@memoarchitect/ontology 0.4.5 → 0.6.0

package/examples/gpca-pump/model/catalog/gpca_operational.sysml

@@ -1,8 +1,13 @@
 package memo_examples_gpca_pump_model_catalog_gpca_operational {
     private import ScalarValues::*;
 
-    private import memo_architecture_operational::*;
+    private import memo_architecture_operational_structure::*;
+    private import memo_architecture_operational_activities::*;
+    private import memo_architecture_operational_scenarios::*;
+    private import memo_architecture_operational_use_cases::*;
+    private import memo_architecture_operational_workflows::*;
     private import memo_core_enumerations::*;
+    private import memo_examples_gpca_pump_model_catalog_gpca_context::*;
 
     // ── Operational entities beyond the human actors ────────────
     part entityPharmacy : OperationalEntity {
@@ -70,7 +75,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
     }
 
     // ── Operational activities (therapy lifecycle) ──────────────
-    part oaPrescribe : OperationalActivity {
+    action oaPrescribe : OperationalActivity {
         attribute :>> id = "OA-001";
         attribute :>> name = "PrescribeTherapy";
         attribute :>> trigger = "patient requires titrated analgesia";
@@ -78,7 +83,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
         attribute :>> postCondition = "prescription with basal rate, bolus volume, lockout, and max dose limits exists";
         attribute :>> criticality = CriticalityKind::high;
     }
-    part oaLoadReservoir : OperationalActivity {
+    action oaLoadReservoir : OperationalActivity {
         attribute :>> id = "OA-002";
         attribute :>> name = "LoadDrugReservoir";
         attribute :>> trigger = "prescription issued or reservoir empty";
@@ -86,7 +91,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
         attribute :>> postCondition = "reservoir mounted, door closed and latched";
         attribute :>> criticality = CriticalityKind::high;
     }
-    part oaProgram : OperationalActivity {
+    action oaProgram : OperationalActivity {
         attribute :>> id = "OA-003";
         attribute :>> name = "ProgramPrescription";
         attribute :>> trigger = "reservoir loaded";
@@ -94,7 +99,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
         attribute :>> postCondition = "prescription entered, checked against pharmacy-database safe values (I 9-I 11), and confirmed by second review";
         attribute :>> criticality = CriticalityKind::catastrophic;
     }
-    part oaStartTherapy : OperationalActivity {
+    action oaStartTherapy : OperationalActivity {
         attribute :>> id = "OA-004";
         attribute :>> name = "StartInfusion";
         attribute :>> trigger = "prescription confirmed";
@@ -102,7 +107,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
         attribute :>> postCondition = "basal infusion running";
         attribute :>> criticality = CriticalityKind::catastrophic;
     }
-    part oaRequestBolus : OperationalActivity {
+    action oaRequestBolus : OperationalActivity {
         attribute :>> id = "OA-005";
         attribute :>> name = "RequestPatientBolus";
         attribute :>> trigger = "patient presses bolus request button";
@@ -110,7 +115,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
         attribute :>> postCondition = "bolus delivered, or request ignored when lockout or max-dose limits apply";
         attribute :>> criticality = CriticalityKind::catastrophic;
     }
-    part oaRespondAlarm : OperationalActivity {
+    action oaRespondAlarm : OperationalActivity {
         attribute :>> id = "OA-006";
         attribute :>> name = "RespondToAlarm";
         attribute :>> trigger = "audible or visual alarm annunciated";
@@ -118,7 +123,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
         attribute :>> postCondition = "cause resolved and therapy resumed, or therapy stopped";
         attribute :>> criticality = CriticalityKind::catastrophic;
     }
-    part oaReviewLog : OperationalActivity {
+    action oaReviewLog : OperationalActivity {
         attribute :>> id = "OA-007";
         attribute :>> name = "ReviewEventLog";
         attribute :>> trigger = "shift change, incident review, or dose audit";
@@ -126,7 +131,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
         attribute :>> postCondition = "delivered doses and alarm history reviewed";
         attribute :>> criticality = CriticalityKind::medium;
     }
-    part oaMaintain : OperationalActivity {
+    action oaMaintain : OperationalActivity {
         attribute :>> id = "OA-008";
         attribute :>> name = "MaintainDevice";
         attribute :>> trigger = "scheduled maintenance or fault";
@@ -135,6 +140,83 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
         attribute :>> criticality = CriticalityKind::medium;
     }
 
+    // ── Scenario-driven operational model ──────────────────────
+    // The use case is the patient and clinician goal. It is supported by
+    // several workflows, each of which owns multiple selected scenarios.
+    use case ucDeliverPcaTherapy : UseCase {
+        attribute :>> useCaseKind = UseCaseKind::clinical;
+        attribute :>> id = "UC-001";
+        attribute :>> name = "DeliverPatientControlledAnalgesia";
+        attribute :>> goalStatement = "Deliver prescribed analgesia safely while allowing patient-controlled bolus requests within configured limits.";
+        attribute :>> trigger = "A clinician starts prescribed patient-controlled analgesia therapy.";
+        attribute :>> successOutcome = "The patient receives prescribed analgesia without exceeding dose, lockout, or safety limits.";
+        ref :>> primaryUser = actorNurse;
+        ref :>> supportingActors = (actorPatient, actorPrescriber, actorPharmacist);
+        ref :>> useContext = hospitalWardContext;
+    }
+
+    action wfPrepareAndStartTherapy : OperationalWorkflow {
+        attribute :>> name = "PrepareAndStartTherapy";
+        attribute :>> workflowState = WorkflowStateKind::toBe;
+        attribute :>> entryCondition = "A valid prescription and prepared reservoir are available.";
+        attribute :>> completionCondition = "Therapy is started with confirmed prescription limits.";
+    }
+    action wfManageActiveTherapy : OperationalWorkflow {
+        attribute :>> name = "ManageActiveTherapy";
+        attribute :>> workflowState = WorkflowStateKind::toBe;
+        attribute :>> entryCondition = "Basal therapy is active.";
+        attribute :>> completionCondition = "A bolus is handled or active therapy continues safely.";
+    }
+    action wfRespondToTherapyAlarm : OperationalWorkflow {
+        attribute :>> name = "RespondToTherapyAlarm";
+        attribute :>> workflowState = WorkflowStateKind::toBe;
+        attribute :>> entryCondition = "A therapy alarm or degraded condition is detected.";
+        attribute :>> completionCondition = "The pump is safe and the clinician has resolved or escalated the condition.";
+    }
+    action wsProgram : WorkflowStep { ref :>> performedActivity = oaProgram; }
+    action wsStart : WorkflowStep { ref :>> performedActivity = oaStartTherapy; }
+    action wsRequestBolus : WorkflowStep { ref :>> performedActivity = oaRequestBolus; }
+    action wsRespondAlarm : WorkflowStep { ref :>> performedActivity = oaRespondAlarm; }
+    connection : Supports { attribute :>> supportKind = SupportKind::useCase; connect supporter ::> wfPrepareAndStartTherapy to supported ::> ucDeliverPcaTherapy; }
+    connection : Supports { attribute :>> supportKind = SupportKind::useCase; connect supporter ::> wfManageActiveTherapy to supported ::> ucDeliverPcaTherapy; }
+    connection : Supports { attribute :>> supportKind = SupportKind::useCase; connect supporter ::> wfRespondToTherapyAlarm to supported ::> ucDeliverPcaTherapy; }
+    connection : Composes connect parent ::> wfPrepareAndStartTherapy to child ::> wsProgram;
+    connection : Composes connect parent ::> wfPrepareAndStartTherapy to child ::> wsStart;
+    connection : Composes connect parent ::> wfManageActiveTherapy to child ::> wsRequestBolus;
+    connection : Composes connect parent ::> wfRespondToTherapyAlarm to child ::> wsRespondAlarm;
+
+    // ── Scenario-owned operational activities and action flows ──
+    action oaCompleteNominalTherapy : OperationalActivity {
+        attribute :>> name = "CompleteNominalTherapy";
+        action deliverWithinLimits; action recordTherapyEvent;
+        first start then deliverWithinLimits; first deliverWithinLimits then recordTherapyEvent; first recordTherapyEvent then done;
+    }
+    action oaRejectBolusDuringLockout : OperationalActivity {
+        attribute :>> name = "RejectBolusDuringLockout";
+        action checkLockout; action rejectAndLog;
+        first start then checkLockout; first checkLockout then rejectAndLog; first rejectAndLog then done;
+    }
+    action oaRespondToOcclusion : OperationalActivity {
+        attribute :>> name = "RespondToOcclusion";
+        action pauseInfusion; action annunciateOcclusion; action resolveAndResume;
+        first start then pauseInfusion; first pauseInfusion then annunciateOcclusion; first annunciateOcclusion then resolveAndResume; first resolveAndResume then done;
+    }
+    action oaRespondToAirInLine : OperationalActivity {
+        attribute :>> name = "RespondToAirInLine";
+        action stopOrKvo; action annunciateAir; action reprimeAndRestart;
+        first start then stopOrKvo; first stopOrKvo then annunciateAir; first annunciateAir then reprimeAndRestart; first reprimeAndRestart then done;
+    }
+    action oaReplaceEmptyReservoir : OperationalActivity {
+        attribute :>> name = "ReplaceEmptyReservoir";
+        action stopAndAnnunciate; action replaceReservoir; action resumeTherapy;
+        first start then stopAndAnnunciate; first stopAndAnnunciate then replaceReservoir; first replaceReservoir then resumeTherapy; first resumeTherapy then done;
+    }
+    action oaRecoverAfterPowerLoss : OperationalActivity {
+        attribute :>> name = "RecoverAfterPowerLoss";
+        action switchToBattery; action restorePrescription; action confirmRestart;
+        first start then switchToBattery; first switchToBattery then restorePrescription; first restorePrescription then confirmRestart; first confirmRestart then done;
+    }
+
     // ── Operational capabilities ────────────────────────────────
     part ocTitratedAnalgesia : OperationalCapability {
         attribute :>> id = "OC-001";
@@ -155,55 +237,91 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
     part osNominalTherapy : OperationalScenario {
         attribute :>> id = "OS-001";
         attribute :>> name = "NominalTherapySession";
-        attribute :>> scenarioKind = ScenarioKind::nominal;
+        attribute :>> variantKind = ScenarioVariantKind::nominal;
+        attribute :>> operationalCondition = OperationalConditionKind::normal;
         attribute :>> preCondition = "prescription issued, reservoir loaded";
         attribute :>> postCondition = "therapy completed and stopped by clinician";
-        attribute :>> sequenceDescription = "Prescribe > load reservoir > program and confirm > start basal > patient boluses within limits > stop therapy > review log.";
+        attribute :>> pathSummary = "Prescribe > load reservoir > program and confirm > start basal > patient boluses within limits > stop therapy > review log.";
         attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §2.2 Main GPCA System Functions";
+        ref :>> parentWorkflow = wfManageActiveTherapy;
+        ref :>> parentUseCase = ucDeliverPcaTherapy;
+        ref :>> activities = oaCompleteNominalTherapy;
     }
     part osLockoutBolus : OperationalScenario {
         attribute :>> id = "OS-002";
         attribute :>> name = "BolusRequestDuringLockout";
-        attribute :>> scenarioKind = ScenarioKind::error;
+        attribute :>> variantKind = ScenarioVariantKind::alternate;
+        attribute :>> operationalCondition = OperationalConditionKind::foreseeableMisuse;
         attribute :>> preCondition = "basal infusion active; lockout interval running";
         attribute :>> postCondition = "request ignored, logged; basal continues unchanged";
-        attribute :>> sequenceDescription = "Patient presses bolus button during lockout > infusion manager rejects request > event logged > no additional drug delivered.";
+        attribute :>> pathSummary = "Patient presses bolus button during lockout > infusion manager rejects request > event logged > no additional drug delivered.";
         attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.9 PATIENT BOLUS mode (lockout requirements)";
+        ref :>> parentWorkflow = wfManageActiveTherapy;
+        ref :>> parentUseCase = ucDeliverPcaTherapy;
+        ref :>> activities = oaRejectBolusDuringLockout;
     }
     part osOcclusionAlarm : OperationalScenario {
         attribute :>> id = "OS-003";
         attribute :>> name = "OcclusionDetectedDuringInfusion";
-        attribute :>> scenarioKind = ScenarioKind::alarm;
+        attribute :>> variantKind = ScenarioVariantKind::exception;
+        attribute :>> operationalCondition = OperationalConditionKind::degraded;
         attribute :>> preCondition = "therapy active; downstream line becomes blocked";
         attribute :>> postCondition = "infusion paused, alarm annunciated, clinician clears occlusion and resumes";
-        attribute :>> sequenceDescription = "Occlusion sensor exceeds pressure threshold > alarm raised same step > infusion paused > audible and visual annunciation > clinician resolves and resumes.";
+        attribute :>> pathSummary = "Occlusion sensor exceeds pressure threshold > alarm raised same step > infusion paused > audible and visual annunciation > clinician resolves and resumes.";
         attribute :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.2 Alarms and Alerts (occlusion)";
+        ref :>> parentWorkflow = wfRespondToTherapyAlarm;
+        ref :>> parentUseCase = ucDeliverPcaTherapy;
+        ref :>> activities = oaRespondToOcclusion;
     }
     part osAirInLine : OperationalScenario {
         attribute :>> id = "OS-004";
         attribute :>> name = "AirInLineDetected";
-        attribute :>> scenarioKind = ScenarioKind::alarm;
+        attribute :>> variantKind = ScenarioVariantKind::exception;
+        attribute :>> operationalCondition = OperationalConditionKind::degraded;
         attribute :>> preCondition = "therapy active; air bubble enters tubing";
         attribute :>> postCondition = "infusion stopped before air reaches patient; alarm annunciated";
-        attribute :>> sequenceDescription = "Air-in-line sensor detects bubble above threshold > transition to PAUSED (KVO flow) > High-priority Air embolism notification > clinician re-primes line and restarts.";
+        attribute :>> pathSummary = "Air-in-line sensor detects bubble above threshold > transition to PAUSED (KVO flow) > High-priority Air embolism notification > clinician re-primes line and restarts.";
         attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.3 Notification Requirements (REQ 59: Air embolism)";
+        ref :>> parentWorkflow = wfRespondToTherapyAlarm;
+        ref :>> parentUseCase = ucDeliverPcaTherapy;
+        ref :>> activities = oaRespondToAirInLine;
     }
     part osEmptyReservoir : OperationalScenario {
         attribute :>> id = "OS-005";
         attribute :>> name = "ReservoirEmptyDuringTherapy";
-        attribute :>> scenarioKind = ScenarioKind::degraded;
+        attribute :>> variantKind = ScenarioVariantKind::exception;
+        attribute :>> operationalCondition = OperationalConditionKind::degraded;
         attribute :>> preCondition = "therapy active; reservoir volume reaches empty threshold";
         attribute :>> postCondition = "infusion stopped, alarm raised, reservoir replaced";
-        attribute :>> sequenceDescription = "Reservoir-empty condition detected > transition to PAUSED (KVO flow) > High-priority Empty Reservoir notification > clinician loads new reservoir > therapy resumed with saved prescription.";
+        attribute :>> pathSummary = "Reservoir-empty condition detected > transition to PAUSED (KVO flow) > High-priority Empty Reservoir notification > clinician loads new reservoir > therapy resumed with saved prescription.";
         attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.3 Notification Requirements (REQ 59: Empty Reservoir)";
+        ref :>> parentWorkflow = wfRespondToTherapyAlarm;
+        ref :>> parentUseCase = ucDeliverPcaTherapy;
+        ref :>> activities = oaReplaceEmptyReservoir;
     }
     part osPowerLoss : OperationalScenario {
         attribute :>> id = "OS-006";
         attribute :>> name = "MainsPowerLossAndRecovery";
-        attribute :>> scenarioKind = ScenarioKind::degraded;
+        attribute :>> variantKind = ScenarioVariantKind::recovery;
+        attribute :>> operationalCondition = OperationalConditionKind::degraded;
         attribute :>> preCondition = "therapy active on mains power";
         attribute :>> postCondition = "therapy continues on battery; prescription preserved across full power loss";
-        attribute :>> sequenceDescription = "Mains lost > battery takes over with notification > if battery depletes, pump stops safely > on power restore, saved prescription recovered and therapy resumed only after clinician confirmation.";
+        attribute :>> pathSummary = "Mains lost > battery takes over with notification > if battery depletes, pump stops safely > on power restore, saved prescription recovered and therapy resumed only after clinician confirmation.";
         attribute :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.4.3 Electrical Hazards (battery failure)";
+        ref :>> parentWorkflow = wfRespondToTherapyAlarm;
+        ref :>> parentUseCase = ucDeliverPcaTherapy;
+        ref :>> activities = oaRecoverAfterPowerLoss;
     }
+    connection : Realizes connect realizing ::> osNominalTherapy to realized ::> ucDeliverPcaTherapy;
+    connection : Realizes connect realizing ::> osLockoutBolus to realized ::> ucDeliverPcaTherapy;
+    connection : Realizes connect realizing ::> osOcclusionAlarm to realized ::> ucDeliverPcaTherapy;
+    connection : Realizes connect realizing ::> osAirInLine to realized ::> ucDeliverPcaTherapy;
+    connection : Realizes connect realizing ::> osEmptyReservoir to realized ::> ucDeliverPcaTherapy;
+    connection : Realizes connect realizing ::> osPowerLoss to realized ::> ucDeliverPcaTherapy;
+    connection : Composes connect parent ::> osNominalTherapy to child ::> oaCompleteNominalTherapy;
+    connection : Composes connect parent ::> osLockoutBolus to child ::> oaRejectBolusDuringLockout;
+    connection : Composes connect parent ::> osOcclusionAlarm to child ::> oaRespondToOcclusion;
+    connection : Composes connect parent ::> osAirInLine to child ::> oaRespondToAirInLine;
+    connection : Composes connect parent ::> osEmptyReservoir to child ::> oaReplaceEmptyReservoir;
+    connection : Composes connect parent ::> osPowerLoss to child ::> oaRecoverAfterPowerLoss;
 }

package/examples/gpca-pump/model/catalog/gpca_physical.sysml

@@ -1,7 +1,7 @@
 package memo_examples_gpca_pump_model_catalog_gpca_physical {
     private import ScalarValues::*;
 
-    private import memo_architecture_physical::*;
+    private import memo_architecture_realization_physical::*;
     private import memo_core_enumerations::*;
 
     part mainController : ProcessingNode {