@memoarchitect/ontology 0.15.1 → 0.15.3

package/README.md

@@ -25,7 +25,7 @@ pin an exact release; the package has no repository or runtime dependency on Mem
 Tools or Memo Architect.
 
 ```bash
-pnpm add @memoarchitect/ontology@0.15.1
+pnpm add @memoarchitect/ontology@0.15.3
 ```
 
 > **Pre-1.0 notice:** ontology names, relationships, and package layout may

package/extensions/aadl/memo.package.yaml

@@ -7,7 +7,7 @@
 # (`type`, `extends`, `usage`, `ontologies`, `methodology`, `modules`) were
 # removed at the native semantic flip and are now rejected if present.
 name: '@memoarchitect/extension-aadl'
-version: 0.15.1
+version: 0.15.3
 description: AADL (SAE AS5506) correspondence profile and runtime component families
 license: MIT
 tags:

package/extensions/clinical/memo.package.yaml

@@ -7,7 +7,7 @@
 # (`type`, `extends`, `usage`, `ontologies`, `methodology`, `modules`) were
 # removed at the native semantic flip and are now rejected if present.
 name: '@memoarchitect/example-extension-clinical'
-version: 0.15.1
+version: 0.15.3
 description: Example methodology extension for clinical-procedure vocabulary
 license: MIT
 tags:

package/extensions/cloud/memo.package.yaml

@@ -7,7 +7,7 @@
 # (`type`, `extends`, `usage`, `ontologies`, `methodology`, `modules`) were
 # removed at the native semantic flip and are now rejected if present.
 name: '@memoarchitect/extension-cloud'
-version: 0.15.1
+version: 0.15.3
 description: Networked services and managed data stores
 license: MIT
 tags:

package/extensions/container/memo.package.yaml

@@ -7,7 +7,7 @@
 # (`type`, `extends`, `usage`, `ontologies`, `methodology`, `modules`) were
 # removed at the native semantic flip and are now rejected if present.
 name: '@memoarchitect/extension-container'
-version: 0.15.1
+version: 0.15.3
 description: OCI container images and container runtimes as deployment content
 license: MIT
 tags:

package/extensions/messaging/memo.package.yaml

@@ -7,7 +7,7 @@
 # (`type`, `extends`, `usage`, `ontologies`, `methodology`, `modules`) were
 # removed at the native semantic flip and are now rejected if present.
 name: '@memoarchitect/extension-messaging'
-version: 0.15.1
+version: 0.15.3
 description: Publish/subscribe messaging — topics, brokers, and delivery semantics
 license: MIT
 tags:

package/extensions/ros/memo.package.yaml

@@ -7,7 +7,7 @@
 # (`type`, `extends`, `usage`, `ontologies`, `methodology`, `modules`) were
 # removed at the native semantic flip and are now rejected if present.
 name: '@memoarchitect/extension-ros'
-version: 0.15.1
+version: 0.15.3
 description: ROS 2 nodes, messages, topic/service/action interfaces, QoS, and containerized deployment
 license: MIT
 tags:

package/methodologies/default/memo.package.yaml

@@ -7,7 +7,7 @@
 # (`type`, `extends`, `usage`, `ontologies`, `methodology`, `modules`) were
 # removed at the native semantic flip and are now rejected if present.
 name: '@memoarchitect/methodology-default'
-version: 0.15.1
+version: 0.15.3
 description: "MEMO default medical-device methodology \u2014 selects viewpoints/views/DHF documents from @memoarchitect/ontology and adds rules, gates, patterns, profiles, and workflow."
 license: MIT
 tags:

package/methodologies/gpca/memo.package.yaml

@@ -7,7 +7,7 @@
 # (`type`, `extends`, `usage`, `ontologies`, `methodology`, `modules`) were
 # removed at the native semantic flip and are now rejected if present.
 name: '@memoarchitect/methodology-gpca'
-version: 0.15.1
+version: 0.15.3
 description: "GPCA infusion pump methodology \u2014 subtraction-based tailoring of @memoarchitect/methodology-default for the non-networked prototype variant. Excludes cybersecurity and SOUP."
 license: MIT
 tags:

package/ontology/memo.package.yaml

@@ -7,7 +7,7 @@
 # (`type`, `extends`, `usage`, `ontologies`, `methodology`, `modules`) were
 # removed at the native semantic flip and are now rejected if present.
 name: '@memoarchitect/ontology'
-version: 0.15.1
+version: 0.15.3
 description: "MEMO \u2014 the single canonical medical-device ontology: core semantics, the Arcadia-inspired architecture layers (context, requirements, behavior, structure, interfaces, risk, cybersecurity,\
   \ assurance, \u2026), compliance, viewpoints, views, and invariant rules. One namespace (memo::), one src/ tree."
 license: MIT

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memoarchitect/ontology",
-  "version": "0.15.1",
+  "version": "0.15.3",
   "packageManager": "pnpm@9.15.0",
   "description": "MEMO — Medical Engineering Modelling Ontology. Pure SysML v2 medical-device ontology with native constraints, portable to any conformant SysML v2 tool (SysIDE, SysON, sysand).",
   "scripts": {

package/profile/memo.package.yaml

@@ -7,7 +7,7 @@
 # (`type`, `extends`, `usage`, `ontologies`, `methodology`, `modules`) were
 # removed at the native semantic flip and are now rejected if present.
 name: '@memoarchitect/medical-modeling-profile'
-version: 0.15.1
+version: 0.15.3
 description: Closure rules and viewpoints for medical device modeling
 license: MIT
 tags:

package/src/architecture/logical/structure/memo_logical_structure.sysml

@@ -73,6 +73,18 @@ package memo_architecture_logical_structure {
         enum hardware;
     }
 
+    // Who builds a system or system of systems: this organisation, or others.
+    // Distinct from `componentRole`, which says what a logical component DOES
+    // (an `externalSystem` is a role in a context). This says whose it is to
+    // build, which decides what the project is responsible for delivering and
+    // verifying versus what it only interfaces with.
+    enum def SystemOriginKind {
+        /** Built by this organisation: the project delivers and verifies it. */
+        enum internal;
+        /** Built by others: the project interfaces with it and relies on what its maker states. */
+        enum external;
+    }
+
     // ─── System hierarchy ────────────────────────────────────────
     // Three types rather than three role values, because they differ in what
     // they may CONTAIN — and containment legality cannot live on an attribute.
@@ -91,6 +103,7 @@ package memo_architecture_logical_structure {
         // battery are not — which is why ownership is recorded here and is the
         // attribute that distinguishes an SoS from a merely large system.
         attribute systemBoundaryDescription : String;
+        attribute origin : SystemOriginKind[0..1];
         attribute constituentOwnership : String;
         // A constituent may itself coordinate systems-of-systems, or it may be
         // an independently operated system. Subsystems and components remain
@@ -101,6 +114,7 @@ package memo_architecture_logical_structure {
 
     part def System specializes LogicalComponent {
         attribute systemBoundaryDescription : String;
+        attribute origin : SystemOriginKind[0..1];
         part system : System[0..*];
         part subsystem : Subsystem[0..*];
         part component : LogicalComponent[0..*];

package/src/assurance/safety_risk/memo_risk.sysml

@@ -29,6 +29,12 @@ package memo_assurance_safety_risk {
         attribute estimationBasis : String;
         attribute analysisContext : String;
         attribute foreseeableMisuseIncluded : Boolean;
+        doc /* The risk that remains after the controls (ISO 14971 clause 7) is the same risk
+             * re-estimated, so a register that holds one row per risk states it here. A
+             * ResidualRisk part is for a model that evaluates it as an element of its own. */
+        attribute residualProbabilityEstimate : ProbabilityKind[0..1];
+        attribute residualSeverityEstimate : SeverityKind[0..1];
+        attribute residualBenefitRiskRequired : Boolean[0..1];
     }
     part def ResidualRisk specializes Risk {
         attribute benefitRiskRequired : Boolean;
@@ -40,10 +46,12 @@ package memo_assurance_safety_risk {
         attribute acceptabilityThresholds : String;
     }
     // `DesignControlRiskRow` was a denormalized spreadsheet transcription.
-    // Risk rows now decompose into the ISO 14971 chain below: Risk owns its
-    // Hazard, SequenceOfEvents, HazardousSituation, and Harm items, linked by
-    // TracesRisk / LeadsToHarm, with ResidualRisk after mitigation. The risk
-    // itself is reached by EstimatedFor / ReducedBy / EvaluatedIn below.
+    // Risk rows now decompose into the ISO 14971 chain below: a Hazard,
+    // SequenceOfEvents, HazardousSituation and Harm are independent elements, not
+    // owned by a risk, because the same hazard is the hazard of many risks. A Risk
+    // is linked to each by EstimatedFor, and the chain runs through TracesRisk /
+    // LeadsToHarm, with ResidualRisk after mitigation. The risk itself is reached
+    // by EstimatedFor / ReducedBy / EvaluatedIn below.
     // A device characteristic whose implementation, failure, or misuse can
     // affect safety. This is the modelable output of ISO 14971 §5.3.
     part def SafetyRelatedCharacteristic specializes MemoPart {

package/src/core/relationships/memo_relationships.sysml

@@ -126,6 +126,26 @@ package memo_core_relationships {
     // inherited `rationale` — an untyped link with no stated reason is an
     // audit gap, not a model fact.
 
+    // An item belongs to the scope of one system or system of systems: a need,
+    // requirement, risk or verification case that describes, constrains or
+    // assesses that system and is its to deliver or verify. Imported records
+    // arrive with no design element to anchor them (a requirement is not
+    // allocated to anything yet), so this is how an import says whose they are;
+    // without it they are Unassigned in every workspace. The target is the
+    // system, typed as a part (a System and a SystemOfSystems both are). The
+    // source stays untyped: the items span metaclasses (a need is a requirement
+    // def, a risk an item, a verification case an action), as for DerivesFrom.
+    connection def ScopedTo :> MemoRelationship {
+        end scopedItem :>> source;
+        end scopeSystem : MemoPart :>> target;
+    }
+    abstract connection scopedToLinks : ScopedTo[*];
+    metadata def <scopedTo> ScopedToMetadata :> SemanticMetadata {
+        :> annotatedElement : SysML::ConnectionDefinition;
+        :> annotatedElement : SysML::ConnectionUsage;
+        :>> baseType = scopedToLinks meta SysML::Usage;
+    }
+
     connection def DerivesFrom :> MemoRelationship {
         // Drivers span metaclasses — a need is a requirement def, a hazard an
         // item, a threat an item — so the source end stays untyped. The target

package/src/core/relationships/memo_workspace_membership.sysml

@@ -163,6 +163,9 @@ package memo_core_relationships_workspace_membership {
     // system through the relation that ties it to one (a failure mode, a control measure's allocation).
     // Decided 2026-10-14: a risk chain with no such tie is Unassigned, which is the finding, not a gap here.
     part membershipTracesRisk : WorkspaceMembershipEntry { attribute :>> relation = "tracesRisk"; attribute :>> direction = WorkspaceMembershipKind::neither; }
+    // An item scoped to a system follows that system: the whole purpose of the relation. The items an
+    // item owns (a risk's hazard chain) join with it by ownership, so one link anchors a chain.
+    part membershipScopedTo : WorkspaceMembershipEntry { attribute :>> relation = "scopedTo"; attribute :>> direction = WorkspaceMembershipKind::sourceFollowsTarget; }
     // A harm follows the hazardous situation that leads to it.
     part membershipLeadsToHarm : WorkspaceMembershipEntry { attribute :>> relation = "leadsToHarm"; attribute :>> direction = WorkspaceMembershipKind::targetFollowsSource; }
     // Neither: a scenario illustrates a hazard without being part of it.

package/src/memo_namespaces.sysml

@@ -40,6 +40,7 @@ package memo {
     public import memo_architecture_variability::*;
 
     public import memo_viewpoints_definitions::*;
+    public import memo_viewpoints_matrix::*;
     public import memo_viewpoints_stakeholders_concerns::*;
     public import memo_viewpoints_catalog::*;
     public import memo_viewpoints_context_context_viewpoint::*;

package/src/methodology/profiles/memo_profiles.sysml

@@ -16,7 +16,7 @@ package memo_methodology_profiles {
     private import memo_core_common::MemoIdentity;
     part mdCoreLibrary : MethodologyLibrary {
         @MemoIdentity { :>> providedId = "METHLIB-001"; :>> label = "MedicalDeviceMethodologyLibrary"; }
-        attribute :>> version = "0.15.1";
+        attribute :>> version = "0.15.3";
         attribute :>> domain = "medical device modeling";
         doc /* Methodology layer for selecting, restricting, sequencing, tailoring, and lightly extending use of the medical-device ontology. */
     }
@@ -37,7 +37,7 @@ package memo_methodology_profiles {
     // second scope authority.
     part mdDefaultDefinition : MethodologyDefinition {
         @MemoIdentity { :>> providedId = "METH-MD-DEFAULT"; :>> label = "MedicalDeviceDefault"; }
-        attribute :>> version = "0.15.1";
+        attribute :>> version = "0.15.3";
         attribute :>> domain = "medical device modeling";
         doc /* MEMO default medical-device methodology. Selects every layer, discipline, standard, artifact kind, and viewpoint the resolved ontology and extension packages provide. */
         attribute :>> scopeMode = ScopeModeKind::allAvailable;

package/src/viewpoints/matrix/memo_matrix_views.sysml

@@ -0,0 +1,93 @@
+// Traceability matrices and design structure matrices, declared as views.
+//
+// A matrix is a native SysML `view` usage (ViewUsage, SysML-textual-bnf.kebnf:1610)
+// typed by a `view def` (ViewDefinition, :1584), like every other MEMO view, so
+// it is written, derived, listed and moved by the same machinery. It declares no
+// `expose`: ViewBodyItem makes Expose optional (:1618-1622), and a matrix shows
+// what its axes select, not a package's contents.
+//
+// An axis is a part usage (PartUsage, :627) typed by MemoMatrixAxis. It is
+// hand-picked elements, a memo-query, or both. A query is stored as its text and
+// evaluated against the model when the matrix opens, so the matrix answers the
+// same question after the model has grown; the ids it matched are never stored.
+package memo_viewpoints_matrix {
+    private import ScalarValues::*;
+
+    private import memo_core_common::*;
+    private import memo_core_enumerations::*;
+    private import memo_viewpoints_definitions::*;
+
+    enum def MatrixOrderingKind {
+        enum natural;
+        enum kind;
+        enum partition;
+        enum cluster;
+    }
+
+    enum def MatrixGroupKind {
+        enum owningPackage;
+        enum memoQuery;
+        enum clusterResult;
+    }
+
+    /**
+     * One axis of a matrix: the elements it lists.
+     *
+     * `includeElementKinds` and `includeElementIds` are inherited from the
+     * selection query a view already carries; the ids are hand-picked elements,
+     * by qualified name. `query` adds the text of a `memo-query` block, the same
+     * query language the DHF templates use. The axis is the union of the two.
+     */
+    part def MemoMatrixAxis :> ViewSelectionQuery {
+        attribute query : String[0..1];
+    }
+
+    /** A named group of rows in a design structure matrix. */
+    part def MemoMatrixGroup :> MemoPart {
+        attribute groupName : String;
+        attribute groupedBy : MatrixGroupKind;
+        /** A package qualified name, or the text of a `memo-query`; empty for a cluster result. */
+        attribute expression : String[0..1];
+    }
+
+    /**
+     * Which elements the relationship types connect, and how the matrix reads
+     * them. The relationship types are the model's own, never a list kept here.
+     */
+    view def MemoTraceabilityMatrixView :> MemoDiagramView {
+        attribute :>> viewKind = DiagramViewKind::grid;
+        @MemoIdentity { :>> shortDescription = "Rows traced to columns by relationships, each axis chosen by hand or by query."; }
+        /**
+         * The system or system of systems the matrix is about: the qualified name
+         * of its definition (a workspace root). Its queries run in that workspace.
+         * A string, because a `ref` cannot name a definition.
+         */
+        attribute system : String[0..1];
+        part rowAxis : MemoMatrixAxis[0..1];
+        part columnAxis : MemoMatrixAxis[0..1];
+        /** Relationship types that count as a link; empty means any. */
+        attribute linkTypes : String[*];
+    }
+
+    /**
+     * A design structure matrix has one axis because rows equal columns. The
+     * options after `axis` apply to a dependency reading and are not on the
+     * traceability definition.
+     */
+    view def MemoDependencyMatrixView :> MemoDiagramView {
+        attribute :>> viewKind = DiagramViewKind::grid;
+        @MemoIdentity { :>> shortDescription = "Dependencies among one set of elements, chosen by hand or by query."; }
+        /** The system or system of systems the matrix is about, as on the traceability matrix. */
+        attribute system : String[0..1];
+        part axis : MemoMatrixAxis[0..1];
+        /** Relationship types that put a mark in a cell; empty means any. */
+        attribute dependencyTypes : String[*];
+        /** Relationship types that build the nesting, so the hierarchy is the one the model declares. */
+        attribute containmentTypes : String[*];
+        attribute symmetric : Boolean[0..1];
+        attribute ordering : MatrixOrderingKind[0..1];
+        part groups : MemoMatrixGroup[*];
+        /** Elements to highlight on the axis and in the cell inspector. */
+        part criticalElements : MemoMatrixAxis[0..1];
+    }
+}