@memoarchitect/ontology 0.6.5 → 0.8.22

package/examples/gpca-pump/model/{views → catalog/viewpoints/verification/views}/document_vv_view.sysml

@@ -1,17 +1,19 @@
-package memo_examples_gpca_pump_model_views_document_vv_view {
+package memo_examples_gpca_pump_viewpoints_verification_views_document_vv_view {
     private import ScalarValues::*;
 
     private import memo_viewpoints_definitions::*;
     private import memo_viewpoints_verification_verification_viewpoint::*;
     private import memo_core_enumerations::*;
+    private import memo_examples_gpca_pump_gpca_verification::*;
 
     view vvView : MemoDocumentView {
-        expose memo_examples_gpca_pump_model_views_document_vv_view::*;
+        expose memo_examples_gpca_pump_viewpoints_verification_views_document_vv_view::*;
+        expose evidenceSafetyAlarmSuite;
         attribute :>> id = "DOC-006";
         attribute :>> name = "VerificationValidationView";
         attribute :>> title = "GPCA Verification and Validation View";
         attribute :>> shortDescription = "V&V plan and coverage for requirements and risk controls.";
-        attribute :>> longDescription = "Aggregates verification cases, validation cases, test artifacts, and evidence with their coverage of requirements, risk controls, behavior properties, and timing constraints.";
+        attribute :>> description = "Aggregates verification cases, validation cases, test artifacts, and evidence with their coverage of requirements, risk controls, behavior properties, and timing constraints.";
         attribute :>> version = "0.1";
         attribute :>> lifecycleState = LifecycleStateKind::development;
         attribute :>> viewKind = DocumentViewKind::VV;
@@ -23,8 +25,8 @@ package memo_examples_gpca_pump_model_views_document_vv_view {
         part :>> selectionQuery {
             attribute :>> id = "QRY-DOC-006";
             attribute :>> name = "vvViewQuery";
-            attribute :>> includeElementKinds = ("VerificationCase", "ValidationCase", "TestArtifact", "Evidence", "Requirement", "RiskControlMeasure");
-            attribute :>> includeRelationshipKinds = ("VerifiedBy", "Validates", "TestedByUsability", "ProducesEvidence", "IncludedIn");
+            attribute :>> includeElementKinds = ("VerificationCase", "ValidationCase", "MemoEvidence", "Requirement", "RiskControlMeasure");
+            attribute :>> includeRelationshipKinds = ("VerifiedBy", "Validates", "TestedByUsability", "ProducesEvidence");
             attribute :>> rationaleText = "Declares what this document-backed view renders; the web renderer is presentation-only.";
         }
     }

package/examples/gpca-pump/model/{views → catalog/viewpoints/verification/views}/verification_verification_coverage_view.sysml

@@ -1,4 +1,4 @@
-package memo_examples_gpca_pump_model_views_verification_verification_coverage_view {
+package memo_examples_gpca_pump_viewpoints_verification_views_verification_verification_coverage_view {
     private import ScalarValues::*;
 
     private import memo_viewpoints_definitions::*;
@@ -14,7 +14,7 @@ package memo_examples_gpca_pump_model_views_verification_verification_coverage_v
     private import memo_core_enumerations::*;
 
     view gpcaVerificationCoverageView : MemoDiagramView {
-        expose memo_examples_gpca_pump_model_views_verification_verification_coverage_view::*;
+        expose memo_examples_gpca_pump_viewpoints_verification_views_verification_verification_coverage_view::*;
         attribute depth = 2;
         attribute :>> id = "VIEW-VER-101";
         attribute :>> name = "GPCA_VerificationCoverageView";
@@ -31,7 +31,7 @@ package memo_examples_gpca_pump_model_views_verification_verification_coverage_v
         part :>> selectionQuery {
             attribute :>> id = "QRY-VER-101";
             attribute :>> name = "GPCA_VerificationCoverageQuery";
-            attribute :>> includeElementKinds = ("Requirement", "RiskControlMeasure", "VerificationCase", "ValidationCase", "TestArtifact", "Evidence");
+            attribute :>> includeElementKinds = ("Requirement", "RiskControlMeasure", "VerificationCase", "ValidationCase", "MemoEvidence");
             attribute :>> includeRelationshipKinds = ("VerifiedBy", "Validates", "ProducesEvidence");
             attribute :>> includeLayers = ("requirements", "risk", "assurance");
             attribute :>> selectionExpression = "product == 'GPCA'";

package/examples/ivd-laboratory-system/model/catalog/project.sysml

@@ -0,0 +1,24 @@
+// Ivd Laboratory System — project identity and method binding.
+//
+// The native entrypoint. The imports name what this project contains and the
+// binding names the methodology it is governed by. No YAML file participates.
+package memo_examples_ivd_laboratory_system_project {
+    private import ScalarValues::*;
+
+    private import memo_core_enumerations::*;
+    private import memo_methodology_core::*;
+    private import memo_methodology_profiles::*;
+
+    // The project's own content, imported so the catalog is one reachable
+    // closure from a single entrypoint.
+    private import memo_examples_ivd_laboratory_system_viewpoints_unassigned::*;
+    private import memo_examples_ivd_laboratory_system_viewpoints_unassigned_views_ivd_laboratory_system_overview::*;
+
+    part projectBinding : ProjectMethodBinding {
+        attribute :>> id = "PMB-LABORATORY-SYSTEM-001";
+        attribute :>> name = "IvdLaboratorySystemProjectMethodBinding";
+        attribute :>> projectName = "Ivd Laboratory System";
+        ref :>> selectedMethodology = mdDefaultDefinition;
+        attribute :>> scopeMode = ScopeModeKind::explicit;
+    }
+}

package/examples/ivd-laboratory-system/model/catalog/viewpoints/unassigned/viewpoint.sysml

@@ -0,0 +1,9 @@
+// unassigned viewpoint.
+//
+// This project does not define its own viewpoint here; it binds the reusable
+// MEMO viewpoint that frames these concerns. The views it governs sit beneath
+// `views/`.
+package memo_examples_ivd_laboratory_system_viewpoints_unassigned {
+    // The reusable package declaring unassigned could not be resolved during
+    // conversion. Import it here so the views beneath this viewpoint resolve.
+}

package/examples/ivd-laboratory-system/model/{viewpoints → catalog/viewpoints/unassigned/views}/ivd_laboratory_system_overview.sysml

@@ -1,4 +1,4 @@
-package memo_examples_ivd_laboratory_system_viewpoints {
+package memo_examples_ivd_laboratory_system_viewpoints_unassigned_views_ivd_laboratory_system_overview {
     private import memo_examples_ivd_laboratory_system::*;
     private import memo_viewpoints_definitions::*;
     private import memo_core_enumerations::*;

package/examples/manual-surgical-instrument/model/catalog/manual_surgical_instrument.sysml

@@ -3,8 +3,10 @@
 // without adding functional, logical, or software layers.
 package memo_examples_manual_surgical_instrument {
     private import ScalarValues::*;
+    private import ModelingMetadata::*;
 
     private import memo_core_enumerations::*;
+    private import memo_core_relationships::*;
     private import memo_architecture_operational_activities::*;
     private import memo_architecture_implementation_hardware_structure::*;
 
@@ -28,8 +30,8 @@ package memo_examples_manual_surgical_instrument {
         attribute :>> mechanicalFunction = "maintains jaw clamping force without continuous grip";
         attribute :>> patientContact = false;
     }
-    connection : Realizes connect realized ::> needleHolder to realizing ::> jawAssembly;
-    connection : Realizes connect realized ::> needleHolder to realizing ::> ratchetLock;
+    #refinement dependency needleHolder to jawAssembly;
+    #refinement dependency needleHolder to ratchetLock;
 
     // A task may be traced to the architecture later when the project has a
     // specific allocation or interaction claim to make.

package/examples/manual-surgical-instrument/model/catalog/project.sysml

@@ -0,0 +1,24 @@
+// Manual Surgical Instrument — project identity and method binding.
+//
+// The native entrypoint. The imports name what this project contains and the
+// binding names the methodology it is governed by. No YAML file participates.
+package memo_examples_manual_surgical_instrument_project {
+    private import ScalarValues::*;
+
+    private import memo_core_enumerations::*;
+    private import memo_methodology_core::*;
+    private import memo_methodology_profiles::*;
+
+    // The project's own content, imported so the catalog is one reachable
+    // closure from a single entrypoint.
+    private import memo_examples_manual_surgical_instrument_viewpoints_unassigned::*;
+    private import memo_examples_manual_surgical_instrument_viewpoints_unassigned_views_manual_surgical_instrument_overview::*;
+
+    part projectBinding : ProjectMethodBinding {
+        attribute :>> id = "PMB-SURGICAL-INSTRUMENT-001";
+        attribute :>> name = "ManualSurgicalInstrumentProjectMethodBinding";
+        attribute :>> projectName = "Manual Surgical Instrument";
+        ref :>> selectedMethodology = mdDefaultDefinition;
+        attribute :>> scopeMode = ScopeModeKind::explicit;
+    }
+}

package/examples/manual-surgical-instrument/model/catalog/viewpoints/unassigned/viewpoint.sysml

@@ -0,0 +1,9 @@
+// unassigned viewpoint.
+//
+// This project does not define its own viewpoint here; it binds the reusable
+// MEMO viewpoint that frames these concerns. The views it governs sit beneath
+// `views/`.
+package memo_examples_manual_surgical_instrument_viewpoints_unassigned {
+    // The reusable package declaring unassigned could not be resolved during
+    // conversion. Import it here so the views beneath this viewpoint resolve.
+}

package/examples/manual-surgical-instrument/model/{viewpoints → catalog/viewpoints/unassigned/views}/manual_surgical_instrument_overview.sysml

@@ -1,4 +1,4 @@
-package memo_examples_manual_surgical_instrument_viewpoints {
+package memo_examples_manual_surgical_instrument_viewpoints_unassigned_views_manual_surgical_instrument_overview {
     private import memo_examples_manual_surgical_instrument::*;
     private import memo_viewpoints_definitions::*;
     private import memo_core_enumerations::*;

package/examples/multidimensional-layers/model/catalog/multidimensional_layers.sysml

@@ -8,6 +8,7 @@
 // through relationships.
 package memo_examples_multidimensional_layers {
     private import ScalarValues::*;
+    private import ModelingMetadata::*;
 
     private import memo_core_enumerations::*;
     private import memo_core_dimensions::*;
@@ -37,15 +38,18 @@ package memo_examples_multidimensional_layers {
         attribute :>> periodMs = 50.0;
         attribute :>> deadlineMs = 50.0;
         attribute :>> wcetMs = 8.0;
+        attribute :>> memoryBudget = 64.0;
         attribute :>> schedulingPolicy = SchedulingPolicyKind::fixedPriorityPreemptive;
         attribute :>> realizationStage = RealizationStageKind::deployed;
     }
-    connection : Realizes connect realizing ::> doseLimitCheckerRuntime to realized ::> doseLimitChecker;
+    #refinement dependency doseLimitCheckerRuntime to doseLimitChecker;
 
     verification vcLimitEnforcement : VerificationCase {
         attribute :>> id = "MDL-VC-001"; attribute :>> name = "VerifyHardLimitEnforcement";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "all out-of-limit programs rejected across the equivalence classes";
+
+        subject verified : Base::Anything[*] = (doseLimitChecker);
     }
-    connection : VerifiedBy connect verificationTarget ::> doseLimitChecker to verificationCase ::> vcLimitEnforcement;
+
 }

package/examples/multidimensional-layers/model/catalog/project.sysml

@@ -0,0 +1,24 @@
+// Multidimensional Layers — project identity and method binding.
+//
+// The native entrypoint. The imports name what this project contains and the
+// binding names the methodology it is governed by. No YAML file participates.
+package memo_examples_multidimensional_layers_project {
+    private import ScalarValues::*;
+
+    private import memo_core_enumerations::*;
+    private import memo_methodology_core::*;
+    private import memo_methodology_profiles::*;
+
+    // The project's own content, imported so the catalog is one reachable
+    // closure from a single entrypoint.
+    private import memo_examples_multidimensional_layers_viewpoints_unassigned::*;
+    private import memo_examples_multidimensional_layers_viewpoints_unassigned_views_multidimensional_layers_overview::*;
+
+    part projectBinding : ProjectMethodBinding {
+        attribute :>> id = "PMB-MULTIDIMENSIONAL-LAYERS-001";
+        attribute :>> name = "MultidimensionalLayersProjectMethodBinding";
+        attribute :>> projectName = "Multidimensional Layers";
+        ref :>> selectedMethodology = mdDefaultDefinition;
+        attribute :>> scopeMode = ScopeModeKind::explicit;
+    }
+}

package/examples/multidimensional-layers/model/catalog/viewpoints/unassigned/viewpoint.sysml

@@ -0,0 +1,9 @@
+// unassigned viewpoint.
+//
+// This project does not define its own viewpoint here; it binds the reusable
+// MEMO viewpoint that frames these concerns. The views it governs sit beneath
+// `views/`.
+package memo_examples_multidimensional_layers_viewpoints_unassigned {
+    // The reusable package declaring unassigned could not be resolved during
+    // conversion. Import it here so the views beneath this viewpoint resolve.
+}

package/examples/multidimensional-layers/model/{viewpoints → catalog/viewpoints/unassigned/views}/multidimensional_layers_overview.sysml

@@ -1,4 +1,4 @@
-package memo_examples_multidimensional_layers_viewpoints {
+package memo_examples_multidimensional_layers_viewpoints_unassigned_views_multidimensional_layers_overview {
     private import memo_examples_multidimensional_layers::*;
     private import memo_viewpoints_definitions::*;
     private import memo_core_enumerations::*;

package/examples/nested-architecture-dsm/README.md

@@ -0,0 +1,49 @@
+# Nested Architecture DSM
+
+A small infusion-pump model whose only purpose is to exercise the two matrix
+analyses — the Design Structure Matrix and the Traceability Matrix — with a
+hierarchy deep enough that expanding and collapsing changes what you see.
+
+## What is in it
+
+| Axis material | Elements | Nesting |
+| --- | --- | --- |
+| Logical structure | 1 system, 5 subsystems, 12 components | 4 levels (`System → Subsystem → Subsystem → LogicalComponent`) |
+| Functional architecture | 18 system functions | 3 levels, four capability trees |
+| Requirements | 7 requirements | flat |
+
+Nesting is declared with `Composes`, so both matrices build their trees from
+the model rather than from a naming convention.
+
+## What it is set up to show
+
+- **Roll-up.** `SafetyMonitorSubsystem` sits one level deeper than its peers, so
+  a collapsed `ControlSubsystem` row genuinely sums its descendants instead of
+  standing in for a single child.
+- **Feedback.** `DriveActuator` and `MeasureDeliveredVolume` exchange in both
+  directions, so a partitioned DSM still shows one real feedback mark rather
+  than an empty lower triangle.
+- **Cross-tree dependency.** `EnforceDoseLimits → DriveActuator` and
+  `SelectPowerSource → DriveActuator` cross capability trees, which is what a
+  collapsed matrix rolls into a single number between two capabilities.
+- **Asymmetric axes.** Functions on the rows and blocks on the columns, joined
+  by `AllocatedTo` — including `MeterFluid → FluidPathSubsystem`, an allocation
+  made at subsystem level rather than to one component.
+- **A traceability gap.** `StatusVisibility` is satisfied by nothing, so
+  coverage reads under 100% and there is an empty row to author a link into.
+
+## Suggested run
+
+```bash
+memo-architect --example nested-architecture-dsm
+```
+
+In **DSM**: set rows and columns to `SystemFunction`, dependency to
+`exchangesWith`, and switch ordering between *Name* and *Partition* — the
+feedback count drops and one mark stays below the diagonal. Then set columns to
+the logical kinds and dependency to `allocatedTo` for the allocation view.
+
+In **Traceability**: rows `Requirement`, columns `SystemFunction`, trace via
+`satisfiedBy`. Turn on **Edit links** and click the empty `StatusVisibility` row
+to author the missing trace; it is written back to
+`model/catalog/traces.sysml`.

package/examples/nested-architecture-dsm/model/catalog/architecture/functional/functions.sysml

@@ -0,0 +1,179 @@
+// Functional architecture — the row axis of the DSM.
+//
+// Four capability trees, each a native containment tree, plus the functional
+// exchanges between the leaves. The exchanges are deliberately not a clean
+// pipeline: DriveActuator and MeasureDeliveredVolume feed each other, so a
+// partitioned DSM still shows one genuine feedback mark instead of an empty
+// lower triangle.
+package memo_examples_nested_architecture_dsm_architecture_functional_functions {
+    private import memo_examples_nested_architecture_dsm_assurance_requirements::*;
+    private import ScalarValues::*;
+
+    private import memo_core_enumerations::*;
+    private import memo_core_relationships::*;
+    private import memo_architecture_functional_functions::*;
+    private import memo_architecture_operational_context_use_context::*;
+
+    // ── Deliver therapy ──────────────────────────────────────────
+    action fnDeliverTherapy : SystemFunction {
+        attribute :>> id = "NDS-FN-001"; attribute :>> name = "DeliverTherapy";
+        attribute :>> functionCategory = "therapy";
+        attribute :>> criticality = CriticalityKind::catastrophic;
+        attribute :>> concernKind = ConcernKind::safety;
+        attribute :>> outputSummary = "fluid delivered to the patient line at the prescribed rate";
+
+        action fnMeterFluid : SystemFunction {
+            attribute :>> id = "NDS-FN-002"; attribute :>> name = "MeterFluid";
+            attribute :>> functionCategory = "therapy";
+            attribute :>> criticality = CriticalityKind::catastrophic;
+            attribute :>> concernKind = ConcernKind::safety;
+            attribute :>> outputSummary = "measured volume displaced per control period";
+
+            action fnDriveActuator : SystemFunction {
+                attribute :>> id = "NDS-FN-003"; attribute :>> name = "DriveActuator";
+                attribute :>> functionCategory = "therapy";
+                attribute :>> criticality = CriticalityKind::catastrophic;
+                attribute :>> trigger = "rate command from the dose control loop";
+                attribute :>> concernKind = ConcernKind::safety;
+            }
+            action fnMeasureDelivered : SystemFunction {
+                attribute :>> id = "NDS-FN-004"; attribute :>> name = "MeasureDeliveredVolume";
+                attribute :>> functionCategory = "therapy";
+                attribute :>> criticality = CriticalityKind::high;
+                attribute :>> concernKind = ConcernKind::safety;
+                attribute :>> outputSummary = "cumulative delivered volume";
+            }
+        }
+        action fnControlDose : SystemFunction {
+            attribute :>> id = "NDS-FN-005"; attribute :>> name = "ControlDose";
+            attribute :>> functionCategory = "therapy";
+            attribute :>> criticality = CriticalityKind::catastrophic;
+            attribute :>> concernKind = ConcernKind::safety;
+
+            action fnComputeRate : SystemFunction {
+                attribute :>> id = "NDS-FN-006"; attribute :>> name = "ComputeInfusionRate";
+                attribute :>> functionCategory = "therapy";
+                attribute :>> criticality = CriticalityKind::catastrophic;
+                attribute :>> concernKind = ConcernKind::safety;
+                attribute :>> outputSummary = "rate command, saturated at the prescribed ceiling";
+            }
+            action fnValidatePrescription : SystemFunction {
+                attribute :>> id = "NDS-FN-007"; attribute :>> name = "ValidatePrescription";
+                attribute :>> functionCategory = "therapy";
+                attribute :>> criticality = CriticalityKind::high;
+                attribute :>> concernKind = ConcernKind::clinical;
+                attribute :>> outputSummary = "accepted or rejected prescription, with the reason";
+            }
+        }
+    }
+
+    // ── Ensure safety ────────────────────────────────────────────
+    action fnEnsureSafety : SystemFunction {
+        attribute :>> id = "NDS-FN-008"; attribute :>> name = "EnsureSafety";
+        attribute :>> functionCategory = "protection";
+        attribute :>> criticality = CriticalityKind::catastrophic;
+        attribute :>> concernKind = ConcernKind::safety;
+
+        action fnDetectOcclusion : SystemFunction {
+            attribute :>> id = "NDS-FN-009"; attribute :>> name = "DetectOcclusion";
+            attribute :>> functionCategory = "protection";
+            attribute :>> criticality = CriticalityKind::catastrophic;
+            attribute :>> trigger = "line pressure above the occlusion threshold";
+            attribute :>> concernKind = ConcernKind::safety;
+        }
+        action fnDetectAirInLine : SystemFunction {
+            attribute :>> id = "NDS-FN-010"; attribute :>> name = "DetectAirInLine";
+            attribute :>> functionCategory = "protection";
+            attribute :>> criticality = CriticalityKind::catastrophic;
+            attribute :>> trigger = "air bolus detected in the patient line";
+            attribute :>> concernKind = ConcernKind::safety;
+        }
+        action fnEnforceDoseLimits : SystemFunction {
+            attribute :>> id = "NDS-FN-011"; attribute :>> name = "EnforceDoseLimits";
+            attribute :>> functionCategory = "protection";
+            attribute :>> criticality = CriticalityKind::catastrophic;
+            attribute :>> concernKind = ConcernKind::safety;
+            attribute :>> outputSummary = "delivery stopped when the commanded dose leaves the accepted envelope";
+        }
+    }
+
+    // ── Inform the user ──────────────────────────────────────────
+    action fnInformUser : SystemFunction {
+        attribute :>> id = "NDS-FN-012"; attribute :>> name = "InformUser";
+        attribute :>> functionCategory = "interaction";
+        attribute :>> criticality = CriticalityKind::high;
+        attribute :>> concernKind = ConcernKind::usability;
+
+        action fnRenderStatus : SystemFunction {
+            attribute :>> id = "NDS-FN-013"; attribute :>> name = "RenderTherapyStatus";
+            attribute :>> functionCategory = "interaction";
+            attribute :>> criticality = CriticalityKind::high;
+            attribute :>> concernKind = ConcernKind::usability;
+            attribute :>> outputSummary = "rate, volume delivered and time remaining";
+        }
+        action fnAnnunciateAlarm : SystemFunction {
+            attribute :>> id = "NDS-FN-014"; attribute :>> name = "AnnunciateAlarm";
+            attribute :>> functionCategory = "interaction";
+            attribute :>> criticality = CriticalityKind::catastrophic;
+            attribute :>> trigger = "any active alarm condition";
+            attribute :>> concernKind = ConcernKind::safety;
+        }
+        action fnAcceptInput : SystemFunction {
+            attribute :>> id = "NDS-FN-015"; attribute :>> name = "AcceptClinicianInput";
+            attribute :>> functionCategory = "interaction";
+            attribute :>> criticality = CriticalityKind::high;
+            attribute :>> concernKind = ConcernKind::usability;
+            attribute :>> outputSummary = "confirmed prescription changes";
+        }
+    }
+
+    // ── Manage power ─────────────────────────────────────────────
+    action fnManagePower : SystemFunction {
+        attribute :>> id = "NDS-FN-016"; attribute :>> name = "ManagePower";
+        attribute :>> functionCategory = "platform";
+        attribute :>> criticality = CriticalityKind::high;
+        attribute :>> concernKind = ConcernKind::reliability;
+
+        action fnMonitorBattery : SystemFunction {
+            attribute :>> id = "NDS-FN-017"; attribute :>> name = "MonitorBatteryState";
+            attribute :>> functionCategory = "platform";
+            attribute :>> criticality = CriticalityKind::high;
+            attribute :>> concernKind = ConcernKind::reliability;
+            attribute :>> outputSummary = "state of charge and remaining run time";
+        }
+        action fnSelectPowerSource : SystemFunction {
+            attribute :>> id = "NDS-FN-018"; attribute :>> name = "SelectPowerSource";
+            attribute :>> functionCategory = "platform";
+            attribute :>> criticality = CriticalityKind::high;
+            attribute :>> trigger = "mains loss or rail brownout";
+            attribute :>> concernKind = ConcernKind::reliability;
+        }
+    }
+
+    // ── Functional exchange ──────────────────────────────────────
+    // Cross-tree marks are the interesting ones: they are what a collapsed DSM
+    // rolls up into a single number between two capabilities.
+    flow from fnDeliverTherapy.fnMeterFluid.fnMeasureDelivered to fnDeliverTherapy.fnControlDose.fnComputeRate;
+    flow from fnDeliverTherapy.fnControlDose.fnComputeRate to fnDeliverTherapy.fnMeterFluid.fnDriveActuator;
+    flow from fnDeliverTherapy.fnMeterFluid.fnDriveActuator to fnDeliverTherapy.fnMeterFluid.fnMeasureDelivered;
+    flow from fnDeliverTherapy.fnControlDose.fnValidatePrescription to fnDeliverTherapy.fnControlDose.fnComputeRate;
+    flow from fnInformUser.fnAcceptInput to fnDeliverTherapy.fnControlDose.fnValidatePrescription;
+    flow from fnEnsureSafety.fnDetectOcclusion to fnEnsureSafety.fnEnforceDoseLimits;
+    flow from fnEnsureSafety.fnDetectAirInLine to fnInformUser.fnAnnunciateAlarm;
+    flow from fnEnsureSafety.fnEnforceDoseLimits to fnDeliverTherapy.fnMeterFluid.fnDriveActuator;
+    flow from fnDeliverTherapy.fnMeterFluid.fnMeasureDelivered to fnInformUser.fnRenderStatus;
+    flow from fnManagePower.fnMonitorBattery to fnInformUser.fnAnnunciateAlarm;
+    flow from fnManagePower.fnSelectPowerSource to fnDeliverTherapy.fnMeterFluid.fnDriveActuator;
+    flow from fnEnsureSafety.fnDetectOcclusion to fnInformUser.fnAnnunciateAlarm;
+    satisfy reqDoseAccuracy by fnDeliverTherapy.fnControlDose.fnComputeRate;
+    satisfy reqDoseAccuracy by fnDeliverTherapy.fnMeterFluid.fnDriveActuator;
+    satisfy reqOcclusionDetection by fnEnsureSafety.fnDetectOcclusion;
+    satisfy reqOcclusionDetection by fnEnsureSafety.fnEnforceDoseLimits;
+    satisfy reqAirInLine by fnEnsureSafety.fnDetectAirInLine;
+    satisfy reqAirInLine by fnInformUser.fnAnnunciateAlarm;
+    satisfy reqAlarmAnnunciation by fnInformUser.fnAnnunciateAlarm;
+    satisfy reqBatteryEndurance by fnManagePower.fnMonitorBattery;
+    satisfy reqBatteryEndurance by fnManagePower.fnSelectPowerSource;
+    satisfy reqPrescriptionConfirmation by fnInformUser.fnAcceptInput;
+    satisfy reqPrescriptionConfirmation by fnDeliverTherapy.fnControlDose.fnValidatePrescription;
+}

package/examples/nested-architecture-dsm/model/catalog/architecture/logical/structure.sysml

@@ -0,0 +1,165 @@
+// Logical structure — the column axis of the DSM.
+//
+// Four levels deep on purpose (System → Subsystem → Subsystem → component),
+// so expanding and collapsing the matrix has something real to do. Containment
+// is native nesting; the builder synthesizes the `composes` relationship the
+// DSM reads to build the column tree, so no explicit Composes edge is written.
+package memo_examples_nested_architecture_dsm_architecture_logical_structure {
+    private import ScalarValues::*;
+
+    private import memo_core_enumerations::*;
+    private import memo_core_relationships::*;
+    private import memo_architecture_logical_structure::*;
+    private import memo_architecture_operational_context_use_context::*;
+
+    // ── Level 0: the system ──────────────────────────────────────
+    part sysTherapyDelivery : System {
+        attribute :>> id = "NDS-SYS-001"; attribute :>> name = "TherapyDeliverySystem";
+        attribute :>> componentRole = ComponentRoleKind::generic;
+        attribute :>> systemType = SystemTypeKind::logical;
+        attribute :>> systemBoundaryDescription = "Everything inside the pump enclosure, including its power path and user interface.";
+        attribute :>> responsibility = "Deliver a prescribed infusion safely and report what it delivered.";
+
+        // ── Level 1: subsystems ──────────────────────────────────
+        part subFluidPath : Subsystem {
+            attribute :>> id = "NDS-SUB-001"; attribute :>> name = "FluidPathSubsystem";
+            attribute :>> componentRole = ComponentRoleKind::generic;
+            attribute :>> systemType = SystemTypeKind::hardware;
+            attribute :>> responsibility = "Move fluid from the reservoir to the patient line at a commanded rate.";
+
+            // ── Level 2/3: components ─────────────────────────────
+            part lcPumpMechanism : LogicalComponent {
+                attribute :>> id = "NDS-LC-001"; attribute :>> name = "PumpMechanism";
+                attribute :>> componentRole = ComponentRoleKind::controlElement;
+                attribute :>> systemType = SystemTypeKind::hardware;
+                attribute :>> responsibility = "Displace fluid under command.";
+                attribute :>> controlledVariable = "delivered volume per stroke";
+            }
+            part lcOcclusionChannel : LogicalComponent {
+                attribute :>> id = "NDS-LC-002"; attribute :>> name = "OcclusionSensingChannel";
+                attribute :>> componentRole = ComponentRoleKind::channel;
+                attribute :>> systemType = SystemTypeKind::hardware;
+                attribute :>> responsibility = "Sense line pressure and air in line.";
+                attribute :>> channelRole = ChannelRoleKind::primary;
+            }
+            part lcReservoirInterface : LogicalComponent {
+                attribute :>> id = "NDS-LC-003"; attribute :>> name = "ReservoirInterface";
+                attribute :>> componentRole = ComponentRoleKind::generic;
+                attribute :>> systemType = SystemTypeKind::hardware;
+                attribute :>> responsibility = "Seat the reservoir and expose its remaining volume.";
+            }
+        }
+        part subControl : Subsystem {
+            attribute :>> id = "NDS-SUB-002"; attribute :>> name = "ControlSubsystem";
+            attribute :>> componentRole = ComponentRoleKind::controlElement;
+            attribute :>> systemType = SystemTypeKind::software;
+            attribute :>> responsibility = "Decide what the fluid path should do, and hold the therapy state.";
+
+            // ── Level 2: a subsystem inside a subsystem ───────────
+            // The safety monitor is nested one level deeper than its peers,
+            // which is what makes a collapsed ControlSubsystem row a genuine
+            // roll-up rather than a rename of its children.
+            part subSafetyMonitor : Subsystem {
+                attribute :>> id = "NDS-SUB-005"; attribute :>> name = "SafetyMonitorSubsystem";
+                attribute :>> componentRole = ComponentRoleKind::channel;
+                attribute :>> systemType = SystemTypeKind::software;
+                attribute :>> responsibility = "Watch the control path from outside it and stop delivery on breach.";
+                attribute :>> safetyPartition = "monitor partition, separate MPU region from the control partition";
+
+                part lcWatchdogChannel : LogicalComponent {
+                    attribute :>> id = "NDS-LC-006"; attribute :>> name = "WatchdogChannel";
+                    attribute :>> componentRole = ComponentRoleKind::channel;
+                    attribute :>> systemType = SystemTypeKind::software;
+                    attribute :>> responsibility = "Reset to the safe state when the control loop misses its deadline.";
+                    attribute :>> channelRole = ChannelRoleKind::monitor;
+                    attribute :>> diversityBasis = "independent time base from the control partition";
+                }
+                part lcPressureIntegrityChannel : LogicalComponent {
+                    attribute :>> id = "NDS-LC-007"; attribute :>> name = "PressureIntegrityChannel";
+                    attribute :>> componentRole = ComponentRoleKind::channel;
+                    attribute :>> systemType = SystemTypeKind::software;
+                    attribute :>> responsibility = "Cross-check pressure against the commanded rate and stop on divergence.";
+                    attribute :>> channelRole = ChannelRoleKind::monitor;
+                    attribute :>> diversityBasis = "different measurement principle from the primary occlusion channel";
+                }
+            }
+            part lcDoseController : LogicalComponent {
+                attribute :>> id = "NDS-LC-004"; attribute :>> name = "DoseController";
+                attribute :>> componentRole = ComponentRoleKind::controlElement;
+                attribute :>> systemType = SystemTypeKind::software;
+                attribute :>> responsibility = "Turn a prescription into rate commands.";
+                attribute :>> controlLaw = "closed loop on delivered volume, saturated at the prescribed limit";
+                attribute :>> controlledVariable = "infusion rate";
+            }
+            part lcTherapyStateStore : LogicalComponent {
+                attribute :>> id = "NDS-LC-005"; attribute :>> name = "TherapyStateStore";
+                attribute :>> componentRole = ComponentRoleKind::dataStore;
+                attribute :>> systemType = SystemTypeKind::software;
+                attribute :>> responsibility = "Hold the active therapy record across power cycles.";
+                attribute :>> persistenceRequirement = "survives power loss with the last completed transaction intact";
+                attribute :>> integrityRequirement = "CRC per record, rejected on mismatch";
+            }
+        }
+        part subUserInterface : Subsystem {
+            attribute :>> id = "NDS-SUB-003"; attribute :>> name = "UserInterfaceSubsystem";
+            attribute :>> componentRole = ComponentRoleKind::userInterface;
+            attribute :>> systemType = SystemTypeKind::software;
+            attribute :>> responsibility = "Present therapy state to the clinician and accept their input.";
+
+            part lcDisplayManager : LogicalComponent {
+                attribute :>> id = "NDS-LC-008"; attribute :>> name = "DisplayManager";
+                attribute :>> componentRole = ComponentRoleKind::userInterface;
+                attribute :>> systemType = SystemTypeKind::software;
+                attribute :>> responsibility = "Render therapy state on the main screen.";
+                attribute :>> interactionSummary = "read-only status surface, refreshed once per second";
+            }
+            part lcAlarmAnnunciator : LogicalComponent {
+                attribute :>> id = "NDS-LC-009"; attribute :>> name = "AlarmAnnunciator";
+                attribute :>> componentRole = ComponentRoleKind::userInterface;
+                attribute :>> systemType = SystemTypeKind::software;
+                attribute :>> responsibility = "Raise audible and visible alarms by priority.";
+                attribute :>> interactionSummary = "IEC 60601-1-8 alarm signals";
+            }
+            part lcKeypadHandler : LogicalComponent {
+                attribute :>> id = "NDS-LC-010"; attribute :>> name = "KeypadHandler";
+                attribute :>> componentRole = ComponentRoleKind::userInterface;
+                attribute :>> systemType = SystemTypeKind::software;
+                attribute :>> responsibility = "Debounce and interpret key presses.";
+                attribute :>> interactionSummary = "physical keypad, confirm-before-apply for every rate change";
+            }
+        }
+        part subPower : Subsystem {
+            attribute :>> id = "NDS-SUB-004"; attribute :>> name = "PowerSubsystem";
+            attribute :>> componentRole = ComponentRoleKind::generic;
+            attribute :>> systemType = SystemTypeKind::hardware;
+            attribute :>> responsibility = "Supply and monitor power across mains and battery operation.";
+
+            part lcBatteryManager : LogicalComponent {
+                attribute :>> id = "NDS-LC-011"; attribute :>> name = "BatteryManager";
+                attribute :>> componentRole = ComponentRoleKind::generic;
+                attribute :>> systemType = SystemTypeKind::hardware;
+                attribute :>> responsibility = "Charge, gauge and protect the battery.";
+            }
+            part lcPowerRailMonitor : LogicalComponent {
+                attribute :>> id = "NDS-LC-012"; attribute :>> name = "PowerRailMonitor";
+                attribute :>> componentRole = ComponentRoleKind::channel;
+                attribute :>> systemType = SystemTypeKind::hardware;
+                attribute :>> responsibility = "Detect rail brownout and request a source switch.";
+                attribute :>> channelRole = ChannelRoleKind::monitor;
+            }
+        }
+
+        // ── Component-to-component dependency ─────────────────────
+        // What the DSM plots when both axes are architecture: who needs whom.
+        flow from subFluidPath.lcOcclusionChannel to subControl.lcDoseController;
+        flow from subControl.lcDoseController to subFluidPath.lcPumpMechanism;
+        flow from subFluidPath.lcPumpMechanism to subControl.lcTherapyStateStore;
+        flow from subControl.lcTherapyStateStore to subUserInterface.lcDisplayManager;
+        flow from subControl.subSafetyMonitor.lcWatchdogChannel to subControl.lcDoseController;
+        flow from subControl.subSafetyMonitor.lcPressureIntegrityChannel to subUserInterface.lcAlarmAnnunciator;
+        flow from subUserInterface.lcKeypadHandler to subControl.lcDoseController;
+        flow from subFluidPath.lcReservoirInterface to subFluidPath.lcPumpMechanism;
+        flow from subPower.lcBatteryManager to subPower.lcPowerRailMonitor;
+        flow from subPower.lcPowerRailMonitor to subUserInterface.lcAlarmAnnunciator;
+    }
+}