@memoarchitect/ontology 0.6.5 → 0.8.22

package/README.md

@@ -23,7 +23,7 @@ pin an exact release; the package has no repository or runtime dependency on Mem
 Tools or Memo Architect.
 
 ```bash
-pnpm add @memoarchitect/ontology@0.6.4
+pnpm add @memoarchitect/ontology@0.8.22
 ```
 
 > **Pre-1.0 notice:** ontology names, relationships, and package layout may
@@ -82,7 +82,9 @@ src/                         all reusable .sysml content (namespace = directory)
   rules/                         closure/ coverage/ crosslayer/ lifecycle/ quantitative/ (native constraint defs)
   artifacts/                     artifact kinds (memo::artifacts)
   methodology/                   default methodology
-examples/extensions/             optional domain modules selected by methodology
+extensions/                      reusable ontology packages that specialize the base
+                                 (aadl/ clinical/ cloud/ container/ messaging/ ros/ template/),
+                                 selected by a methodology or a project binding
 ```
 
 ## Build / verify

package/examples/connected-patient-monitor/model/catalog/connected_patient_monitor.sysml

@@ -61,7 +61,7 @@ package memo_examples_connected_patient_monitor {
         attribute :>> securityCriticality = CriticalityKind::high;
         attribute :>> patientContactInterface = false;
     }
-    item tbHospitalEdge : TrustBoundary {
+    part tbHospitalEdge : TrustBoundary {
         attribute :>> id = "CPM-TB-001"; attribute :>> name = "DeviceLanToHospitalNetwork";
     }
     connection : CrossesTrustBoundary connect boundary ::> tbHospitalEdge to crossingItem ::> ifHl7Feed {

package/examples/connected-patient-monitor/model/catalog/project.sysml

@@ -0,0 +1,24 @@
+// Connected Patient Monitor — project identity and method binding.
+//
+// The native entrypoint. The imports name what this project contains and the
+// binding names the methodology it is governed by. No YAML file participates.
+package memo_examples_connected_patient_monitor_project {
+    private import ScalarValues::*;
+
+    private import memo_core_enumerations::*;
+    private import memo_methodology_core::*;
+    private import memo_methodology_profiles::*;
+
+    // The project's own content, imported so the catalog is one reachable
+    // closure from a single entrypoint.
+    private import memo_examples_connected_patient_monitor_viewpoints_unassigned::*;
+    private import memo_examples_connected_patient_monitor_viewpoints_unassigned_views_connected_patient_monitor_overview::*;
+
+    part projectBinding : ProjectMethodBinding {
+        attribute :>> id = "PMB-PATIENT-MONITOR-001";
+        attribute :>> name = "ConnectedPatientMonitorProjectMethodBinding";
+        attribute :>> projectName = "Connected Patient Monitor";
+        ref :>> selectedMethodology = mdDefaultDefinition;
+        attribute :>> scopeMode = ScopeModeKind::explicit;
+    }
+}

package/examples/connected-patient-monitor/model/catalog/viewpoints/unassigned/viewpoint.sysml

@@ -0,0 +1,9 @@
+// unassigned viewpoint.
+//
+// This project does not define its own viewpoint here; it binds the reusable
+// MEMO viewpoint that frames these concerns. The views it governs sit beneath
+// `views/`.
+package memo_examples_connected_patient_monitor_viewpoints_unassigned {
+    // The reusable package declaring unassigned could not be resolved during
+    // conversion. Import it here so the views beneath this viewpoint resolve.
+}

package/examples/connected-patient-monitor/model/{viewpoints → catalog/viewpoints/unassigned/views}/connected_patient_monitor_overview.sysml

@@ -1,4 +1,4 @@
-package memo_examples_connected_patient_monitor_viewpoints {
+package memo_examples_connected_patient_monitor_viewpoints_unassigned_views_connected_patient_monitor_overview {
     private import memo_examples_connected_patient_monitor::*;
     private import memo_viewpoints_definitions::*;
     private import memo_core_enumerations::*;

package/examples/embedded-infusion-pump/model/catalog/embedded_infusion_pump.sysml

@@ -1,9 +1,10 @@
 // Focused example: embedded programmable device — the three software views
 // (module / runtime / deployment) on a minimal infusion pump.
-// SoftwareItem buildsInto DeploymentUnit deploysTo ProcessingNode;
+// SoftwareElement buildsInto DeploymentUnit deploysTo ProcessingNode;
 // SoftwareComponent hostedBy ProcessingNode with scheduling properties.
 package memo_examples_embedded_infusion_pump {
     private import ScalarValues::*;
+    private import ModelingMetadata::*;
 
     private import memo_core_enumerations::*;
     private import memo_core_relationships::*;
@@ -25,7 +26,7 @@ package memo_examples_embedded_infusion_pump {
         attribute :>> implementationLanguage = "C";
         attribute :>> safetyClass = SafetyClassKind::C;
     }
-    connection : Realizes connect realizing ::> swMotorDriver to realized ::> swInfusionControl;
+    #refinement dependency swMotorDriver to swInfusionControl;
 
     // Runtime view.
     part rtControlLoop : SoftwareComponent {
@@ -34,11 +35,12 @@ package memo_examples_embedded_infusion_pump {
         attribute :>> periodMs = 10.0;
         attribute :>> deadlineMs = 10.0;
         attribute :>> wcetMs = 2.5;
+        attribute :>> memoryBudget = 96.0;
         attribute :>> schedulingPolicy = SchedulingPolicyKind::rateMonotonic;
         attribute :>> restartPolicy = "watchdog reset to safe state (pump stopped)";
         attribute :>> faultContainment = "MPU-protected region; safe-state on overrun";
     }
-    connection : Realizes connect realizing ::> rtControlLoop to realized ::> swInfusionControl;
+    #refinement dependency rtControlLoop to swInfusionControl;
 
     // Deployment view.
     part duControlImage : DeploymentUnit {
@@ -57,8 +59,8 @@ package memo_examples_embedded_infusion_pump {
         attribute :>> id = "EIP-RTE-001"; attribute :>> name = "StaticRTOS";
         attribute :>> osOrRtos = "static-priority RTOS, no dynamic allocation";
     }
-    connection : BuildsInto connect module ::> swInfusionControl to deploymentUnit ::> duControlImage;
-    connection : DeploysTo connect deploymentUnit ::> duControlImage to node ::> mcuSafety {
+    allocation swInfusionControlBuild : BuildsInto allocate swInfusionControl to duControlImage;
+    allocation duControlImageDeployment : DeploysTo allocate duControlImage to mcuSafety {
         attribute :>> deploymentKind = DeploymentKind::embedded;
     }
     connection : HostedBy connect hostAssembly ::> mcuSafety to processingNode ::> rtControlLoop;

package/examples/embedded-infusion-pump/model/catalog/project.sysml

@@ -0,0 +1,24 @@
+// Embedded Infusion Pump — project identity and method binding.
+//
+// The native entrypoint. The imports name what this project contains and the
+// binding names the methodology it is governed by. No YAML file participates.
+package memo_examples_embedded_infusion_pump_project {
+    private import ScalarValues::*;
+
+    private import memo_core_enumerations::*;
+    private import memo_methodology_core::*;
+    private import memo_methodology_profiles::*;
+
+    // The project's own content, imported so the catalog is one reachable
+    // closure from a single entrypoint.
+    private import memo_examples_embedded_infusion_pump_viewpoints_unassigned::*;
+    private import memo_examples_embedded_infusion_pump_viewpoints_unassigned_views_embedded_infusion_pump_overview::*;
+
+    part projectBinding : ProjectMethodBinding {
+        attribute :>> id = "PMB-INFUSION-PUMP-001";
+        attribute :>> name = "EmbeddedInfusionPumpProjectMethodBinding";
+        attribute :>> projectName = "Embedded Infusion Pump";
+        ref :>> selectedMethodology = mdDefaultDefinition;
+        attribute :>> scopeMode = ScopeModeKind::explicit;
+    }
+}

package/examples/embedded-infusion-pump/model/catalog/viewpoints/unassigned/viewpoint.sysml

@@ -0,0 +1,9 @@
+// unassigned viewpoint.
+//
+// This project does not define its own viewpoint here; it binds the reusable
+// MEMO viewpoint that frames these concerns. The views it governs sit beneath
+// `views/`.
+package memo_examples_embedded_infusion_pump_viewpoints_unassigned {
+    // The reusable package declaring unassigned could not be resolved during
+    // conversion. Import it here so the views beneath this viewpoint resolve.
+}

package/examples/embedded-infusion-pump/model/{viewpoints → catalog/viewpoints/unassigned/views}/embedded_infusion_pump_overview.sysml

@@ -1,4 +1,4 @@
-package memo_examples_embedded_infusion_pump_viewpoints {
+package memo_examples_embedded_infusion_pump_viewpoints_unassigned_views_embedded_infusion_pump_overview {
     private import memo_examples_embedded_infusion_pump::*;
     private import memo_viewpoints_definitions::*;
     private import memo_core_enumerations::*;

package/examples/functional-logical-physical/model/catalog/functional_logical_physical.sysml

@@ -4,6 +4,7 @@
 // graph, and no layer is a mandatory pipeline stage.
 package memo_examples_functional_logical_physical {
     private import ScalarValues::*;
+    private import ModelingMetadata::*;
 
     private import memo_core_enumerations::*;
     private import memo_core_relationships::*;
@@ -20,7 +21,7 @@ package memo_examples_functional_logical_physical {
     }
 
     // Functional: technology-independent responsibility.
-    part fnLimitLinePressure : SystemFunction {
+    action fnLimitLinePressure : SystemFunction {
         attribute :>> id = "FLP-FN-001"; attribute :>> name = "LimitLinePressure";
         attribute :>> criticality = CriticalityKind::high;
     }
@@ -31,8 +32,7 @@ package memo_examples_functional_logical_physical {
         attribute :>> id = "FLP-LC-001"; attribute :>> name = "PressureProtectionElement";
         attribute :>> controlledVariable = "line pressure";
     }
-    connection : AllocatedTo connect function ::> fnLimitLinePressure to allocatedElement ::> lcPressureProtection;
-
+    allocate fnLimitLinePressure to lcPressureProtection;
     // Implementation: the SAME logical element is realized by software
     // (pressure-limit supervision) AND mechanics (mechanical relief valve).
     part swPressureSupervisor : SoftwareModule {
@@ -45,6 +45,6 @@ package memo_examples_functional_logical_physical {
         attribute :>> mechanicalFunction = "vents line pressure above mechanical set point, independent of software";
         attribute :>> patientContact = false;
     }
-    connection : Realizes connect realizing ::> swPressureSupervisor to realized ::> lcPressureProtection;
-    connection : Realizes connect realizing ::> mechReliefValve to realized ::> lcPressureProtection;
+    #refinement dependency swPressureSupervisor to lcPressureProtection;
+    #refinement dependency mechReliefValve to lcPressureProtection;
 }

package/examples/functional-logical-physical/model/catalog/project.sysml

@@ -0,0 +1,24 @@
+// Functional Logical Physical — project identity and method binding.
+//
+// The native entrypoint. The imports name what this project contains and the
+// binding names the methodology it is governed by. No YAML file participates.
+package memo_examples_functional_logical_physical_project {
+    private import ScalarValues::*;
+
+    private import memo_core_enumerations::*;
+    private import memo_methodology_core::*;
+    private import memo_methodology_profiles::*;
+
+    // The project's own content, imported so the catalog is one reachable
+    // closure from a single entrypoint.
+    private import memo_examples_functional_logical_physical_viewpoints_unassigned::*;
+    private import memo_examples_functional_logical_physical_viewpoints_unassigned_views_functional_logical_physical_overview::*;
+
+    part projectBinding : ProjectMethodBinding {
+        attribute :>> id = "PMB-LOGICAL-PHYSICAL-001";
+        attribute :>> name = "FunctionalLogicalPhysicalProjectMethodBinding";
+        attribute :>> projectName = "Functional Logical Physical";
+        ref :>> selectedMethodology = mdDefaultDefinition;
+        attribute :>> scopeMode = ScopeModeKind::explicit;
+    }
+}

package/examples/functional-logical-physical/model/catalog/viewpoints/unassigned/viewpoint.sysml

@@ -0,0 +1,9 @@
+// unassigned viewpoint.
+//
+// This project does not define its own viewpoint here; it binds the reusable
+// MEMO viewpoint that frames these concerns. The views it governs sit beneath
+// `views/`.
+package memo_examples_functional_logical_physical_viewpoints_unassigned {
+    // The reusable package declaring unassigned could not be resolved during
+    // conversion. Import it here so the views beneath this viewpoint resolve.
+}

package/examples/functional-logical-physical/model/{viewpoints → catalog/viewpoints/unassigned/views}/functional_logical_physical_overview.sysml

@@ -1,4 +1,4 @@
-package memo_examples_functional_logical_physical_viewpoints {
+package memo_examples_functional_logical_physical_viewpoints_unassigned_views_functional_logical_physical_overview {
     private import memo_examples_functional_logical_physical::*;
     private import memo_viewpoints_definitions::*;
     private import memo_core_enumerations::*;

package/examples/gpca-pump/methodology/gpca_methodology.sysml

@@ -1,11 +1,10 @@
+// The GPCA methodology package.
+//
+// The `ResolvesToMethodology` connection that used to live here bound a model
+// element to an authored `ResolvedMethodology` instance. A resolved methodology
+// is derived from the project binding and the methodology chain, so there is
+// nothing here to connect to: see `model/catalog/gpca_project.sysml` for the
+// binding, and `gpca_profiles.sysml` for the methodology it selects.
 package memo_examples_gpca_pump_methodology_gpca_methodology {
-    private import ScalarValues::*;
-
-    private import memo_methodology_profiles::*;
     private import memo_examples_gpca_pump_methodology_gpca_profiles::*;
-    private import memo_core_relationships::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_requirements::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_architecture::*;
-
-    connection : ResolvesToMethodology connect boundModelElement ::> tlm to resolvedMethodology ::> gpcaMethodResolved;
 }

package/examples/gpca-pump/methodology/gpca_profiles.sysml

@@ -1,25 +1,103 @@
+// GPCA prototype methodology.
+//
+// Converted from subtraction to explicit selection at the native semantic flip.
+// Before, this methodology said "the default, minus cybersecurity and SOUP" by
+// listing `excludedKind` entries on a separate `MethodologyScope` part. ADR-1-15
+// requires a methodology to declare its own final effective lists, so the
+// selection is now stated positively here and the scope part is gone.
+//
+// Two differences from the pre-flip behaviour are deliberate and recorded:
+//
+//  1. Cybersecurity is excluded by *not* selecting `memo_assurance_cybersecurity`
+//     and by two explicit RulePolicy entries disabling the cybersecurity closure
+//     rules. Before, `excludedKind` named eleven cybersecurity kinds; naming the
+//     discipline once is the same selection stated at the level the methodology
+//     metamodel supports.
+//  2. `SoftwareModule[moduleKind=soup]` cannot be expressed as an inclusion.
+//     Explicit selection works over kinds, not over instance attribute values,
+//     so a per-instance filter has no positive form. The GPCA model declares no
+//     SOUP module, so the effective element set is unchanged; the intent is
+//     recorded in this methodology's description and belongs to a project rule
+//     if it ever needs enforcing.
+//
+// The authored `gpcaMethodResolved : ResolvedMethodology` is gone. A resolved
+// methodology is derived from the binding and the methodology chain; authoring
+// one by hand created a second answer that no resolver produced.
 package memo_examples_gpca_pump_methodology_gpca_profiles {
     private import ScalarValues::*;
 
     private import memo_methodology_core::*;
     private import memo_methodology_profiles::*;
     private import memo_core_enumerations::*;
+    private import memo_rules_closure::*;
 
     part gpcaMethodDefinition : MethodologyDefinition {
         attribute :>> id = "METH-GPCA-001";
         attribute :>> name = "GPCAPrototypeMethodology";
-        attribute :>> version = "1.0";
+        attribute :>> version = "0.6.5";
         attribute :>> domain = "medical device modeling";
-        attribute :>> description = "GPCA infusion pump methodology — subtraction-based tailoring for non-networked prototype. Excludes cybersecurity layer and SOUP modules.";
-        attribute :>> baseMethodName = "MedicalDeviceLightDefault";
-    }
+        attribute :>> description = "GPCA infusion pump methodology for the non-networked prototype variant. Explicitly selects the five architecture layers and four of the five assurance disciplines; cybersecurity is out of scope because the prototype has no network interface. The prototype uses no SOUP.";
+        ref :>> baseMethodology = mdDefaultDefinition;
+        attribute :>> scopeMode = ScopeModeKind::explicit;
+
+        attribute :>> includedLayer = (
+            "memo_architecture_operational",
+            "memo_architecture_functional",
+            "memo_architecture_logical",
+            "memo_architecture_implementation",
+            "memo_architecture_realization"
+        );
+
+        // Explicit means explicit. A methodology that names its assurance
+        // disciplines and stops there selects no rules at all, because rules
+        // live in their own packages. Before the flip an empty list read as
+        // "everything", which hid exactly this: the selection said nothing and
+        // the tools behaved as though it said everything.
+        attribute :>> includedModule = (
+            "memo_core_common",
+            "memo_core_enumerations",
+            "memo_core_relationships",
+            "memo_core_annotations",
+            "memo_core_consistency_rules",
+            "memo_assurance_requirements",
+            "memo_assurance_requirements_needs",
+            "memo_assurance_safety_risk",
+            "memo_assurance_human_factors",
+            "memo_assurance_verification_validation",
+            "memo_rules_closure",
+            "memo_rules_crosslayer",
+            "memo_rules_quantitative",
+            "memo_rules_ontology"
+        );
+
+        attribute :>> includedStandard = (
+            "ISO 14971",
+            "IEC 62304",
+            "21 CFR 820",
+            "ISO 13485",
+            "ISO 14155",
+            "IEC 62366",
+            "IEC 60601-1"
+        );
+
+        attribute :>> includedArtifactKind = ("RiskManagementPlan");
+
+        attribute :>> includedViewpoint = ("VP-CTX", "VP-LOG", "VP-RISK");
+
+        part disableThreatMitigation : RulePolicy :> rulePolicy {
+            ref :>> targetRule : ThreatMitigationRule;
+            attribute :>> disposition = RuleDispositionKind::disabled;
+            attribute :>> rationaleText = "CR-MED-040 requires every threat to carry a mitigation. The prototype has no network or removable-media interface, so no threat is in scope and the rule can only report on elements this variant does not model.";
+            attribute :>> authority = "GPCA Systems Engineering Lead";
+            attribute :>> approvalReference = "GPCA-DHF-CR-0007";
+        }
 
-    part gpcaMethodResolved : ResolvedMethodology {
-        attribute :>> id = "RMETH-GPCA-001";
-        attribute :>> name = "GPCAPrototypeResolved";
-        attribute :>> version = "1.0";
-        attribute :>> safetyClassification = SafetyClassKind::C;
-        attribute :>> lifecycleStage = LifecycleStateKind::development;
-        attribute :>> resolutionSummary = "GPCA infusion pump — IEC 62304 Class C at development stage. Default scope minus cybersecurity and SOUP, as the prototype is non-networked.";
+        part disableAssetThreatLink : RulePolicy :> rulePolicy {
+            ref :>> targetRule : AssetThreatLinkRule;
+            attribute :>> disposition = RuleDispositionKind::disabled;
+            attribute :>> rationaleText = "CR-MED-041 requires every cybersecurity asset to trace to a threat. Cybersecurity is not a selected discipline for this variant, so the rule has no subjects and its absence is recorded here rather than left implicit.";
+            attribute :>> authority = "GPCA Systems Engineering Lead";
+            attribute :>> approvalReference = "GPCA-DHF-CR-0007";
+        }
     }
 }

package/examples/gpca-pump/model/catalog/gpca_analysis.sysml

@@ -1,4 +1,4 @@
-package memo_examples_gpca_pump_model_catalog_gpca_analysis {
+package memo_examples_gpca_pump_gpca_analysis {
     private import ScalarValues::*;
 
     private import memo_assurance_safety_risk_analysis::*;
@@ -18,8 +18,10 @@ package memo_examples_gpca_pump_model_catalog_gpca_analysis {
         attribute :>> id = "FM-001";
         attribute :>> name = "PumpMotorRunaway";
         attribute :>> failureModeKind = FailureModeKind::unintendedFunction;
+        attribute :>> effect = "Excess drug delivered to the patient beyond the prescribed rate.";
         attribute :>> severityRating = 10;
         attribute :>> occurrenceRating = 2;
+        attribute :>> probability = ProbabilityKind::improbable;
         attribute :>> detectionRating = 3;
         attribute :>> rpn = 60;
         attribute :>> criticality = CriticalityKind::catastrophic;
@@ -29,8 +31,10 @@ package memo_examples_gpca_pump_model_catalog_gpca_analysis {
         attribute :>> id = "FM-002";
         attribute :>> name = "AirSensorFailsSilent";
         attribute :>> failureModeKind = FailureModeKind::lossOfFunction;
+        attribute :>> effect = "Air embolism reaches the patient undetected.";
         attribute :>> severityRating = 10;
         attribute :>> occurrenceRating = 3;
+        attribute :>> probability = ProbabilityKind::remote;
         attribute :>> detectionRating = 4;
         attribute :>> rpn = 120;
         attribute :>> criticality = CriticalityKind::catastrophic;
@@ -40,8 +44,10 @@ package memo_examples_gpca_pump_model_catalog_gpca_analysis {
         attribute :>> id = "FM-003";
         attribute :>> name = "OcclusionSensorDrift";
         attribute :>> failureModeKind = FailureModeKind::degradedFunction;
+        attribute :>> effect = "Occluded line is detected late or not at all, interrupting therapy.";
         attribute :>> severityRating = 7;
         attribute :>> occurrenceRating = 4;
+        attribute :>> probability = ProbabilityKind::occasional;
         attribute :>> detectionRating = 4;
         attribute :>> rpn = 112;
         attribute :>> criticality = CriticalityKind::high;
@@ -51,8 +57,10 @@ package memo_examples_gpca_pump_model_catalog_gpca_analysis {
         attribute :>> id = "FM-004";
         attribute :>> name = "BolusButtonStuckClosed";
         attribute :>> failureModeKind = FailureModeKind::unintendedFunction;
+        attribute :>> effect = "Repeated unrequested boluses are delivered.";
         attribute :>> severityRating = 9;
         attribute :>> occurrenceRating = 3;
+        attribute :>> probability = ProbabilityKind::remote;
         attribute :>> detectionRating = 2;
         attribute :>> rpn = 54;
         attribute :>> criticality = CriticalityKind::high;
@@ -62,8 +70,10 @@ package memo_examples_gpca_pump_model_catalog_gpca_analysis {
         attribute :>> id = "FM-005";
         attribute :>> name = "BatteryDepletesEarly";
         attribute :>> failureModeKind = FailureModeKind::prematureFunction;
+        attribute :>> effect = "Pump loses power during transport, stopping therapy.";
         attribute :>> severityRating = 6;
         attribute :>> occurrenceRating = 4;
+        attribute :>> probability = ProbabilityKind::occasional;
         attribute :>> detectionRating = 3;
         attribute :>> rpn = 72;
         attribute :>> criticality = CriticalityKind::medium;
@@ -161,13 +171,13 @@ package memo_examples_gpca_pump_model_catalog_gpca_analysis {
         attribute :>> cutSetSummary = "All minimal cut sets are order 2 or higher after mitigation";
         attribute :>> revisionDate = "2026-07-03";
     }
-    part fteOverdoseTop : FaultTreeEvent {
+    part fteOverdoseTop : FaultTreeNode {
         attribute :>> id = "FTE-001";
         attribute :>> name = "ExcessDrugDeliveredTopEvent";
         attribute :>> eventKind = FaultTreeEventKind::topEvent;
         attribute :>> description = "Delivered volume exceeds prescribed limits";
     }
-    part fteMotorRunaway : FaultTreeEvent {
+    part fteMotorRunaway : FaultTreeNode {
         attribute :>> id = "FTE-002";
         attribute :>> name = "MotorRunawayBasicEvent";
         attribute :>> eventKind = FaultTreeEventKind::basicEvent;
@@ -175,7 +185,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_analysis {
         attribute :>> exposureTime = 100.0;
         attribute :>> description = "Pump motor delivers faster than commanded (FM-001)";
     }
-    part fteCrossCheckFails : FaultTreeEvent {
+    part fteCrossCheckFails : FaultTreeNode {
         attribute :>> id = "FTE-003";
         attribute :>> name = "FlowCrossCheckUnavailable";
         attribute :>> eventKind = FaultTreeEventKind::basicEvent;
@@ -183,7 +193,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_analysis {
         attribute :>> exposureTime = 100.0;
         attribute :>> description = "Independent flow sensor or comparison logic fails (FM-003 family)";
     }
-    part fteLockoutFault : FaultTreeEvent {
+    part fteLockoutFault : FaultTreeNode {
         attribute :>> id = "FTE-004";
         attribute :>> name = "LockoutEnforcementFault";
         attribute :>> eventKind = FaultTreeEventKind::basicEvent;
@@ -191,7 +201,7 @@ package memo_examples_gpca_pump_model_catalog_gpca_analysis {
         attribute :>> exposureTime = 100.0;
         attribute :>> description = "Infusion manager authorizes bolus despite active lockout";
     }
-    part fteStuckButtonUndetected : FaultTreeEvent {
+    part fteStuckButtonUndetected : FaultTreeNode {
         attribute :>> id = "FTE-005";
         attribute :>> name = "StuckBolusButtonUndetected";
         attribute :>> eventKind = FaultTreeEventKind::basicEvent;
@@ -199,17 +209,17 @@ package memo_examples_gpca_pump_model_catalog_gpca_analysis {
         attribute :>> exposureTime = 100.0;
         attribute :>> description = "Pendant stuck closed and stuck-input monitor fails (FM-004)";
     }
-    part ftgOverdoseOr : FaultTreeGate {
+    part ftgOverdoseOr : FaultTreeNode {
         attribute :>> id = "FTG-001";
         attribute :>> name = "OverdelivryPathOrGate";
         attribute :>> gateKind = FaultTreeGateKind::orGate;
     }
-    part ftgMotorAnd : FaultTreeGate {
+    part ftgMotorAnd : FaultTreeNode {
         attribute :>> id = "FTG-002";
         attribute :>> name = "MotorRunawayAndCrossCheckGate";
         attribute :>> gateKind = FaultTreeGateKind::andGate;
     }
-    part ftgBolusAnd : FaultTreeGate {
+    part ftgBolusAnd : FaultTreeNode {
         attribute :>> id = "FTG-003";
         attribute :>> name = "UnauthorizedBolusAndGate";
         attribute :>> gateKind = FaultTreeGateKind::andGate;