memo_core_consistency_rules::*;
+    public import memo_assurance_requirements::*;
+    public import memo_assurance_requirements_needs::*;
+    public import memo_assurance_safety_risk::*;
+    public import memo_assurance_human_factors::*;
+    public import memo_assurance_verification_validation::*;
+    public import memo_rules_closure::*;
+    public import memo_rules_crosslayer::*;
+    public import memo_rules_quantitative::*;
+    public import memo_rules_ontology::*;
+
+    private import memo_artifacts_standards_iso_14971::iso14971;
+    private import memo_artifacts_standards_iec_62304::iec62304;
+    private import memo_artifacts_standards_cfr_21_820::cfr21Part820;
+    private import memo_artifacts_standards_iso_13485::iso13485;
+    private import memo_viewpoints_context_context_viewpoint::contextViewpoint;
+    private import memo_viewpoints_logical_logical_viewpoint::logicalArchitectureViewpoint;
+    private import memo_viewpoints_risk_risk_viewpoint::riskViewpoint;
+
     private import memo_core_common::MemoIdentity;
     part gpcaMethodDefinition : MethodologyDefinition {
-        @MemoIdentity { :>> providedId = "METH-GPCA-001"; }
-        attribute :>> name = "GPCAPrototypeMethodology";
+        @MemoIdentity { :>> providedId = "METH-GPCA-001"; :>> label = "GPCAPrototypeMethodology"; }
         attribute :>> version = "0.6.5";
         attribute :>> domain = "medical device modeling";
-        attribute :>> description = "GPCA infusion pump methodology for the non-networked prototype variant. Explicitly selects the five architecture layers and four of the five assurance disciplines; cybersecurity is out of scope because the prototype has no network interface. The prototype uses no SOUP.";
+        doc /* GPCA infusion pump methodology for the non-networked prototype variant. Explicitly selects the five architecture layers and four of the five assurance disciplines; cybersecurity is out of scope because the prototype has no network interface. The prototype uses no SOUP. */
         ref :>> baseMethodology = mdDefaultDefinition;
         attribute :>> scopeMode = ScopeModeKind::explicit;
 
-        attribute :>> includedLayer = (
-            "memo_architecture_operational",
-            "memo_architecture_functional",
-            "memo_architecture_logical",
-            "memo_architecture_implementation",
-            "memo_architecture_realization"
+        // Typed. The standards GPCA also names, ISO 14155, IEC 62366 and
+        // IEC 60601-1, have no RegulatoryStandard in the ontology yet, and the
+        // artifact kind "RiskManagementPlan" is no ArtifactKind literal; as
+        // strings they selected nothing and nothing said so.
+        ref :>> includedStandard = (
+            iso14971,
+            iec62304,
+            cfr21Part820,
+            iso13485
         );
 
-        // Explicit means explicit. A methodology that names its assurance
-        // disciplines and stops there selects no rules at all, because rules
-        // live in their own packages. Before the flip an empty list read as
-        // "everything", which hid exactly this: the selection said nothing and
-        // the tools behaved as though it said everything.
-        attribute :>> includedModule = (
-            "memo_core_common",
-            "memo_core_enumerations",
-            "memo_core_relationships",
-            "memo_core_annotations",
-            "memo_core_consistency_rules",
-            "memo_assurance_requirements",
-            "memo_assurance_requirements_needs",
-            "memo_assurance_safety_risk",
-            "memo_assurance_human_factors",
-            "memo_assurance_verification_validation",
-            "memo_rules_closure",
-            "memo_rules_crosslayer",
-            "memo_rules_quantitative",
-            "memo_rules_ontology"
+        ref :>> includedViewpoint = (
+            contextViewpoint,
+            logicalArchitectureViewpoint,
+            riskViewpoint
         );
 
-        attribute :>> includedStandard = (
-            "ISO 14971",
-            "IEC 62304",
-            "21 CFR 820",
-            "ISO 13485",
-            "ISO 14155",
-            "IEC 62366",
-            "IEC 60601-1"
-        );
-
-        attribute :>> includedArtifactKind = ("RiskManagementPlan");
-
-        attribute :>> includedViewpoint = ("VP-CTX", "VP-LOG", "VP-RISK");
-
         part disableThreatMitigation : RulePolicy :> rulePolicy {
             ref :>> targetRule : ThreatMitigationRule;
             attribute :>> disposition = RuleDispositionKind::disabled;

package/examples/gpca-pump/model/catalog/gpca_analysis.sysml

@@ -8,17 +8,15 @@ package memo_examples_gpca_pump_gpca_analysis {
     private import memo_core_common::MemoIdentity;
     // ── FMEA (IEC 60812) ────────────────────────────────────────
     part fmeaDelivery : FMEAWorksheet {
-        @MemoIdentity { :>> providedId = "FMEA-001"; }
-        attribute :>> name = "DrugDeliveryFMEA";
+        @MemoIdentity { :>> providedId = "FMEA-001"; :>> label = "DrugDeliveryFMEA"; }
         attribute :>> analysisScope = "Fluid path, pump mechanism, delivery sensors, and patient pendant";
         attribute :>> standardReference = "IEC 60812";
         attribute :>> analysisBasis = "UMN CriSys GPCA architecture v2.0";
         attribute :>> revisionDate = "2026-07-03";
         attribute :>> reviewer = "Safety review board";
     }
-    part fmMotorRunaway : FailureMode {
-        @MemoIdentity { :>> providedId = "FM-001"; }
-        attribute :>> name = "PumpMotorRunaway";
+    item fmMotorRunaway : FailureMode {
+        @MemoIdentity { :>> providedId = "FM-001"; :>> label = "PumpMotorRunaway"; }
         attribute :>> failureModeKind = FailureModeKind::unintendedFunction;
         attribute :>> effect = "Excess drug delivered to the patient beyond the prescribed rate.";
         attribute :>> severityRating = 10;
@@ -27,11 +25,10 @@ package memo_examples_gpca_pump_gpca_analysis {
         attribute :>> detectionRating = 3;
         attribute :>> rpn = 60;
         attribute :>> criticality = CriticalityKind::catastrophic;
-        attribute :>> description = "Motor steps faster than commanded, delivering more drug than prescribed.";
+        doc /* Motor steps faster than commanded, delivering more drug than prescribed. */
     }
-    part fmAirSensorSilent : FailureMode {
-        @MemoIdentity { :>> providedId = "FM-002"; }
-        attribute :>> name = "AirSensorFailsSilent";
+    item fmAirSensorSilent : FailureMode {
+        @MemoIdentity { :>> providedId = "FM-002"; :>> label = "AirSensorFailsSilent"; }
         attribute :>> failureModeKind = FailureModeKind::lossOfFunction;
         attribute :>> effect = "Air embolism reaches the patient undetected.";
         attribute :>> severityRating = 10;
@@ -40,11 +37,10 @@ package memo_examples_gpca_pump_gpca_analysis {
         attribute :>> detectionRating = 4;
         attribute :>> rpn = 120;
         attribute :>> criticality = CriticalityKind::catastrophic;
-        attribute :>> description = "Air-in-line sensor reports 'no air' regardless of actual line state.";
+        doc /* Air-in-line sensor reports 'no air' regardless of actual line state. */
     }
-    part fmOcclusionDrift : FailureMode {
-        @MemoIdentity { :>> providedId = "FM-003"; }
-        attribute :>> name = "OcclusionSensorDrift";
+    item fmOcclusionDrift : FailureMode {
+        @MemoIdentity { :>> providedId = "FM-003"; :>> label = "OcclusionSensorDrift"; }
         attribute :>> failureModeKind = FailureModeKind::degradedFunction;
         attribute :>> effect = "Occluded line is detected late or not at all, interrupting therapy.";
         attribute :>> severityRating = 7;
@@ -53,11 +49,10 @@ package memo_examples_gpca_pump_gpca_analysis {
         attribute :>> detectionRating = 4;
         attribute :>> rpn = 112;
         attribute :>> criticality = CriticalityKind::high;
-        attribute :>> description = "Pressure sensor drifts so occlusions are detected late or not at all.";
+        doc /* Pressure sensor drifts so occlusions are detected late or not at all. */
     }
-    part fmStuckBolusButton : FailureMode {
-        @MemoIdentity { :>> providedId = "FM-004"; }
-        attribute :>> name = "BolusButtonStuckClosed";
+    item fmStuckBolusButton : FailureMode {
+        @MemoIdentity { :>> providedId = "FM-004"; :>> label = "BolusButtonStuckClosed"; }
         attribute :>> failureModeKind = FailureModeKind::unintendedFunction;
         attribute :>> effect = "Repeated unrequested boluses are delivered.";
         attribute :>> severityRating = 9;
@@ -66,11 +61,10 @@ package memo_examples_gpca_pump_gpca_analysis {
         attribute :>> detectionRating = 2;
         attribute :>> rpn = 54;
         attribute :>> criticality = CriticalityKind::high;
-        attribute :>> description = "Pendant switch shorted, continuously asserting bolus requests.";
+        doc /* Pendant switch shorted, continuously asserting bolus requests. */
     }
-    part fmBatteryEarlyDepletion : FailureMode {
-        @MemoIdentity { :>> providedId = "FM-005"; }
-        attribute :>> name = "BatteryDepletesEarly";
+    item fmBatteryEarlyDepletion : FailureMode {
+        @MemoIdentity { :>> providedId = "FM-005"; :>> label = "BatteryDepletesEarly"; }
         attribute :>> failureModeKind = FailureModeKind::prematureFunction;
         attribute :>> effect = "Pump loses power during transport, stopping therapy.";
         attribute :>> severityRating = 6;
@@ -79,94 +73,83 @@ package memo_examples_gpca_pump_gpca_analysis {
         attribute :>> detectionRating = 3;
         attribute :>> rpn = 72;
         attribute :>> criticality = CriticalityKind::medium;
-        attribute :>> description = "Aged battery sustains less than the specified backup duration during transport.";
+        doc /* Aged battery sustains less than the specified backup duration during transport. */
     }
-    part feOverdose : FailureEffect {
-        @MemoIdentity { :>> providedId = "FE-001"; }
-        attribute :>> name = "ExcessDrugDelivered";
+    item feOverdose : FailureEffect {
+        @MemoIdentity { :>> providedId = "FE-001"; :>> label = "ExcessDrugDelivered"; }
         attribute :>> effectLevel = FailureEffectLevelKind::endEffect;
         attribute :>> effectOnPatient = "opioid overdose, respiratory depression";
         attribute :>> effectOnOperator = "emergency intervention required";
         attribute :>> effectOnSystem = "therapy stopped by cross-check or clinician";
         attribute :>> severity = SeverityKind::catastrophic;
     }
-    part feAirDelivered : FailureEffect {
-        @MemoIdentity { :>> providedId = "FE-002"; }
-        attribute :>> name = "AirReachesPatientLine";
+    item feAirDelivered : FailureEffect {
+        @MemoIdentity { :>> providedId = "FE-002"; :>> label = "AirReachesPatientLine"; }
         attribute :>> effectLevel = FailureEffectLevelKind::endEffect;
         attribute :>> effectOnPatient = "risk of vascular air embolism";
         attribute :>> effectOnOperator = "line re-prime and incident report";
         attribute :>> effectOnSystem = "undetected hazardous state";
         attribute :>> severity = SeverityKind::catastrophic;
     }
-    part feTherapyInterrupted : FailureEffect {
-        @MemoIdentity { :>> providedId = "FE-003"; }
-        attribute :>> name = "TherapyInterruptedUnnoticed";
+    item feTherapyInterrupted : FailureEffect {
+        @MemoIdentity { :>> providedId = "FE-003"; :>> label = "TherapyInterruptedUnnoticed"; }
         attribute :>> effectLevel = FailureEffectLevelKind::endEffect;
         attribute :>> effectOnPatient = "untreated pain; possible post-occlusion bolus";
         attribute :>> effectOnOperator = "delayed response";
         attribute :>> effectOnSystem = "under-delivery until detected";
         attribute :>> severity = SeverityKind::serious;
     }
-    part fcMotorDriverFault : FailureCause {
-        @MemoIdentity { :>> providedId = "FCA-001"; }
-        attribute :>> name = "MotorDriverElectronicsFault";
+    item fcMotorDriverFault : FailureCause {
+        @MemoIdentity { :>> providedId = "FCA-001"; :>> label = "MotorDriverElectronicsFault"; }
         attribute :>> causeCategory = FailureCauseCategoryKind::design;
         attribute :>> causeDescription = "Driver stage latch-up or firmware step-rate computation fault";
         attribute :>> occurrenceRating = ProbabilityKind::remote;
         attribute :>> preventionMethod = "independent flow cross-check; watchdog";
     }
-    part fcTransducerAging : FailureCause {
-        @MemoIdentity { :>> providedId = "FCA-002"; }
-        attribute :>> name = "UltrasonicTransducerAging";
+    item fcTransducerAging : FailureCause {
+        @MemoIdentity { :>> providedId = "FCA-002"; :>> label = "UltrasonicTransducerAging"; }
         attribute :>> causeCategory = FailureCauseCategoryKind::wear;
         attribute :>> causeDescription = "Air sensor transducer sensitivity degrades with age";
         attribute :>> occurrenceRating = ProbabilityKind::occasional;
         attribute :>> preventionMethod = "POST sensor plausibility check; periodic maintenance";
     }
-    part fcPendantAbuse : FailureCause {
-        @MemoIdentity { :>> providedId = "FCA-003"; }
-        attribute :>> name = "PendantCableAbuse";
+    item fcPendantAbuse : FailureCause {
+        @MemoIdentity { :>> providedId = "FCA-003"; :>> label = "PendantCableAbuse"; }
         attribute :>> causeCategory = FailureCauseCategoryKind::misuse;
         attribute :>> causeDescription = "Cable crushed in bed rail shorts the switch line";
         attribute :>> occurrenceRating = ProbabilityKind::occasional;
         attribute :>> preventionMethod = "stuck-input detection (REQ-X-09); strain-relieved cable";
     }
     part dmFlowCrossCheck : DetectionMethod {
-        @MemoIdentity { :>> providedId = "DM-001"; }
-        attribute :>> name = "CommandedVsMeasuredFlowComparison";
+        @MemoIdentity { :>> providedId = "DM-001"; :>> label = "CommandedVsMeasuredFlowComparison"; }
         attribute :>> methodKind = DetectionMethodKind::monitoring;
         attribute :>> detectionPoint = "every execution step during ACTIVE therapy";
         attribute :>> confidence = DetectionKind::high;
     }
     part dmPostSensorCheck : DetectionMethod {
-        @MemoIdentity { :>> providedId = "DM-002"; }
-        attribute :>> name = "POSTSensorPlausibilityCheck";
+        @MemoIdentity { :>> providedId = "DM-002"; :>> label = "POSTSensorPlausibilityCheck"; }
         attribute :>> methodKind = DetectionMethodKind::selfDiagnostic;
         attribute :>> detectionPoint = "power-on and periodic in-service test";
         attribute :>> confidence = DetectionKind::moderate;
     }
     part dmStuckInputMonitor : DetectionMethod {
-        @MemoIdentity { :>> providedId = "DM-003"; }
-        attribute :>> name = "StuckInputMonitor";
+        @MemoIdentity { :>> providedId = "DM-003"; :>> label = "StuckInputMonitor"; }
         attribute :>> methodKind = DetectionMethodKind::monitoring;
         attribute :>> detectionPoint = "bolus input asserted beyond 60 s";
         attribute :>> confidence = DetectionKind::high;
     }
     part fmeaActionAirSensor : FMEAAction {
-        @MemoIdentity { :>> providedId = "FMA-001"; }
-        attribute :>> name = "AddRedundantAirDetectionWindow";
+        @MemoIdentity { :>> providedId = "FMA-001"; :>> label = "AddRedundantAirDetectionWindow"; }
         attribute :>> actionKind = FMEAActionKind::designChange;
         attribute :>> responsible = "hardware lead";
         attribute :>> targetCompletionDate = "2026-09-30";
         attribute :>> revisedRpn = 40;
-        attribute :>> description = "Add second sensing window downstream so a single silent transducer cannot mask air.";
+        doc /* Add second sensing window downstream so a single silent transducer cannot mask air. */
     }
 
     // ── Fault tree (overdose top event) ─────────────────────────
     part ftaOverdose : FaultTree {
-        @MemoIdentity { :>> providedId = "FTA-001"; }
-        attribute :>> name = "OverdoseFaultTree";
+        @MemoIdentity { :>> providedId = "FTA-001"; :>> label = "OverdoseFaultTree"; }
         attribute :>> standardReference = "IEC 61025";
         attribute :>> analysisScope = "Drug over-delivery during ACTIVE therapy";
         attribute :>> topEventDescription = "Drug delivered in excess of prescription limits";
@@ -174,68 +157,58 @@ package memo_examples_gpca_pump_gpca_analysis {
         attribute :>> revisionDate = "2026-07-03";
     }
     part fteOverdoseTop : FaultTreeNode {
-        @MemoIdentity { :>> providedId = "FTE-001"; }
-        attribute :>> name = "ExcessDrugDeliveredTopEvent";
+        @MemoIdentity { :>> providedId = "FTE-001"; :>> label = "ExcessDrugDeliveredTopEvent"; }
         attribute :>> eventKind = FaultTreeEventKind::topEvent;
-        attribute :>> description = "Delivered volume exceeds prescribed limits";
+        doc /* Delivered volume exceeds prescribed limits */
     }
     part fteMotorRunaway : FaultTreeNode {
-        @MemoIdentity { :>> providedId = "FTE-002"; }
-        attribute :>> name = "MotorRunawayBasicEvent";
+        @MemoIdentity { :>> providedId = "FTE-002"; :>> label = "MotorRunawayBasicEvent"; }
         attribute :>> eventKind = FaultTreeEventKind::basicEvent;
         attribute :>> failureRate = 0.000001;
         attribute :>> exposureTime = 100.0;
-        attribute :>> description = "Pump motor delivers faster than commanded (FM-001)";
+        doc /* Pump motor delivers faster than commanded (FM-001) */
     }
     part fteCrossCheckFails : FaultTreeNode {
-        @MemoIdentity { :>> providedId = "FTE-003"; }
-        attribute :>> name = "FlowCrossCheckUnavailable";
+        @MemoIdentity { :>> providedId = "FTE-003"; :>> label = "FlowCrossCheckUnavailable"; }
         attribute :>> eventKind = FaultTreeEventKind::basicEvent;
         attribute :>> failureRate = 0.00001;
         attribute :>> exposureTime = 100.0;
-        attribute :>> description = "Independent flow sensor or comparison logic fails (FM-003 family)";
+        doc /* Independent flow sensor or comparison logic fails (FM-003 family) */
     }
     part fteLockoutFault : FaultTreeNode {
-        @MemoIdentity { :>> providedId = "FTE-004"; }
-        attribute :>> name = "LockoutEnforcementFault";
+        @MemoIdentity { :>> providedId = "FTE-004"; :>> label = "LockoutEnforcementFault"; }
         attribute :>> eventKind = FaultTreeEventKind::basicEvent;
         attribute :>> failureRate = 0.0000001;
         attribute :>> exposureTime = 100.0;
-        attribute :>> description = "Infusion manager authorizes bolus despite active lockout";
+        doc /* Infusion manager authorizes bolus despite active lockout */
     }
     part fteStuckButtonUndetected : FaultTreeNode {
-        @MemoIdentity { :>> providedId = "FTE-005"; }
-        attribute :>> name = "StuckBolusButtonUndetected";
+        @MemoIdentity { :>> providedId = "FTE-005"; :>> label = "StuckBolusButtonUndetected"; }
         attribute :>> eventKind = FaultTreeEventKind::basicEvent;
         attribute :>> failureRate = 0.000001;
         attribute :>> exposureTime = 100.0;
-        attribute :>> description = "Pendant stuck closed and stuck-input monitor fails (FM-004)";
+        doc /* Pendant stuck closed and stuck-input monitor fails (FM-004) */
     }
     part ftgOverdoseOr : FaultTreeNode {
-        @MemoIdentity { :>> providedId = "FTG-001"; }
-        attribute :>> name = "OverdelivryPathOrGate";
+        @MemoIdentity { :>> providedId = "FTG-001"; :>> label = "OverdelivryPathOrGate"; }
         attribute :>> gateKind = FaultTreeGateKind::orGate;
     }
     part ftgMotorAnd : FaultTreeNode {
-        @MemoIdentity { :>> providedId = "FTG-002"; }
-        attribute :>> name = "MotorRunawayAndCrossCheckGate";
+        @MemoIdentity { :>> providedId = "FTG-002"; :>> label = "MotorRunawayAndCrossCheckGate"; }
         attribute :>> gateKind = FaultTreeGateKind::andGate;
     }
     part ftgBolusAnd : FaultTreeNode {
-        @MemoIdentity { :>> providedId = "FTG-003"; }
-        attribute :>> name = "UnauthorizedBolusAndGate";
+        @MemoIdentity { :>> providedId = "FTG-003"; :>> label = "UnauthorizedBolusAndGate"; }
         attribute :>> gateKind = FaultTreeGateKind::andGate;
     }
-    part mcsMotorPath : MinimalCutSet {
-        @MemoIdentity { :>> providedId = "MCS-001"; }
-        attribute :>> name = "MotorRunawayWithLostCrossCheck";
+    item mcsMotorPath : MinimalCutSet {
+        @MemoIdentity { :>> providedId = "MCS-001"; :>> label = "MotorRunawayWithLostCrossCheck"; }
         attribute :>> cutSetOrder = 2;
         attribute :>> involvedEvents = "FTE-002, FTE-003";
         attribute :>> significance = "dominant contributor; controlled by RC-008 independence";
     }
-    part mcsBolusPath : MinimalCutSet {
-        @MemoIdentity { :>> providedId = "MCS-002"; }
-        attribute :>> name = "StuckButtonWithLockoutFault";
+    item mcsBolusPath : MinimalCutSet {
+        @MemoIdentity { :>> providedId = "MCS-002"; :>> label = "StuckButtonWithLockoutFault"; }
         attribute :>> cutSetOrder = 2;
         attribute :>> involvedEvents = "FTE-004, FTE-005";
         attribute :>> significance = "requires simultaneous software and detection failure; controlled by RC-001 and REQ-X-09";