@memoarchitect/ontology 0.6.5 → 0.7.0

package/examples/gpca-pump/model/catalog/gpca_formal_behavior.sysml

@@ -1,4 +1,4 @@
-package memo_examples_gpca_pump_model_catalog_gpca_formal_behavior {
+package memo_examples_gpca_pump_gpca_formal_behavior {
     private import ScalarValues::*;
 
     private import memo_architecture_functional_behavior::*;
@@ -42,7 +42,6 @@ package memo_examples_gpca_pump_model_catalog_gpca_formal_behavior {
         attribute :>> propertyKind = BehaviorPropertyKind::assumption;
         attribute :>> id = "AP-002";
         attribute :>> name = "VtbiHighPositive";
-        attribute :>> propertyKind = BehaviorPropertyKind::assumption;
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "assume DB_IN.VTBI_High > 0";
         attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
@@ -51,7 +50,6 @@ package memo_examples_gpca_pump_model_catalog_gpca_formal_behavior {
         attribute :>> propertyKind = BehaviorPropertyKind::assumption;
         attribute :>> id = "AP-003";
         attribute :>> name = "EmptyReservoirConstPositive";
-        attribute :>> propertyKind = BehaviorPropertyKind::assumption;
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "assume CONST_IN.Empty_Reservoir > 0";
         attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
@@ -60,7 +58,6 @@ package memo_examples_gpca_pump_model_catalog_gpca_formal_behavior {
         attribute :>> propertyKind = BehaviorPropertyKind::assumption;
         attribute :>> id = "AP-001";
         attribute :>> name = "ValidPrescriptionSavedBeforeTherapy";
-        attribute :>> propertyKind = BehaviorPropertyKind::assumption;
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "assume a saved prescription is available before infusion initiation";
         attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.3.1 (REQ 7)";
@@ -71,7 +68,6 @@ package memo_examples_gpca_pump_model_catalog_gpca_formal_behavior {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> id = "GP-001";
         attribute :>> name = "ModeRange";
-        attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee mode_range: GPCA_SW_OUT.Current_System_Mode in {0, 1, 2, 3, 4, 6, 7, 8} (source enumeration omits 5)";
         attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 1)";
@@ -80,7 +76,6 @@ package memo_examples_gpca_pump_model_catalog_gpca_formal_behavior {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> id = "GP-004";
         attribute :>> name = "NotStartImpliesModeZero";
-        attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee not(OP_CMD_IN.System_Start) => GPCA_SW_OUT.Current_System_Mode = 0";
         attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
@@ -89,7 +84,6 @@ package memo_examples_gpca_pump_model_catalog_gpca_formal_behavior {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> id = "GP-005";
         attribute :>> name = "InitialSystemStartImpliesModeOne";
-        attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee sys_initial and OP_CMD_IN.System_Start => GPCA_SW_OUT.Current_System_Mode = 1";
         attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 4 allocation: TLM System_Start -> System_On; IM System_On -> mode 1)";
@@ -98,7 +92,6 @@ package memo_examples_gpca_pump_model_catalog_gpca_formal_behavior {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> id = "GP-006";
         attribute :>> name = "OffToOnImpliesModeOne";
-        attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee not(sys_initial) and pre(GPCA_SW_OUT.Current_System_Mode) = 0 and OP_CMD_IN.System_Start => GPCA_SW_OUT.Current_System_Mode = 1";
         attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 4)";
@@ -107,7 +100,6 @@ package memo_examples_gpca_pump_model_catalog_gpca_formal_behavior {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> id = "GP-007";
         attribute :>> name = "EmptyReservoirImpliesNoFlow";
-        attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee (OP_CMD_IN.System_Start and pre(Current_System_Mode) > 1 and GPCA_SW_OUT.Reservoir_Volume < CONST_IN.Empty_Reservoir) => GPCA_SW_OUT.Commanded_Flow_Rate = 0";
         attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 59 'Empty Reservoir')";
@@ -116,7 +108,6 @@ package memo_examples_gpca_pump_model_catalog_gpca_formal_behavior {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> id = "GP-008";
         attribute :>> name = "OverVtbiImpliesFlowAtMostKvo";
-        attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee (OP_CMD_IN.System_Start and pre(Current_System_Mode) > 1 and GPCA_SW_OUT.Volume_Infused > DB_IN.VTBI_High) => GPCA_SW_OUT.Commanded_Flow_Rate <= GPCA_SW_OUT.Flow_Rate_KVO";
         attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (over-infusion => keep-vein-open, not zero)";
@@ -125,7 +116,6 @@ package memo_examples_gpca_pump_model_catalog_gpca_formal_behavior {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> id = "GP-009";
         attribute :>> name = "AirInLineImpliesFlowAtMostKvo";
-        attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee (OP_CMD_IN.System_Start and SENSOR_IN.Air_In_Line) => GPCA_SW_OUT.Commanded_Flow_Rate <= GPCA_SW_OUT.Flow_Rate_KVO";
         attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 21 'Air embolism')";
@@ -134,7 +124,6 @@ package memo_examples_gpca_pump_model_catalog_gpca_formal_behavior {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> id = "GP-010";
         attribute :>> name = "OcclusionImpliesFlowAtMostKvo";
-        attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee (OP_CMD_IN.System_Start and SENSOR_IN.Occlusion) => GPCA_SW_OUT.Commanded_Flow_Rate <= GPCA_SW_OUT.Flow_Rate_KVO";
         attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
@@ -143,7 +132,6 @@ package memo_examples_gpca_pump_model_catalog_gpca_formal_behavior {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> id = "GP-011";
         attribute :>> name = "DoorOpenImpliesFlowAtMostKvo";
-        attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee (OP_CMD_IN.System_Start and SENSOR_IN.Door_Open) => GPCA_SW_OUT.Commanded_Flow_Rate <= GPCA_SW_OUT.Flow_Rate_KVO";
         attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
@@ -152,7 +140,6 @@ package memo_examples_gpca_pump_model_catalog_gpca_formal_behavior {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> id = "GP-003";
         attribute :>> name = "SameStepAlarmKvoGuarantee";
-        attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee an infusion-inhibiting notification in a step implies Commanded_Flow_Rate <= Flow_Rate_KVO in the same step (ALARM_OUT -> IM.ALARM_IN is an immediate connection)";
         attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl (ALARM_to_IM immediate) with the flow <= KVO guarantees above";
@@ -161,7 +148,6 @@ package memo_examples_gpca_pump_model_catalog_gpca_formal_behavior {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> id = "GP-002";
         attribute :>> name = "LockoutGuarantee";
-        attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee a BolusRequest_prog inside the LockOutPeriod_pbolus_prog window is ignored and no PATIENT BOLUS is initiated";
         attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.6.1 (REQ 25.3, REQ 26)";

package/examples/gpca-pump/model/catalog/gpca_interfaces.sysml

@@ -1,11 +1,12 @@
-package memo_examples_gpca_pump_model_catalog_gpca_interfaces {
+package memo_examples_gpca_pump_gpca_interfaces {
     private import ScalarValues::*;
 
     private import memo_architecture_logical_interfaces::*;
     private import memo_architecture_realization_physical::*;
     private import memo_architecture_functional_functions::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_architecture::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_behavior_subsystems::*;
+    private import memo_core_common::*;
+    private import memo_examples_gpca_pump_gpca_architecture::*;
+    private import memo_examples_gpca_pump_gpca_behavior_subsystems::*;
     private import memo_core_enumerations::*;
     private import memo_core_dimensions::*;
     abstract interface def SensorDataInterface :> DataInterface {
@@ -13,7 +14,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_interfaces {
         attribute :>> protocolSemantics = "flow, air, occlusion, door, battery, cpu, memory, pump state";
     }
     port def SensorInputPort :> SensorPort {
-        attribute :>> direction = DirectionKind::input;
+        in item sensorData : MemoExchangeItem;
         attribute :>> interfaceType = "SensorDataInterface";
         attribute :>> sensorDomain = "physiological and device state";
     }
@@ -54,7 +55,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_interfaces {
         attribute :>> name = "HW_SW_DataBus";
         attribute :>> interfaceKind = InterfaceKind::digitalSignal;
         attribute :>> protocol = "immediate data port mapping";
-        attribute :>> directionality = DirectionKind::bidirectional;
+        attribute :>> directionality = DirectionKind::inputOutput;
         attribute :>> bandwidth = "implementation-defined";
         attribute :>> timingConstraint = "same execution step where required";
         attribute :>> electricalStandard = "logical/AADL";
@@ -150,7 +151,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_interfaces {
         attribute :>> id = "SI-005";
         attribute :>> name = "HospitalPharmacyDatabaseInterface";
         attribute :>> interfaceKind = InterfaceKind::data;
-        attribute :>> direction = DirectionKind::bidirectional;
+        attribute :>> direction = DirectionKind::inputOutput;
         attribute :>> protocol = "CriSys I 9, I 10, I 11";
         attribute :>> protocolSemantics = "Retrieves the safe-value set (concentration, VTBI, flow rate, bolus interval/count, KVO rate) where DrugName_hd = DrugName_prog; resets to defaults when no record matches";
         attribute :>> interactionPattern = "query/response safe-value lookup";

package/examples/gpca-pump/model/catalog/gpca_operational.sysml

@@ -1,4 +1,4 @@
-package memo_examples_gpca_pump_model_catalog_gpca_operational {
+package memo_examples_gpca_pump_gpca_operational {
     private import ScalarValues::*;
 
     private import memo_architecture_operational_structure::*;
@@ -7,7 +7,8 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
     private import memo_architecture_operational_use_cases::*;
     private import memo_architecture_operational_workflows::*;
     private import memo_core_enumerations::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_context::*;
+    private import memo_examples_gpca_pump_gpca_context::*;
+    private import memo_core_relationships::*;
 
     // ── Operational entities beyond the human actors ────────────
     part entityPharmacy : OperationalEntity {
@@ -234,7 +235,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
     }
 
     // ── Operational scenarios ───────────────────────────────────
-    part osNominalTherapy : OperativeScenario {
+    action osNominalTherapy : OperativeScenario {
         attribute :>> id = "OS-001";
         attribute :>> name = "NominalTherapySession";
         attribute :>> variantKind = ScenarioVariantKind::nominal;
@@ -247,10 +248,11 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
         ref :>> parentUseCase = ucDeliverPcaTherapy;
         ref :>> activities = oaCompleteNominalTherapy;
     }
-    part osLockoutBolus : OperativeScenario {
+    action osLockoutBolus : OperativeScenario {
         attribute :>> id = "OS-002";
         attribute :>> name = "BolusRequestDuringLockout";
         attribute :>> variantKind = ScenarioVariantKind::alternate;
+        attribute :>> variationPoint = "patient bolus request during the nominal therapy lockout interval";
         attribute :>> operationalCondition = OperationalConditionKind::foreseeableMisuse;
         attribute :>> preCondition = "basal infusion active; lockout interval running";
         attribute :>> postCondition = "request ignored, logged; basal continues unchanged";
@@ -258,12 +260,14 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
         attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.9 PATIENT BOLUS mode (lockout requirements)";
         ref :>> parentWorkflow = wfManageActiveTherapy;
         ref :>> parentUseCase = ucDeliverPcaTherapy;
+        ref :>> baseScenario = osNominalTherapy;
         ref :>> activities = oaRejectBolusDuringLockout;
     }
-    part osOcclusionAlarm : OperativeScenario {
+    action osOcclusionAlarm : OperativeScenario {
         attribute :>> id = "OS-003";
         attribute :>> name = "OcclusionDetectedDuringInfusion";
         attribute :>> variantKind = ScenarioVariantKind::exception;
+        attribute :>> variationPoint = "occlusion detected while nominal infusion is active";
         attribute :>> operationalCondition = OperationalConditionKind::degraded;
         attribute :>> preCondition = "therapy active; downstream line becomes blocked";
         attribute :>> postCondition = "infusion paused, alarm annunciated, clinician clears occlusion and resumes";
@@ -271,12 +275,14 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
         attribute :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.2 Alarms and Alerts (occlusion)";
         ref :>> parentWorkflow = wfRespondToTherapyAlarm;
         ref :>> parentUseCase = ucDeliverPcaTherapy;
+        ref :>> baseScenario = osNominalTherapy;
         ref :>> activities = oaRespondToOcclusion;
     }
-    part osAirInLine : OperativeScenario {
+    action osAirInLine : OperativeScenario {
         attribute :>> id = "OS-004";
         attribute :>> name = "AirInLineDetected";
         attribute :>> variantKind = ScenarioVariantKind::exception;
+        attribute :>> variationPoint = "air-in-line detected while nominal infusion is active";
         attribute :>> operationalCondition = OperationalConditionKind::degraded;
         attribute :>> preCondition = "therapy active; air bubble enters tubing";
         attribute :>> postCondition = "infusion stopped before air reaches patient; alarm annunciated";
@@ -284,12 +290,14 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
         attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.3 Notification Requirements (REQ 59: Air embolism)";
         ref :>> parentWorkflow = wfRespondToTherapyAlarm;
         ref :>> parentUseCase = ucDeliverPcaTherapy;
+        ref :>> baseScenario = osNominalTherapy;
         ref :>> activities = oaRespondToAirInLine;
     }
-    part osEmptyReservoir : OperativeScenario {
+    action osEmptyReservoir : OperativeScenario {
         attribute :>> id = "OS-005";
         attribute :>> name = "ReservoirEmptyDuringTherapy";
         attribute :>> variantKind = ScenarioVariantKind::exception;
+        attribute :>> variationPoint = "reservoir-empty threshold reached during nominal therapy";
         attribute :>> operationalCondition = OperationalConditionKind::degraded;
         attribute :>> preCondition = "therapy active; reservoir volume reaches empty threshold";
         attribute :>> postCondition = "infusion stopped, alarm raised, reservoir replaced";
@@ -297,12 +305,14 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
         attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.3 Notification Requirements (REQ 59: Empty Reservoir)";
         ref :>> parentWorkflow = wfRespondToTherapyAlarm;
         ref :>> parentUseCase = ucDeliverPcaTherapy;
+        ref :>> baseScenario = osNominalTherapy;
         ref :>> activities = oaReplaceEmptyReservoir;
     }
-    part osPowerLoss : OperativeScenario {
+    action osPowerLoss : OperativeScenario {
         attribute :>> id = "OS-006";
         attribute :>> name = "MainsPowerLossAndRecovery";
         attribute :>> variantKind = ScenarioVariantKind::recovery;
+        attribute :>> variationPoint = "mains supply lost during nominal therapy";
         attribute :>> operationalCondition = OperationalConditionKind::degraded;
         attribute :>> preCondition = "therapy active on mains power";
         attribute :>> postCondition = "therapy continues on battery; prescription preserved across full power loss";
@@ -310,6 +320,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_operational {
         attribute :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.4.3 Electrical Hazards (battery failure)";
         ref :>> parentWorkflow = wfRespondToTherapyAlarm;
         ref :>> parentUseCase = ucDeliverPcaTherapy;
+        ref :>> baseScenario = osNominalTherapy;
         ref :>> activities = oaRecoverAfterPowerLoss;
     }
     connection : Realizes connect realizing ::> osNominalTherapy to realized ::> ucDeliverPcaTherapy;

package/examples/gpca-pump/model/catalog/gpca_physical.sysml

@@ -1,4 +1,4 @@
-package memo_examples_gpca_pump_model_catalog_gpca_physical {
+package memo_examples_gpca_pump_gpca_physical {
     private import ScalarValues::*;
 
     private import memo_architecture_realization_physical::*;
@@ -41,7 +41,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_physical {
         attribute :>> name = "ServiceMaintenancePort";
         attribute :>> portKind = InterfaceKind::api;
         attribute :>> connectorType = "covered UART/USB service connector";
-        attribute :>> direction = DirectionKind::bidirectional;
+        attribute :>> direction = DirectionKind::inputOutput;
     }
     part portMainsInlet : PhysicalPort {
         attribute :>> id = "PP-005";

package/examples/gpca-pump/model/catalog/gpca_requirements.sysml

@@ -1,4 +1,4 @@
-package memo_examples_gpca_pump_model_catalog_gpca_requirements {
+package memo_examples_gpca_pump_gpca_requirements {
     private import ScalarValues::*;
 
     private import memo_assurance_requirements::*;

package/examples/gpca-pump/model/catalog/gpca_risk.sysml

@@ -1,4 +1,4 @@
-package memo_examples_gpca_pump_model_catalog_gpca_risk {
+package memo_examples_gpca_pump_gpca_risk {
     private import ScalarValues::*;
 
     private import memo_assurance_safety_risk::*;

package/examples/gpca-pump/model/catalog/gpca_system.sysml

@@ -1,10 +1,13 @@
-package memo_examples_gpca_pump_model_catalog_gpca_system {
+package memo_examples_gpca_pump_gpca_system {
     private import ScalarValues::*;
 
     private import memo_architecture_functional_functions::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_behavior_subsystems::*;
+    private import memo_examples_gpca_pump_gpca_behavior_subsystems::*;
     private import memo_architecture_operational_scenarios::*;
     private import memo_core_enumerations::*;
+    private import memo_architecture_operational_structure::*;
+    private import memo_architecture_operational_use_cases::*;
+    private import memo_core_common::*;
 
     part gpcaMission : Mission {
         attribute :>> id = "MSN-001";
@@ -21,68 +24,69 @@ package memo_examples_gpca_pump_model_catalog_gpca_system {
         attribute :>> id = "FC-001";
         attribute :>> name = "PatientBolusChain";
         attribute :>> flowCategory = FunctionalFlowKind::nominal;
-        ref :>> startFunction = fnAcquireSensors;
-        ref :>> endFunction = fnCommandPump;
         attribute :>> endToEndLatencyBudgetMs = "100";
         attribute :>> safetyRelevant = true;
         attribute :>> securityRelevant = false;
         attribute :>> description = "Bolus button press through lockout/max-dose check to pump actuation and logging.";
     }
-    part fcsBolusSense : FunctionalFlowStep {
+    action fcsBolusSense : FunctionalFlowStep {
         attribute :>> id = "FCS-001"; attribute :>> name = "SenseBolusRequest";
-        attribute :>> stepOrder = "1"; ref :>> function = fnAcquireSensors; ref :>> exchangedItem = ddBolusRequest;
+        ref :>> function = fnAcquireSensors; ref :>> exchangedItem = ddBolusRequest;
     }
-    part fcsBolusValidate : FunctionalFlowStep {
+    action fcsBolusValidate : FunctionalFlowStep {
         attribute :>> id = "FCS-002"; attribute :>> name = "CheckLockoutAndMaxDose";
-        attribute :>> stepOrder = "2"; ref :>> function = fnEnforceLimits; ref :>> exchangedItem = ddPrescription;
+        ref :>> function = fnEnforceLimits; ref :>> exchangedItem = ddPrescription;
     }
-    part fcsBolusCommand : FunctionalFlowStep {
+    action fcsBolusCommand : FunctionalFlowStep {
         attribute :>> id = "FCS-003"; attribute :>> name = "CommandBolusFlow";
-        attribute :>> stepOrder = "3"; ref :>> function = fnManageInfusion; ref :>> exchangedItem = cdFlowCommand;
+        ref :>> function = fnManageInfusion; ref :>> exchangedItem = cdFlowCommand;
     }
-    part fcsBolusActuate : FunctionalFlowStep {
+    action fcsBolusActuate : FunctionalFlowStep {
         attribute :>> id = "FCS-004"; attribute :>> name = "ActuatePumpMotor";
-        attribute :>> stepOrder = "4"; ref :>> function = fnCommandPump; ref :>> exchangedItem = cdFlowCommand;
+        ref :>> function = fnCommandPump; ref :>> exchangedItem = cdFlowCommand;
     }
-    part fcsBolusLog : FunctionalFlowStep {
+    action fcsBolusLog : FunctionalFlowStep {
         attribute :>> id = "FCS-005"; attribute :>> name = "LogBolusOutcome";
-        attribute :>> stepOrder = "5"; ref :>> function = fnLogEvents; ref :>> exchangedItem = ddEventRecord;
+        ref :>> function = fnLogEvents; ref :>> exchangedItem = ddEventRecord;
     }
+    first fcsBolusSense then fcsBolusValidate;
+    first fcsBolusValidate then fcsBolusCommand;
+    first fcsBolusCommand then fcsBolusActuate;
+    first fcsBolusActuate then fcsBolusLog;
 
     part fcAlarmStop : FunctionalFlow {
         attribute :>> id = "FC-002";
         attribute :>> name = "AlarmDetectionToSafeStateChain";
         attribute :>> flowCategory = FunctionalFlowKind::alarm;
-        ref :>> startFunction = fnAcquireSensors;
-        ref :>> endFunction = fnAnnunciate;
         attribute :>> endToEndLatencyBudgetMs = "20";
         attribute :>> safetyRelevant = true;
         attribute :>> securityRelevant = false;
         attribute :>> description = "Sensor condition through alarm evaluation to same-step transition to PAUSED (KVO flow, REQ 43) and annunciation.";
     }
-    part fcsAlarmSense : FunctionalFlowStep {
+    action fcsAlarmSense : FunctionalFlowStep {
         attribute :>> id = "FCS-006"; attribute :>> name = "SenseAlarmCondition";
-        attribute :>> stepOrder = "1"; ref :>> function = fnAcquireSensors; ref :>> exchangedItem = ddSensorVector;
+        ref :>> function = fnAcquireSensors; ref :>> exchangedItem = ddSensorVector;
     }
-    part fcsAlarmEvaluate : FunctionalFlowStep {
+    action fcsAlarmEvaluate : FunctionalFlowStep {
         attribute :>> id = "FCS-007"; attribute :>> name = "EvaluateAlarmCondition";
-        attribute :>> stepOrder = "2"; ref :>> function = fnMonitorAlarm; ref :>> exchangedItem = ddSensorVector;
+        ref :>> function = fnMonitorAlarm; ref :>> exchangedItem = ddSensorVector;
     }
-    part fcsAlarmStopInfusion : FunctionalFlowStep {
+    action fcsAlarmStopInfusion : FunctionalFlowStep {
         attribute :>> id = "FCS-008"; attribute :>> name = "LimitFlowToKvoSameStep";
-        attribute :>> stepOrder = "3"; ref :>> function = fnManageInfusion; ref :>> exchangedItem = cdAlarmSignal;
+        ref :>> function = fnManageInfusion; ref :>> exchangedItem = cdAlarmSignal;
     }
-    part fcsAlarmAnnunciate : FunctionalFlowStep {
+    action fcsAlarmAnnunciate : FunctionalFlowStep {
         attribute :>> id = "FCS-009"; attribute :>> name = "AnnunciateAudibleVisual";
-        attribute :>> stepOrder = "4"; ref :>> function = fnAnnunciate; ref :>> exchangedItem = cdAlarmSignal;
+        ref :>> function = fnAnnunciate; ref :>> exchangedItem = cdAlarmSignal;
     }
+    first fcsAlarmSense then fcsAlarmEvaluate;
+    first fcsAlarmEvaluate then fcsAlarmStopInfusion;
+    first fcsAlarmStopInfusion then fcsAlarmAnnunciate;
 
     part fcStartup : FunctionalFlow {
         attribute :>> id = "FC-003";
         attribute :>> name = "PowerOnSelfTestChain";
         attribute :>> flowCategory = FunctionalFlowKind::startup;
-        ref :>> startFunction = fnManagePower;
-        ref :>> endFunction = fnPresentStatus;
         attribute :>> endToEndLatencyBudgetMs = "5000";
         attribute :>> safetyRelevant = true;
         attribute :>> securityRelevant = false;
@@ -90,22 +94,22 @@ package memo_examples_gpca_pump_model_catalog_gpca_system {
     }
 
     // ── System scenarios ────────────────────────────────────────
-    part ssBolusDuringBasal : FunctionalScenario {
+    action ssBolusDuringBasal : FunctionalScenario {
         attribute :>> id = "SS-001";
         attribute :>> name = "PatientBolusDuringBasal";
         attribute :>> variantKind = ScenarioVariantKind::nominal;
         attribute :>> operationalCondition = OperationalConditionKind::normal;
-        attribute :>> sequenceDiagramRef = "VIEW-BHV-002";
         attribute :>> preCondition = "BASAL mode active; no REQ 25 ignore condition holds";
         attribute :>> postCondition = "PATIENT_BOLUS mode entered, bolus delivered, return to BASAL";
     }
-    part ssAlarmPause : FunctionalScenario {
+    action ssAlarmPause : FunctionalScenario {
         attribute :>> id = "SS-002";
         attribute :>> name = "InhibitingNotificationPausesInfusion";
         attribute :>> variantKind = ScenarioVariantKind::exception;
+        attribute :>> variationPoint = "an infusion-inhibiting notification interrupts active therapy";
         attribute :>> operationalCondition = OperationalConditionKind::degraded;
-        attribute :>> sequenceDiagramRef = "VIEW-BHV-002";
         attribute :>> preCondition = "any ACTIVE therapy mode; infusion-inhibiting notification detected (REQ 59)";
         attribute :>> postCondition = "PAUSED mode entered in same execution step at FlowRate_kvo_hd keep-vein-open flow; notification annunciated per REQ 59";
+        ref :>> baseScenario = ssBolusDuringBasal;
     }
 }

package/examples/gpca-pump/model/catalog/gpca_trace.sysml

@@ -1,4 +1,4 @@
-package memo_examples_gpca_pump_model_catalog_gpca_trace {
+package memo_examples_gpca_pump_gpca_trace {
     private import ScalarValues::*;
 
     private import memo_core_relationships::*;
@@ -7,28 +7,32 @@ package memo_examples_gpca_pump_model_catalog_gpca_trace {
     private import memo_architecture_operational_activities::*;
     private import memo_architecture_operational_structure::*;
     private import memo_architecture_functional_functions::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_context::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_operational::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_system::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_requirements::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_architecture::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_physical::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_behavior_subsystems::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_behavior_modes::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_interfaces::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_risk::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_analysis::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_verification::*;
-    private import memo_examples_gpca_pump_model_views_document_architecture_description_view::*;
-    private import memo_examples_gpca_pump_model_views_document_cyber_assessment_view::*;
-    private import memo_examples_gpca_pump_model_views_document_dhf_index_view::*;
-    private import memo_examples_gpca_pump_model_views_document_hazard_analysis_view::*;
-    private import memo_examples_gpca_pump_model_views_document_rmf_view::*;
-    private import memo_examples_gpca_pump_model_views_document_sdd_view::*;
-    private import memo_examples_gpca_pump_model_views_document_threat_model_view::*;
-    private import memo_examples_gpca_pump_model_views_document_usability_view::*;
-    private import memo_examples_gpca_pump_model_views_document_vv_view::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_formal_behavior::*;
+    private import memo_examples_gpca_pump_gpca_context::*;
+    private import memo_examples_gpca_pump_gpca_operational::*;
+    private import memo_examples_gpca_pump_gpca_system::*;
+    private import memo_examples_gpca_pump_gpca_requirements::*;
+    private import memo_examples_gpca_pump_gpca_architecture::*;
+    private import memo_examples_gpca_pump_gpca_physical::*;
+    private import memo_examples_gpca_pump_gpca_behavior_subsystems::*;
+    private import memo_examples_gpca_pump_gpca_behavior_modes::*;
+    private import memo_examples_gpca_pump_gpca_interfaces::*;
+    private import memo_examples_gpca_pump_gpca_risk::*;
+    private import memo_examples_gpca_pump_gpca_analysis::*;
+    private import memo_examples_gpca_pump_gpca_verification::*;
+    private import memo_examples_gpca_pump_viewpoints_logical_views_document_architecture_description_view::*;
+    private import memo_examples_gpca_pump_viewpoints_cybersecurity_views_document_cyber_assessment_view::*;
+    private import memo_examples_gpca_pump_viewpoints_requirements_views_document_dhf_index_view::*;
+    private import memo_examples_gpca_pump_viewpoints_risk_views_document_hazard_analysis_view::*;
+    private import memo_examples_gpca_pump_viewpoints_risk_views_document_rmf_view::*;
+    private import memo_examples_gpca_pump_viewpoints_software_views_document_sdd_view::*;
+    private import memo_examples_gpca_pump_viewpoints_cybersecurity_views_document_threat_model_view::*;
+    private import memo_examples_gpca_pump_viewpoints_usability_views_document_usability_view::*;
+    private import memo_examples_gpca_pump_viewpoints_verification_views_document_vv_view::*;
+    private import memo_examples_gpca_pump_gpca_formal_behavior::*;
+    private import memo_architecture_operational_context_stakeholders::*;
+    private import memo_architecture_operational_use_cases::*;
+    private import memo_architecture_operational_workflows::*;
+    private import memo_architecture_realization_deployment::*;
 
     // ── System context interactions (context view) ──────────────
     connection : InteractsWith connect contextParticipant ::> actorPatient to target ::> entityGpcaPump;

package/examples/gpca-pump/model/catalog/gpca_verification.sysml

@@ -1,4 +1,4 @@
-package memo_examples_gpca_pump_model_catalog_gpca_verification {
+package memo_examples_gpca_pump_gpca_verification {
     private import ScalarValues::*;
 
     private import memo_assurance_verification_validation::*;

package/examples/gpca-pump/model/catalog/project.sysml

@@ -0,0 +1,21 @@
+// GPCA project identity and method binding.
+//
+// This file is the project's native entrypoint. It imports the methodology it
+// selects and states the selection as a typed SysML reference — no YAML field
+// participates in the choice.
+package memo_examples_gpca_pump_project {
+    private import ScalarValues::*;
+
+    private import memo_methodology_core::*;
+    private import memo_core_enumerations::*;
+    private import memo_examples_gpca_pump_methodology_gpca_profiles::*;
+
+    part gpcaProjectBinding : ProjectMethodBinding {
+        attribute :>> id = "PMB-GPCA-001";
+        attribute :>> name = "GPCAProjectMethodBinding";
+        attribute :>> projectName = "GPCA Infusion Pump";
+        ref :>> selectedMethodology = gpcaMethodDefinition;
+        // The project adds nothing to the methodology's selection.
+        attribute :>> scopeMode = ScopeModeKind::explicit;
+    }
+}

package/examples/gpca-pump/model/catalog/viewpoints/context/viewpoint.sysml

@@ -0,0 +1,8 @@
+// context viewpoint.
+//
+// This project does not define its own viewpoint here; it binds the reusable
+// MEMO viewpoint that frames these concerns. The views it governs sit beneath
+// `views/`.
+package memo_examples_gpca_pump_viewpoints_context {
+    public import memo_viewpoints_context_context_viewpoint::*;
+}

package/examples/gpca-pump/model/{views → catalog/viewpoints/context/views}/context_system_context_view.sysml

@@ -1,4 +1,4 @@
-package memo_examples_gpca_pump_model_views_context_system_context_view {
+package memo_examples_gpca_pump_viewpoints_context_views_context_system_context_view {
     private import ScalarValues::*;
 
     private import memo_viewpoints_definitions::*;
@@ -14,13 +14,13 @@ package memo_examples_gpca_pump_model_views_context_system_context_view {
     private import memo_core_enumerations::*;
 
     view gpcaSystemContextView : MemoDiagramView {
-        expose memo_examples_gpca_pump_model_views_context_system_context_view::*;
+        expose memo_examples_gpca_pump_viewpoints_context_views_context_system_context_view::*;
         attribute depth = 2;
         attribute :>> id = "VIEW-CTX-101";
         attribute :>> name = "GPCA_SystemContextView";
         attribute :>> title = "GPCA System Context View";
         attribute :>> shortDescription = "Actors, use contexts, and external entities at the GPCA system boundary.";
-        attribute :>> longDescription = "Shows the CriSys Fig 2.1 boundary: patient, clinician, prescription, drug reservoir, needle, hospital pharmacy database, and hospital environment around the pump, with directional data flows, physical drug-path connections, and the intended use anchoring the boundary.";
+        attribute :>> description = "Shows the CriSys Fig 2.1 boundary: patient, clinician, prescription, drug reservoir, needle, hospital pharmacy database, and hospital environment around the pump, with directional data flows, physical drug-path connections, and the intended use anchoring the boundary.";
         attribute :>> outputKind = (ViewOutputKind::diagram);
         attribute :>> presentationKind = (PresentationKind::blockDiagram);
         attribute :>> viewKind = DiagramViewKind::general;

package/examples/gpca-pump/model/catalog/viewpoints/cybersecurity/viewpoint.sysml

@@ -0,0 +1,8 @@
+// cybersecurity viewpoint.
+//
+// This project does not define its own viewpoint here; it binds the reusable
+// MEMO viewpoint that frames these concerns. The views it governs sit beneath
+// `views/`.
+package memo_examples_gpca_pump_viewpoints_cybersecurity {
+    public import memo_viewpoints_cybersecurity_cybersecurity_viewpoint::*;
+}

package/examples/gpca-pump/model/{views → catalog/viewpoints/cybersecurity/views}/cybersecurity_cybersecurity_view.sysml

@@ -1,4 +1,4 @@
-package memo_examples_gpca_pump_model_views_cybersecurity_cybersecurity_view {
+package memo_examples_gpca_pump_viewpoints_cybersecurity_views_cybersecurity_cybersecurity_view {
     private import ScalarValues::*;
 
     private import memo_viewpoints_definitions::*;
@@ -15,13 +15,13 @@ package memo_examples_gpca_pump_model_views_cybersecurity_cybersecurity_view {
     private import memo_core_enumerations::*;
 
     view gpcaCybersecurityView : MemoDiagramView {
-        expose memo_examples_gpca_pump_model_views_cybersecurity_cybersecurity_view::*;
+        expose memo_examples_gpca_pump_viewpoints_cybersecurity_views_cybersecurity_cybersecurity_view::*;
         attribute depth = 2;
         attribute :>> id = "VIEW-CYB-001";
         attribute :>> name = "GPCA_CybersecurityView";
         attribute :>> title = "GPCA Cybersecurity View";
         attribute :>> shortDescription = "Shows GPCA assets, trust boundaries, threats, vulnerabilities, and mitigations.";
-        attribute :>> longDescription = "Product-specific cybersecurity view intended for secure product development and cross-reference into cybersecurity risk documentation.";
+        attribute :>> description = "Product-specific cybersecurity view intended for secure product development and cross-reference into cybersecurity risk documentation.";
         attribute :>> outputKind = (ViewOutputKind::diagram);
         attribute :>> presentationKind = (PresentationKind::custom);
         attribute :>> viewKind = DiagramViewKind::general;

package/examples/gpca-pump/model/{views → catalog/viewpoints/cybersecurity/views}/document_cyber_assessment_view.sysml

@@ -1,18 +1,18 @@
-package memo_examples_gpca_pump_model_views_document_cyber_assessment_view {
+package memo_examples_gpca_pump_viewpoints_cybersecurity_views_document_cyber_assessment_view {
     private import ScalarValues::*;
 
     private import memo_viewpoints_definitions::*;
-    private import memo_viewpoints_cybersecurity_cybersecurity_assessment_view::*;
+    private import memo_viewpoints_cybersecurity_views_cybersecurity_assessment_view::*;
     private import memo_viewpoints_cybersecurity_cybersecurity_viewpoint::*;
     private import memo_core_enumerations::*;
 
     view cyberAssessmentView : MemoCybersecurityAssessmentView {
-        expose memo_examples_gpca_pump_model_views_document_cyber_assessment_view::*;
+        expose memo_examples_gpca_pump_viewpoints_cybersecurity_views_document_cyber_assessment_view::*;
         attribute :>> id = "DOC-003";
         attribute :>> name = "GPCAMemoCybersecurityAssessmentView";
         attribute :>> title = "GPCA Cybersecurity Assessment View";
         attribute :>> shortDescription = "Cybersecurity risk-assessment-oriented document view for GPCA.";
-        attribute :>> longDescription = "Captures GPCA cyber risks, mitigations, security requirements, verification, and safety/privacy traceability for cybersecurity assessment records.";
+        attribute :>> description = "Captures GPCA cyber risks, mitigations, security requirements, verification, and safety/privacy traceability for cybersecurity assessment records.";
         attribute :>> version = "0.1";
         attribute :>> lifecycleState = LifecycleStateKind::development;
         attribute :>> marketScope = "generic";