@memoarchitect/ontology 0.6.5 → 0.8.22

package/examples/temperature-alarm/model/catalog/temperature_alarm.sysml

@@ -8,11 +8,13 @@ package memo_examples_temperature_alarm {
     private import ScalarValues::*;
 
     private import memo_core_enumerations::*;
+    private import memo_core_common::*;
     private import memo_core_dimensions::*;
     private import memo_architecture_operational_context_actors::*;
     private import memo_assurance_requirements_needs::*;
     private import memo_architecture_operational_use_cases::*;
     private import memo_architecture_operational_activities::*;
+    private import memo_architecture_operational_workflows::*;
     private import memo_architecture_operational_scenarios::*;
     private import memo_architecture_functional_functions::*;
     private import memo_architecture_logical_structure::*;
@@ -21,6 +23,7 @@ package memo_examples_temperature_alarm {
     private import memo_assurance_human_factors::*;
     private import memo_architecture_implementation_ui::*;
     private import memo_core_relationships::*;
+    private import memo_assurance_safety_risk_analysis::*;
 
     // ── Operational intent ──────────────────────────────────────
     part icuNurse : User {
@@ -32,23 +35,24 @@ package memo_examples_temperature_alarm {
         attribute :>> id = "TA-UC-001";
         attribute :>> name = "MonitorPatientTemperature";
         attribute :>> goalStatement = "Continuously monitor core temperature and be alerted when it leaves the safe range.";
+        subject supportingSystem;
+        actor icuNurseInitiator = icuNurse;
     }
     action actAcknowledgeAlarm : OperationalActivity {
         attribute :>> id = "TA-ACT-001"; attribute :>> name = "ReviewAndAcknowledgeAlarm";
         attribute :>> criticality = CriticalityKind::high;
+
+        action taskAckAlarm : UserTask {
+            attribute :>> criticality = CriticalityKind::high;
+            attribute :>> id = "TA-TASK-001"; attribute :>> name = "AcknowledgeTemperatureAlarm";
+            attribute :>> taskGoal = "recognize, assess, and acknowledge the alarm";
+            attribute :>> potentialHarm = "delayed intervention for hypo-/hyperthermia";
+            attribute :>> severityIfFailed = SeverityKind::serious;
+        }
     }
-    action taskAckAlarm : UserTask {
-        attribute :>> criticality = CriticalityKind::high;
-        attribute :>> id = "TA-TASK-001"; attribute :>> name = "AcknowledgeTemperatureAlarm";
-        attribute :>> taskGoal = "recognize, assess, and acknowledge the alarm";
-        attribute :>> potentialHarm = "delayed intervention for hypo-/hyperthermia";
-        attribute :>> severityIfFailed = SeverityKind::serious;
-    }
-    connection : Initiates connect initiatingUser ::> icuNurse to initiatedUseCase ::> ucMonitorTemp;
-    connection : Composes connect parent ::> actAcknowledgeAlarm to child ::> taskAckAlarm;
 
     // ── Functional and logical slices ───────────────────────────
-    part fnDetectDeviation : SystemFunction {
+    action fnDetectDeviation : SystemFunction {
         attribute :>> id = "TA-FN-001"; attribute :>> name = "DetectTemperatureDeviation";
         attribute :>> criticality = CriticalityKind::high;
         // This function is owned by the functional architecture layer (its
@@ -66,8 +70,7 @@ package memo_examples_temperature_alarm {
     connection : IndependentOf connect channel ::> chMonitor to otherChannel ::> chPrimary {
         attribute :>> independenceBasis = "separate sensing element and power rail";
     }
-    connection : AllocatedTo connect function ::> fnDetectDeviation to allocatedElement ::> chMonitor;
-
+    allocate fnDetectDeviation to chMonitor;
     // ── UI: alarm element and acknowledgement action ────────────
     part uiBedside : UserInterface {
         attribute :>> id = "TA-UI-001"; attribute :>> name = "BedsideDisplay";
@@ -83,10 +86,10 @@ package memo_examples_temperature_alarm {
         attribute :>> id = "TA-UIA-001"; attribute :>> name = "AcknowledgeAlarm";
         attribute :>> intent = InteractionIntentKind::acknowledgement;
         attribute :>> confirmationRequired = true;
+        perform fnDetectDeviation;
     }
     connection : ElementTriggersAction connect element ::> elAlarmBanner to triggeredAction ::> uiaAcknowledge;
-    connection : ActionInvokesFunction connect uiAction ::> uiaAcknowledge to systemFunction ::> fnDetectDeviation;
-    connection : Supports { attribute :>> supportKind = SupportKind::task; connect supporter ::> uiBedside to supported ::> taskAckAlarm; }
+    connection : Supports { attribute :>> supportKind = SupportKind::task; connect supporter ::> uiBedside to supported ::> actAcknowledgeAlarm.taskAckAlarm; }
 
     // ── Risk chain with use error ───────────────────────────────
     part ueSilenceAndForget : UseError {
@@ -100,19 +103,20 @@ package memo_examples_temperature_alarm {
         attribute :>> severity = SeverityKind::serious;
         attribute :>> foreseeable = true;
     }
-    item rcReAnnunciate : RiskControlMeasure {
+    part rcReAnnunciate : RiskControlMeasure {
         attribute :>> id = "TA-RC-001"; attribute :>> name = "AutoReAnnunciationAfterSilence";
         attribute :>> controlKind = RiskControlKind::alarm;
         attribute :>> implementationKind = RiskControlImplementationKind::softwareDesign;
     }
-    connection : CommitsUseError connect task ::> taskAckAlarm to useError ::> ueSilenceAndForget;
+    connection : CommitsUseError connect task ::> actAcknowledgeAlarm.taskAckAlarm to useError ::> ueSilenceAndForget;
     connection : Causes { attribute :>> causeKind = CauseKind::useErrorLeadsToHazard; connect cause ::> ueSilenceAndForget to effect ::> hzUndetectedDeviation; }
     connection : Mitigates { attribute :>> mitigationKind = MitigationKind::hazard; connect control ::> rcReAnnunciate to mitigatedElement ::> hzUndetectedDeviation; }
     connection : ControlImplementedBy connect riskControl ::> rcReAnnunciate to implementingElement ::> elAlarmBanner;
 
     // ── Verification, validation, evidence ──────────────────────
-    part vsAlarmLatency : VerificationScenario {
+    action vsAlarmLatency : MemoScenario {
         attribute :>> id = "TA-VS-001"; attribute :>> name = "AlarmLatencyScenario";
+        attribute :>> scenarioKind = ScenarioKind::memoVerification;
         attribute :>> variantKind = ScenarioVariantKind::nominal;
         attribute :>> operationalCondition = OperationalConditionKind::normal;
         attribute :>> scenarioPurpose = ScenarioPurposeKind::memoVerification;
@@ -122,19 +126,23 @@ package memo_examples_temperature_alarm {
         attribute :>> id = "TA-VC-001"; attribute :>> name = "VerifyAlarmLatency";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "annunciation within 2 s of sustained deviation";
+
+        subject verified : Base::Anything[*] = (fnDetectDeviation);
     }
-    part uvAckTask : UsabilityValidation {
+    part uvAckTask : MemoEvidence {
+        attribute :>> evidenceKind = EvidenceKind::usabilityValidation;
         attribute :>> id = "TA-UV-001"; attribute :>> name = "SummativeAlarmAcknowledgement";
         attribute :>> participantProfile = "15 ICU nurses, representative shift conditions";
         attribute :>> participantCount = 15;
         attribute :>> acceptanceCriteria = "no critical-task failures; all alarms assessed before silencing";
     }
-    part evLatencyReport : Evidence {
+    part evLatencyReport : MemoEvidence {
+        attribute :>> evidenceKind = EvidenceKind::evidence;
         attribute :>> id = "TA-EV-001"; attribute :>> name = "AlarmLatencyTestReport";
         attribute :>> evidenceType = "test report";
     }
     connection : ExecutesScenario connect verificationCase ::> vcAlarmLatency to scenario ::> vsAlarmLatency;
-    connection : VerifiedBy connect verificationCase ::> vcAlarmLatency to verificationTarget ::> fnDetectDeviation;
-    connection : Validates connect validationCase ::> uvAckTask to validationTarget ::> taskAckAlarm;
+
+    connection : Validates connect validationCase ::> uvAckTask to validationTarget ::> actAcknowledgeAlarm.taskAckAlarm;
     connection : ProducesEvidence connect producer ::> vcAlarmLatency to producedEvidence ::> evLatencyReport;
 }

package/examples/temperature-alarm/model/catalog/viewpoints/unassigned/viewpoint.sysml

@@ -0,0 +1,9 @@
+// unassigned viewpoint.
+//
+// This project does not define its own viewpoint here; it binds the reusable
+// MEMO viewpoint that frames these concerns. The views it governs sit beneath
+// `views/`.
+package memo_examples_temperature_alarm_viewpoints_unassigned {
+    // The reusable package declaring unassigned could not be resolved during
+    // conversion. Import it here so the views beneath this viewpoint resolve.
+}

package/examples/temperature-alarm/model/{viewpoints → catalog/viewpoints/unassigned/views}/temperature_alarm_overview.sysml

@@ -1,4 +1,4 @@
-package memo_examples_temperature_alarm_viewpoints {
+package memo_examples_temperature_alarm_viewpoints_unassigned_views_temperature_alarm_overview {
     private import memo_examples_temperature_alarm::*;
     private import memo_viewpoints_definitions::*;
     private import memo_core_enumerations::*;

package/examples/ui-screen-regions/README.md

@@ -0,0 +1,117 @@
+# UI screen regions
+
+A focused MEMO example for marking up a screenshot so that every functional
+area of the interface is traceable to a function, a specification, and a risk
+control — using the part tree MEMO already has, not a parallel one.
+
+- `model/ui_screen_regions.sysml` is the public parent package.
+- `model/catalog/` holds the canonical model elements.
+- `model/viewpoints/` holds the geometry view and a trace graph of that catalog.
+
+## What it demonstrates
+
+One infusion-pump screen, modelled as an **ordinary part tree**. A screen is a
+`UIElement` that contains `UIElement`s; each carries `bounds` (x, y, width,
+height). There is no separate "region" type: one tree carries both the geometry
+and the design record.
+
+Because the elements carrying geometry are the same elements carrying the
+design record, every trace MEMO already supported applies unchanged:
+
+```
+elRateValue                     a part, with bounds, inside elRatePanel
+  -ElementTriggersAction->  uiaEditRate
+     -ActionInvokesFunction->  fnSetInfusionRate     FUNCTION
+  <-SatisfiedBy-  reqRateEntry                       SPEC
+  <-ErrorAtElement-  ueMisreadRate                   RISK (use error)
+  <-ControlImplementedBy-  rcRateConfirm             RISK (control)
+```
+
+Layout adds four numbers and two invariants over them — nothing else.
+
+## Containment vs navigation
+
+These are different, and conflating them is the trap this example is built to
+show:
+
+| Element | Relation | Meaning |
+| --- | --- | --- |
+| `elRateValue` inside `elRatePanel` | `Composes` | laid out **within** the parent's box |
+| `elSettingsRow` → `elSettingsScreen` | `NavigatesTo` | activation **replaces** the view |
+
+`elSettingsScreen` is a sibling root with its own capture and its own
+coordinate frame. It is not a child of anything, so no geometric rule relates
+it to the main screen.
+
+## The dropdown, and why `disclosureKind` exists
+
+`elDrugMenu` is why geometry alone is not enough. Open, it extends past the
+bottom of the rate panel (`y + height` = 1.35 > 1.0) **and** overlaps
+`elRateValue` outright. For an `inline` element both would be layout defects;
+for a dropdown both are correct. The four numbers cannot tell those cases apart,
+so `disclosureKind = overlay` states the intent — and a renderer reads it to know
+not to clip.
+
+Layout correctness is **not** asserted as a consistency rule. Geometric
+invariants (child within parent, inline siblings disjoint) cannot be written as
+KerML constraint bodies — the evaluator has no Real literal, and it binds one
+implicit subject per quantifier, so pairwise sibling comparison is impossible by
+construction. Rather than declare rules no engine can evaluate, layout is checked
+where it is drawn.
+
+`elStatusBar` is the negative case that IS checked: it is chrome, and it passes
+**CR-MED-110** only because it is declared `formKind = decoration`. An element
+left unclassified fails. Declaring chrome as chrome is a modelling act, not an
+omission.
+
+## Bounds
+
+`RegionBounds` are normalized to the **parent element**, each value in 0..1.
+`elRateValue` occupies the lower 65 % of the rate panel, not 65 % of the screen,
+so a renderer accumulates transforms down the `Composes` tree. Two things
+follow: an element survives re-capture at a different resolution, and a child's
+box is stated against its parent, which is exactly what the containment tree
+already asserts. Absolute pixels stay recoverable from the capture's
+`pixelWidth` / `pixelHeight`.
+
+## Commentary
+
+`ModelComment` elements carry review conversation — author, timestamp,
+disposition — attached with `CommentsOn` and threaded with `Composes`.
+They are kept separate from `description` on purpose: `description` is what an
+element *is*, a comment is what someone *said about it*, and only the former
+belongs in a generated DHF section.
+
+## Validation
+
+The example is written to pass the four UI layout rules:
+
+| Rule | Severity | What it enforces |
+| --- | --- | --- |
+| CR-MED-110 | error | Every non-`decoration` element has a design record (requirement or action) |
+| CR-MED-111 | warning | Interactive elements trigger an action that invokes a function |
+| CR-MED-112 | warning | Automatically detected bounds are confirmed by a reviewer |
+| CR-MED-113 | error | Screen captures identify their build and hash their bytes |
+
+See the caveat in `memo-ui-region-spec.md` §5 about rule evaluation generally —
+no ontology rule body currently evaluates.
+
+## Where the images live
+
+Screenshots live in the project repo beside the model, in a folder named for the
+layout view that renders them:
+
+```
+model/
+  assets/
+    mainScreenLayout/main-screen-2.4.1.png
+    settingsScreenLayout/settings-screen-2.4.1.png
+```
+
+`imageUri` is relative to the model root. One layout view per captured screen,
+and the view's name is its folder — so it is always obvious which images belong
+to which layout.
+
+The image files themselves are **not committed**; this example ships as model
+content only, and the `imageHash` values are illustrative. Drop your own
+screenshots at those paths to see the geometry view render.

package/examples/ui-screen-regions/model/catalog/architecture/functional/functions.sysml

@@ -0,0 +1,84 @@
+// Functional architecture: the display-management function tree.
+package memo_examples_ui_screen_regions_architecture_functional_functions {
+    private import memo_examples_ui_screen_regions_assurance_requirements::*;
+    private import ScalarValues::*;
+
+    private import memo_core_relationships::*;
+    private import memo_core_annotations::*;
+    private import memo_architecture_implementation_ui::*;
+    private import memo_assurance_requirements::*;
+    private import memo_assurance_requirements_needs::*;
+    private import memo_assurance_human_factors::*;
+    private import memo_assurance_safety_risk::*;
+    private import memo_assurance_verification_validation::*;
+    private import memo_artifacts_core::*;
+
+    private import memo_core_enumerations::*;
+    private import memo_architecture_functional_functions::*;
+
+    action fnManageInfusionDisplay : SystemFunction {
+        attribute :>> id = "UIR-FN-002"; attribute :>> name = "ManageInfusionDisplay";
+        attribute :>> shortDescription = "Coordinate the running-infusion display and its interactive regions.";
+        attribute :>> description = "Maintains the clinician-facing infusion state and delegates rate programming, drug selection, and status presentation to focused child functions.";
+        attribute :>> criticality = CriticalityKind::high;
+
+        action fnSetInfusionRate : SystemFunction {
+            attribute :>> id = "UIR-FN-001"; attribute :>> name = "SetInfusionRate";
+            attribute :>> shortDescription = "Apply a clinician-entered rate to the pump controller.";
+            attribute :>> description = "Validates a requested infusion rate against the drug library limits and the pump's mechanical range, then commits it to the controller as the active setpoint.";
+            attribute :>> criticality = CriticalityKind::high;
+        }
+
+        action fnValidateDrugSelection : SystemFunction {
+            attribute :>> id = "UIR-FN-003"; attribute :>> name = "ValidateDrugSelection";
+            attribute :>> shortDescription = "Validate a selected drug and concentration against the active care-area library.";
+            attribute :>> description = "Accepts only a drug and concentration present in the active drug library, then supplies its dosing limits to rate validation.";
+            attribute :>> criticality = CriticalityKind::high;
+        }
+
+        action fnPresentDeliveryStatus : SystemFunction {
+            attribute :>> id = "UIR-FN-004"; attribute :>> name = "PresentDeliveryStatus";
+            attribute :>> shortDescription = "Present current rate and cumulative delivered volume.";
+            attribute :>> description = "Refreshes the rate and volume-delivered indicators from controller state at the specified display update interval.";
+            attribute :>> criticality = CriticalityKind::medium;
+        }
+
+        action fnPresentLocalTime : SystemFunction {
+            attribute :>> id = "UIR-FN-005"; attribute :>> name = "PresentLocalTime";
+            attribute :>> shortDescription = "Read the synchronized clock and present local time.";
+            attribute :>> description = "Formats the device clock as local 24-hour time and refreshes the status-bar value once per second.";
+            attribute :>> criticality = CriticalityKind::medium;
+        }
+
+        action fnPresentBatteryStatus : SystemFunction {
+            attribute :>> id = "UIR-FN-006"; attribute :>> name = "PresentBatteryStatus";
+            attribute :>> shortDescription = "Present battery state of charge and low-battery status.";
+            attribute :>> description = "Converts battery telemetry into percentage, icon state, and low-battery prominence for the running-infusion screen.";
+            attribute :>> criticality = CriticalityKind::medium;
+        }
+
+        satisfy reqRateEntry by fnSetInfusionRate;
+
+        satisfy reqRateLegibility by fnPresentDeliveryStatus;
+
+        satisfy reqVolumeDisplay by fnPresentDeliveryStatus;
+
+        satisfy reqDrugLibrarySelection by fnValidateDrugSelection;
+
+        satisfy reqDisplayFreshness by fnPresentDeliveryStatus;
+
+        satisfy reqActiveRateDisplay by fnPresentDeliveryStatus;
+
+        satisfy reqDrugIdentityDisplay by fnValidateDrugSelection;
+
+        satisfy reqTimeDisplay by fnPresentLocalTime;
+
+        satisfy reqTimeAccuracy by fnPresentLocalTime;
+
+        satisfy reqBatteryStatusDisplay by fnPresentBatteryStatus;
+
+        satisfy reqBatteryWarningPerformance by fnPresentBatteryStatus;
+
+        satisfy reqDrugSelectionPerformance by fnValidateDrugSelection;
+    }
+}

package/examples/ui-screen-regions/model/catalog/architecture/implementation/ui.sysml

@@ -0,0 +1,212 @@
+// UI implementation architecture: the screen tree, its actions, and the
+// panel they run on. One part tree carries geometry and design record — there
+// is no separate region type.
+package memo_examples_ui_screen_regions_architecture_implementation_ui {
+    private import memo_examples_ui_screen_regions_assurance_requirements::*;
+    private import ScalarValues::*;
+    private import memo_examples_ui_screen_regions_architecture_functional_functions::*;
+
+    private import memo_core_relationships::*;
+    private import memo_core_annotations::*;
+    private import memo_architecture_functional_functions::*;
+    private import memo_assurance_requirements::*;
+    private import memo_assurance_requirements_needs::*;
+    private import memo_assurance_human_factors::*;
+    private import memo_assurance_safety_risk::*;
+    private import memo_assurance_verification_validation::*;
+    private import memo_artifacts_core::*;
+
+    private import memo_core_enumerations::*;
+    private import memo_architecture_implementation_ui::*;
+
+    // Every UIElement carries safetyClass C. Per IEC 62304 §4.3 items inherit
+    // the software system's class; an item is classified lower only where
+    // segregation is documented, and nothing here is segregated — one UI
+    // process draws the lot, so the chrome inherits C like the rate field.
+    part uiPumpPanel : UserInterface {
+        attribute :>> id = "UIR-UI-001"; attribute :>> name = "PumpFrontPanel";
+        attribute :>> shortDescription = "Front-panel touchscreen.";
+        attribute :>> description = "The 7-inch capacitive touchscreen on the pump front panel, the sole interface for programming and monitoring an infusion at the bedside.";
+        attribute :>> modality = "visual + touch";
+        attribute :>> uiTechnology = "embedded Qt";
+    }
+
+    // ── The main screen, and the tree beneath it ────────────────
+    // A screen is a UIElement whose formKind is `screen`. Its bounds are the
+    // full frame; every descendant's bounds are relative to ITS parent.
+    part elMainScreen : UIElement {
+        attribute :>> id = "UIE-001"; attribute :>> name = "MainInfusionScreen";
+        attribute :>> shortDescription = "Primary running-infusion screen.";
+        attribute :>> description = "The screen shown while an infusion is running: current rate, volume delivered, and access to settings. The default view the clinician comes back to after any subordinate task.";
+        attribute :>> formKind = UIElementFormKind::screen;
+        attribute :>> safetyClass = SafetyClassKind::C;
+        attribute :>> navigationRole = "home";
+        attribute :>> disclosureKind = UIDisclosureKind::inline;
+        attribute :>> bounds {
+            attribute :>> x = 0.0; attribute :>> y = 0.0;
+            attribute :>> width = 1.0; attribute :>> height = 1.0;
+        }
+        attribute :>> boundaryColor = "#1B3A4B";
+        attribute :>> detectionMethod = BoundsDetectionKind::manual;
+
+        // ── A recursively inspectable dynamic region ─────────────
+        // The reusable region is the parent. Closed and expanded presentations
+        // are siblings beneath it, so a renderer (including a 3-D renderer)
+        // can reuse the region and select the state appropriate to its scene.
+        // The region has its own capture; geometry views stop at that
+        // boundary on the main screen and let the reviewer double-click to
+        // recurse into its children.
+        part elDrugSelectorRegion : UIElement {
+            attribute redefines name = "DrugSelectorRegion";
+            attribute redefines id = "UIE-005";
+            attribute redefines shortDescription = "Reusable region containing drug-selector states.";
+            attribute redefines description = "Parent geometry region for the drug selector. Its state presentations are sibling UI elements, permitting the same region definition to be reused in flat, spatial, or 3-D renderings.";
+            attribute redefines formKind = UIElementFormKind::panel;
+            attribute redefines safetyClass = SafetyClassKind::C;
+            attribute redefines labelText = "DRUG";
+            attribute redefines disclosureKind = UIDisclosureKind::inline;
+            attribute redefines boundaryColor = "#F59E0B";
+            attribute redefines detectionMethod = BoundsDetectionKind::manual;
+            attribute redefines confirmedBy = "j.okafor";
+            attribute redefines confirmedAt = "2026-07-15";
+            attribute redefines bounds {
+                attribute redefines x = 0.03;
+                attribute redefines y = 0.43;
+                attribute redefines width = 0.47;
+                attribute redefines height = 0.18;
+            }
+
+            part elDrugSelectorClosed : UIElement {
+                attribute :>> id = "UIE-010"; attribute :>> name = "ClosedDrugSelector";
+                attribute :>> shortDescription = "Closed drug selector shown on the main screen.";
+                attribute :>> description = "The compact, normal-state selector. It is a sibling of the expanded menu rather than a different identity for the parent region.";
+                attribute :>> formKind = UIElementFormKind::selector;
+                attribute :>> safetyClass = SafetyClassKind::C;
+                attribute :>> labelText = "Norepinephrine 8 mg / 250 mL";
+                attribute :>> disclosureKind = UIDisclosureKind::conditional;
+                attribute :>> visibilityCondition = "drug selector inactive";
+                attribute :>> bounds {
+                    attribute :>> x = 0.0; attribute :>> y = 0.0;
+                    attribute :>> width = 1.0; attribute :>> height = 0.25;
+                }
+                attribute :>> boundaryColor = "#F59E0B";
+                attribute :>> detectionMethod = BoundsDetectionKind::manual;
+            }
+
+            // Open, this sibling overlays the same parent region. `overlay`
+            // states that covering adjacent content is intended dropdown
+            // behaviour, not a defect.
+            part elDrugMenuExpanded : UIElement {
+                attribute redefines name = "ExpandedDrugMenu";
+                attribute redefines id = "UIE-011";
+                attribute redefines shortDescription = "Expanded drug library choices.";
+                attribute redefines description = "Expanded state listing Norepinephrine, Dopamine, and Heparin. It shares the DrugSelectorRegion parent with the closed state and can extend beyond that parent's normal inline allocation.";
+                attribute redefines formKind = UIElementFormKind::selector;
+                attribute redefines safetyClass = SafetyClassKind::C;
+                attribute redefines labelText = "Norepinephrine; Dopamine; Heparin";
+                attribute redefines disclosureKind = UIDisclosureKind::overlay;
+                attribute redefines visibilityCondition = "drug selector activated";
+                attribute redefines boundaryColor = "#d97706";
+                attribute redefines detectionMethod = BoundsDetectionKind::manual;
+                attribute redefines bounds {
+                    attribute redefines x = 0.0;
+                    attribute redefines y = 0.20;
+                    attribute redefines width = 1.0;
+                    attribute redefines height = 0.80;
+                }
+            }
+        }
+    }
+
+    // ── The settings screen: a sibling root, not a child ────────
+    part elSettingsScreen : UIElement {
+        attribute :>> id = "UIE-008"; attribute :>> name = "InfusionSettingsScreen";
+        attribute :>> shortDescription = "Settings screen reached from the main screen.";
+        attribute :>> description = "Secondary screen for changing infusion parameters mid-run. It is a root in its own right with its own capture and its own coordinate frame — it is not laid out inside the main screen, so no geometric rule relates the two.";
+        attribute :>> formKind = UIElementFormKind::screen;
+        attribute :>> safetyClass = SafetyClassKind::C;
+        attribute :>> navigationRole = "subordinate";
+        attribute :>> disclosureKind = UIDisclosureKind::inline;
+        attribute :>> bounds {
+            attribute :>> x = 0.0; attribute :>> y = 0.0;
+            attribute :>> width = 1.0; attribute :>> height = 1.0;
+        }
+        attribute :>> boundaryColor = "#1B3A4B";
+        attribute :>> detectionMethod = BoundsDetectionKind::manual;
+
+        // A modal child of the settings screen. It is visible only while a
+        // pending rate change awaits explicit confirmation and intentionally
+        // covers the settings form beneath it.
+        part elRateConfirmDialog : UIElement {
+            attribute :>> id = "UIE-009"; attribute :>> name = "RateChangeConfirmationDialog";
+            attribute :>> shortDescription = "Modal confirmation popup for a new infusion rate.";
+            attribute :>> description = "Restates the pending infusion rate above the settings screen and requires an explicit confirm or cancel disposition before the value can reach the controller.";
+            attribute :>> formKind = UIElementFormKind::dialog;
+            attribute :>> safetyClass = SafetyClassKind::C;
+            attribute :>> labelText = "Confirm rate change?";
+            attribute :>> disclosureKind = UIDisclosureKind::overlay;
+            attribute :>> visibilityCondition = "pending rate change";
+            attribute :>> bounds {
+                attribute :>> x = 0.28; attribute :>> y = 0.22;
+                attribute :>> width = 0.44; attribute :>> height = 0.56;
+            }
+            attribute :>> boundaryColor = "#D59000";
+            attribute :>> detectionMethod = BoundsDetectionKind::manual;
+            attribute :>> confirmedBy = "j.okafor";
+            attribute :>> confirmedAt = "2026-07-16";
+        }
+    }
+
+    // ── UI actions and the functions they invoke ────────────────
+    action uiaEditRate : UIAction {
+        attribute :>> id = "UIR-UIA-001"; attribute :>> name = "EditInfusionRate";
+        attribute :>> intent = InteractionIntentKind::userInput;
+        attribute :>> confirmationRequired = true;
+        attribute :>> feedbackProvided = "new rate echoed on a confirmation dialog before it is applied";
+        perform fnManageInfusionDisplay.fnSetInfusionRate;
+    }
+
+    action uiaOpenSettings : UIAction {
+        attribute :>> id = "UIR-UIA-002"; attribute :>> name = "OpenInfusionSettings";
+        attribute :>> intent = InteractionIntentKind::navigation;
+        attribute :>> confirmationRequired = false;
+        perform fnManageInfusionDisplay;
+    }
+
+    action uiaSelectDrug : UIAction {
+        attribute :>> id = "UIR-UIA-003"; attribute :>> name = "SelectDrug";
+        attribute :>> intent = InteractionIntentKind::userInput;
+        attribute :>> confirmationRequired = true;
+        perform fnManageInfusionDisplay.fnValidateDrugSelection;
+    }
+
+    part uiElement12 : UIElement {
+        attribute redefines name = "Region UIE-012";
+        attribute redefines id = "UIE-012";
+        attribute redefines formKind = UIElementFormKind::panel;
+        attribute redefines disclosureKind = UIDisclosureKind::inline;
+        attribute redefines detectionMethod = BoundsDetectionKind::manual;
+        attribute redefines boundaryColor = "#14B8A6";
+        attribute redefines boundaryOpacity = 0.12;
+        attribute redefines boundaryWidth = 5;
+        attribute redefines bounds {
+            attribute redefines x = 0.52234;
+            attribute redefines y = 0.11311;
+            attribute redefines width = 0.45242;
+            attribute redefines height = 0.53172;
+        }
+    }
+
+
+    satisfy reqRateLegibility by elMainScreen;
+
+    satisfy reqRateEntry by elSettingsScreen;
+
+    satisfy reqRateEntry by elSettingsScreen.elRateConfirmDialog;
+
+    satisfy reqDrugLibrarySelection by elMainScreen.elDrugSelectorRegion;
+
+    satisfy reqDrugIdentityDisplay by elMainScreen.elDrugSelectorRegion.elDrugSelectorClosed;
+
+    satisfy reqDrugSelectionPerformance by elMainScreen.elDrugSelectorRegion;
+}

package/examples/ui-screen-regions/model/catalog/artifacts/assets/catalog.sysml

@@ -0,0 +1,61 @@
+// Controlled asset identities.
+//
+// SysML owns each capture's identity, URI, hash, dimensions, and capture
+// context; the PNG under `screen-captures/` owns its payload.
+package memo_examples_ui_screen_regions_artifacts_assets {
+    private import ScalarValues::*;
+
+    private import memo_core_relationships::*;
+    private import memo_core_annotations::*;
+    private import memo_architecture_functional_functions::*;
+    private import memo_assurance_requirements::*;
+    private import memo_assurance_requirements_needs::*;
+    private import memo_assurance_human_factors::*;
+    private import memo_assurance_safety_risk::*;
+    private import memo_assurance_verification_validation::*;
+
+    private import memo_core_enumerations::*;
+    private import memo_artifacts_core::*;
+    private import memo_architecture_implementation_ui::*;
+
+    // ── The captures ────────────────────────────────────────────
+    part capMain : ScreenCapture {
+        attribute :>> id = "UIR-CAP-001"; attribute :>> name = "MainScreenCapture_v2.4.1";
+        attribute :>> shortDescription = "Main infusion screen, build 2.4.1.";
+        attribute :>> description = "Screenshot of the running-infusion screen taken from release candidate 2.4.1 on the 7-inch panel at 1024×600, English (US), daylight theme, clinician role.";
+        attribute :>> imageUri = "model/catalog/artifacts/assets/screen-captures/mainScreenLayout/main-screen-2.4.1.png";
+        attribute :>> imageHash = "sha256:086d8a3c2956ad8ed81f1e565a97308b55ba8a384c22c1b2138626ad8928a88a";
+        attribute :>> pixelWidth = 1024;
+        attribute :>> pixelHeight = 600;
+        attribute :>> captureDate = "2026-07-14";
+        attribute :>> capturedBuild = "pump-fw-2.4.1-rc3";
+        attribute :>> captureContext = "7in panel, 1024x600, en-US, daylight theme, clinician role";
+    }
+
+    part capDrugSelector : ScreenCapture {
+        attribute :>> id = "UIC-003"; attribute :>> name = "ExpandedDrugSelectorCapture_v2.4.1";
+        attribute :>> shortDescription = "Expanded drug-selector region crop.";
+        attribute :>> description = "Focused capture of the reusable DrugSelectorRegion in its expanded state, used when a reviewer drills into the region from the main layout.";
+        attribute :>> imageUri = "model/catalog/artifacts/assets/screen-captures/drugSelectorRegion/drug-selector-expanded-2.4.1.png";
+        attribute :>> imageHash = "sha256:2265b48864be8561a86099a99cf8aea2f4fcf06c19ccacbcc55784fbb1c37975";
+        attribute :>> pixelWidth = 798;
+        attribute :>> pixelHeight = 390;
+        attribute :>> captureDate = "2026-07-31";
+        attribute :>> capturedBuild = "pump-fw-2.4.1-rc3";
+        attribute :>> captureContext = "drug-selector region crop, expanded state, en-US";
+    }
+
+    part capSettings : ScreenCapture {
+        attribute :>> id = "UIR-CAP-002"; attribute :>> name = "SettingsScreenCapture_v2.4.1";
+        attribute :>> shortDescription = "Infusion settings screen, build 2.4.1.";
+        attribute :>> description = "Screenshot of the settings screen reached from the main screen's settings row, same build and capture conditions as the main screen capture.";
+        attribute :>> imageUri = "model/catalog/artifacts/assets/screen-captures/settingsScreenLayout/settings-screen-2.4.1.png";
+        attribute :>> imageHash = "sha256:2ad7f11427fdb2eb179cf94d96a1679a2ece31505d247ee0b659bec06a669dbf";
+        attribute :>> pixelWidth = 1024;
+        attribute :>> pixelHeight = 600;
+        attribute :>> captureDate = "2026-07-14";
+        attribute :>> capturedBuild = "pump-fw-2.4.1-rc3";
+        attribute :>> captureContext = "7in panel, 1024x600, en-US, daylight theme, clinician role";
+    }
+
+}