@memoarchitect/ontology 0.6.5 → 0.8.22

package/examples/gpca-pump/model/catalog/gpca_trace.sysml

@@ -1,5 +1,6 @@
-package memo_examples_gpca_pump_model_catalog_gpca_trace {
+package memo_examples_gpca_pump_gpca_trace {
     private import ScalarValues::*;
+    private import ModelingMetadata::*;
 
     private import memo_core_relationships::*;
     private import memo_architecture_operational_context_actors::*;
@@ -7,28 +8,36 @@ package memo_examples_gpca_pump_model_catalog_gpca_trace {
     private import memo_architecture_operational_activities::*;
     private import memo_architecture_operational_structure::*;
     private import memo_architecture_functional_functions::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_context::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_operational::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_system::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_requirements::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_architecture::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_physical::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_behavior_subsystems::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_behavior_modes::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_interfaces::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_risk::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_analysis::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_verification::*;
-    private import memo_examples_gpca_pump_model_views_document_architecture_description_view::*;
-    private import memo_examples_gpca_pump_model_views_document_cyber_assessment_view::*;
-    private import memo_examples_gpca_pump_model_views_document_dhf_index_view::*;
-    private import memo_examples_gpca_pump_model_views_document_hazard_analysis_view::*;
-    private import memo_examples_gpca_pump_model_views_document_rmf_view::*;
-    private import memo_examples_gpca_pump_model_views_document_sdd_view::*;
-    private import memo_examples_gpca_pump_model_views_document_threat_model_view::*;
-    private import memo_examples_gpca_pump_model_views_document_usability_view::*;
-    private import memo_examples_gpca_pump_model_views_document_vv_view::*;
-    private import memo_examples_gpca_pump_model_catalog_gpca_formal_behavior::*;
+    private import memo_examples_gpca_pump_gpca_context::*;
+    private import memo_examples_gpca_pump_gpca_operational::*;
+    private import memo_examples_gpca_pump_gpca_system::*;
+    private import memo_examples_gpca_pump_gpca_requirements::*;
+    private import memo_examples_gpca_pump_gpca_architecture::*;
+    private import memo_examples_gpca_pump_gpca_physical::*;
+    private import memo_examples_gpca_pump_gpca_behavior_subsystems::*;
+    private import memo_examples_gpca_pump_gpca_behavior_modes::*;
+    private import memo_examples_gpca_pump_gpca_interfaces::*;
+    private import memo_examples_gpca_pump_gpca_risk::*;
+    private import memo_examples_gpca_pump_gpca_analysis::*;
+    private import memo_examples_gpca_pump_gpca_verification::*;
+    private import memo_examples_gpca_pump_viewpoints_logical_views_document_architecture_description_view::*;
+    private import memo_examples_gpca_pump_viewpoints_cybersecurity_views_document_cyber_assessment_view::*;
+    private import memo_examples_gpca_pump_viewpoints_requirements_views_document_dhf_index_view::*;
+    private import memo_examples_gpca_pump_viewpoints_risk_views_document_hazard_analysis_view::*;
+    private import memo_examples_gpca_pump_viewpoints_risk_views_document_rmf_view::*;
+    private import memo_examples_gpca_pump_viewpoints_software_views_document_sdd_view::*;
+    private import memo_examples_gpca_pump_viewpoints_cybersecurity_views_document_threat_model_view::*;
+    private import memo_examples_gpca_pump_viewpoints_usability_views_document_usability_view::*;
+    private import memo_examples_gpca_pump_viewpoints_verification_views_document_vv_view::*;
+    private import memo_examples_gpca_pump_gpca_formal_behavior::*;
+    private import memo_architecture_operational_context_stakeholders::*;
+    private import memo_architecture_operational_use_cases::*;
+    private import memo_architecture_operational_workflows::*;
+    private import memo_architecture_realization_deployment::*;
+    private import memo_assurance_human_factors::*;
+    private import memo_assurance_safety_risk::*;
+    private import memo_assurance_safety_risk_analysis::*;
+    private import memo_viewpoints_definitions::*;
 
     // ── System context interactions (context view) ──────────────
     connection : InteractsWith connect contextParticipant ::> actorPatient to target ::> entityGpcaPump;
@@ -40,40 +49,29 @@ package memo_examples_gpca_pump_model_catalog_gpca_trace {
 
     // ── Fig 2.1 context flows (CriSys §2.1) ─────────────────────
     // Data flows
-    connection : ExchangesWith connect source ::> entityPrescription to target ::> actorNurse;
-    connection : ExchangesWith connect source ::> actorNurse to target ::> entityGpcaPump;
-    connection : ExchangesWith connect source ::> entityGpcaPump to target ::> actorNurse;
-    connection : ExchangesWith connect source ::> actorPatient to target ::> entityGpcaPump;
-    connection : ExchangesWith connect source ::> entityPharmacyDb to target ::> entityGpcaPump;
+    flow from entityPrescription to actorNurse;
+    flow from actorNurse to entityGpcaPump;
+    flow from entityGpcaPump to actorNurse;
+    flow from actorPatient to entityGpcaPump;
+    flow from entityPharmacyDb to entityGpcaPump;
     // Physical connections (drug path)
-    connection : ConnectsPhysically connect source ::> entityDrugReservoir to target ::> entityGpcaPump;
-    connection : ConnectsPhysically connect source ::> entityGpcaPump to target ::> entityNeedle;
-    connection : ConnectsPhysically connect source ::> entityNeedle to target ::> actorPatient;
-    connection : ConnectsPhysically connect source ::> entityPowerInfrastructure to target ::> entityGpcaPump;
+    connection connect source ::> entityDrugReservoir to target ::> entityGpcaPump;
+    connection connect source ::> entityGpcaPump to target ::> entityNeedle;
+    connection connect source ::> entityNeedle to target ::> actorPatient;
+    connection connect source ::> entityPowerInfrastructure to target ::> entityGpcaPump;
     // Intended use and use context anchoring (no floating context nodes)
     connection : Governs { attribute :>> governKind = GovernKind::'use'; connect governor ::> gpcaIntendedUse to governedElement ::> entityGpcaPump; }
     connection : AppliesInContext connect useContext ::> hospitalWardContext to subjectElement ::> entityGpcaPump;
     connection : AppliesInContext connect useContext ::> hospitalWardContext to subjectElement ::> entityHospital;
 
-    // ── Actor participation (use case view) ─────────────────────
-    connection : Initiates connect initiatingUser ::> actorNurse to initiatedUseCase ::> ucDeliverPcaTherapy;
-    connection : ParticipatesIn connect participatingActor ::> actorPatient to useCase ::> ucDeliverPcaTherapy;
-    connection : ParticipatesIn connect participatingActor ::> actorPrescriber to useCase ::> ucDeliverPcaTherapy;
-    connection : ParticipatesIn connect participatingActor ::> actorPharmacist to useCase ::> ucDeliverPcaTherapy;
-    connection : Performs connect performer ::> actorPrescriber to performed ::> oaPrescribe;
-    connection : Performs connect performer ::> actorPharmacist to performed ::> oaLoadReservoir;
-    connection : Performs connect performer ::> actorNurse to performed ::> oaProgram;
-    connection : Performs connect performer ::> actorNurse to performed ::> oaStartTherapy;
-    connection : Performs connect performer ::> actorNurse to performed ::> oaRespondAlarm;
-    connection : Performs connect performer ::> actorNurse to performed ::> oaReviewLog;
-    connection : Performs connect performer ::> actorPatient to performed ::> oaRequestBolus;
-    connection : Performs connect performer ::> actorTechnician to performed ::> oaMaintain;
+    // Actor participation (use case view): native `actor`, nested in
+    // ucDeliverPcaTherapy's own body in gpca_operational.sysml (R10-S6).
 
     // ── Operational thread (therapy lifecycle) ──────────────────
-    connection : Precedes connect predecessor ::> oaPrescribe to successor ::> oaLoadReservoir;
-    connection : Precedes connect predecessor ::> oaLoadReservoir to successor ::> oaProgram;
-    connection : Precedes connect predecessor ::> oaProgram to successor ::> oaStartTherapy;
-    connection : Precedes connect predecessor ::> oaStartTherapy to successor ::> oaRequestBolus;
+    first oaPrescribe then oaLoadReservoir;
+    first oaLoadReservoir then oaProgram;
+    first oaProgram then oaStartTherapy;
+    first oaStartTherapy then oaRequestBolus;
     connection : Supports { attribute :>> supportKind = SupportKind::capability; connect supporter ::> oaStartTherapy to supported ::> ocTitratedAnalgesia; }
     connection : Supports { attribute :>> supportKind = SupportKind::capability; connect supporter ::> oaRequestBolus to supported ::> ocTitratedAnalgesia; }
     connection : Supports { attribute :>> supportKind = SupportKind::capability; connect supporter ::> oaRespondAlarm to supported ::> ocFailSafeTherapy; }
@@ -82,28 +80,22 @@ package memo_examples_gpca_pump_model_catalog_gpca_trace {
     connection : DerivesFrom connect sourceDriver ::> oaRespondAlarm to targetRequirement ::> reqCs59;
 
     // ── Functional chains ───────────────────────────────────────
-    connection : InvolvesFunction connect functionalChain ::> fcPatientBolus to function ::> fnAcquireSensors;
-    connection : InvolvesFunction connect functionalChain ::> fcPatientBolus to function ::> fnEnforceLimits;
-    connection : InvolvesFunction connect functionalChain ::> fcPatientBolus to function ::> fnManageInfusion;
-    connection : InvolvesFunction connect functionalChain ::> fcPatientBolus to function ::> fnCommandPump;
-    connection : InvolvesFunction connect functionalChain ::> fcPatientBolus to function ::> fnLogEvents;
-    connection : InvolvesFunction connect functionalChain ::> fcAlarmStop to function ::> fnAcquireSensors;
-    connection : InvolvesFunction connect functionalChain ::> fcAlarmStop to function ::> fnMonitorAlarm;
-    connection : InvolvesFunction connect functionalChain ::> fcAlarmStop to function ::> fnManageInfusion;
-    connection : InvolvesFunction connect functionalChain ::> fcAlarmStop to function ::> fnAnnunciate;
-    connection : InvolvesFunction connect functionalChain ::> fcStartup to function ::> fnSelfTest;
-    connection : InvolvesFunction connect functionalChain ::> fcStartup to function ::> fnPresentStatus;
-    connection : Realizes connect realizing ::> fcPatientBolus to realized ::> ssBolusDuringBasal;
-    connection : Realizes connect realizing ::> fcAlarmStop to realized ::> ssAlarmPause;
-    connection : IncludesStep connect functionalChain ::> fcPatientBolus to step ::> fcsBolusSense;
-    connection : IncludesStep connect functionalChain ::> fcPatientBolus to step ::> fcsBolusValidate;
-    connection : IncludesStep connect functionalChain ::> fcPatientBolus to step ::> fcsBolusCommand;
-    connection : IncludesStep connect functionalChain ::> fcPatientBolus to step ::> fcsBolusActuate;
-    connection : IncludesStep connect functionalChain ::> fcPatientBolus to step ::> fcsBolusLog;
-    connection : IncludesStep connect functionalChain ::> fcAlarmStop to step ::> fcsAlarmSense;
-    connection : IncludesStep connect functionalChain ::> fcAlarmStop to step ::> fcsAlarmEvaluate;
-    connection : IncludesStep connect functionalChain ::> fcAlarmStop to step ::> fcsAlarmStopInfusion;
-    connection : IncludesStep connect functionalChain ::> fcAlarmStop to step ::> fcsAlarmAnnunciate;
+    // fcPatientBolus/fcAlarmStop already name every one of these functions
+    // via their step chain (perform fcsBolusSense; ... ref :>> function =
+    // fnAcquireSensors;) in gpca_system.sysml — InvolvesFunction was a
+    // flattened restatement of that two-hop path, not new information.
+    // fcStartup declares no steps, so its two functions are native `perform`
+    // statements directly on fcStartup in gpca_system.sysml instead.
+    #refinement dependency fcPatientBolus to ssBolusDuringBasal;
+    #refinement dependency fcAlarmStop to ssAlarmPause;
+
+    // A user task may be realized by several system-side steps: the mapping is
+    // refinement, not specialization, because the steps retain distinct
+    // functions and exchanged items while tracing the same operative intent.
+    // The nine refinement statements themselves live in gpca_operational.sysml,
+    // inside wsRequestBolus's/wsRespondAlarm's own owning scope — the
+    // `#refinement dependency ... to ...` shorthand's target end does not
+    // accept a qualified path, and both steps are nested now.
 
     // ── Requirement derivation ──────────────────────────────────
     // MEMO extension requirements (REQ-X) derive from needs and risks.
@@ -224,249 +216,210 @@ package memo_examples_gpca_pump_model_catalog_gpca_trace {
     connection : DerivesFrom connect sourceDriver ::> needAuditableRecord to targetRequirement ::> reqCs86;
 
     // ── Requirement satisfaction ────────────────────────────────
-    connection : SatisfiedBy connect requirementElement ::> reqCs01 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs01 to satisfyingElement ::> outputBus;
-    connection : SatisfiedBy connect requirementElement ::> reqCs18 to satisfyingElement ::> systemStatus;
-    connection : SatisfiedBy connect requirementElement ::> reqCs23 to satisfyingElement ::> systemStatus;
-    connection : SatisfiedBy connect requirementElement ::> reqCs25 to satisfyingElement ::> infusionMgr;
-    connection : SatisfiedBy connect requirementElement ::> reqCs19 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqDrugLibraryLimits to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqCs09 to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqPowerLossRetention to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqPost to satisfyingElement ::> systemMonitor;
-    connection : SatisfiedBy connect requirementElement ::> reqWatchdogSafeState to satisfyingElement ::> systemMonitor;
-    connection : SatisfiedBy connect requirementElement ::> reqWatchdogSafeState to satisfyingElement ::> controllerBoard;
-    connection : SatisfiedBy connect requirementElement ::> reqCs59 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs72 to satisfyingElement ::> audibleAlarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs73 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs75 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs21 to satisfyingElement ::> airInLineSensor;
-    connection : SatisfiedBy connect requirementElement ::> reqCs21 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqOcclusion to satisfyingElement ::> occlusionSensor;
-    connection : SatisfiedBy connect requirementElement ::> reqOcclusion to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs23 to satisfyingElement ::> reservoirSensor;
-    connection : SatisfiedBy connect requirementElement ::> reqCs23 to satisfyingElement ::> infusionMgr;
-    connection : SatisfiedBy connect requirementElement ::> reqDoorOpen to satisfyingElement ::> doorSensor;
-    connection : SatisfiedBy connect requirementElement ::> reqDoorOpen to satisfyingElement ::> infusionMgr;
-    connection : SatisfiedBy connect requirementElement ::> reqMaxHourlyDose to satisfyingElement ::> infusionMgr;
-    connection : SatisfiedBy connect requirementElement ::> reqStuckButton to satisfyingElement ::> infusionMgr;
-    connection : SatisfiedBy connect requirementElement ::> reqFlowCrossCheck to satisfyingElement ::> flowSensor;
-    connection : SatisfiedBy connect requirementElement ::> reqFlowCrossCheck to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs77 to satisfyingElement ::> logging;
-    connection : SatisfiedBy connect requirementElement ::> reqCs78 to satisfyingElement ::> logging;
-    connection : SatisfiedBy connect requirementElement ::> reqEventLogging to satisfyingElement ::> logging;
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
     // CriSys REQ-CS allocation to the UMN software subsystems
     // (coarse; refined against the AADL architecture in GR.04).
     // Mode control -> TLM; flow production -> Infusion_Manager;
     // notifications -> Alarm; data configuration -> Config;
     // logs -> Logging; enclosure non-behavioral -> DeviceEnclosure.
-    connection : SatisfiedBy connect requirementElement ::> reqCs02 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs03 to satisfyingElement ::> infusionMgr;
-    connection : SatisfiedBy connect requirementElement ::> reqCs04 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs05 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs06 to satisfyingElement ::> infusionMgr;
-    connection : SatisfiedBy connect requirementElement ::> reqCs07 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs08 to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqCs10 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs11 to satisfyingElement ::> logging;
-    connection : SatisfiedBy connect requirementElement ::> reqCs12 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs13 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs14 to satisfyingElement ::> infusionMgr;
-    connection : SatisfiedBy connect requirementElement ::> reqCs15 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs16 to satisfyingElement ::> infusionMgr;
-    connection : SatisfiedBy connect requirementElement ::> reqCs17 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs18 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs20 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs22 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs24 to satisfyingElement ::> infusionMgr;
-    connection : SatisfiedBy connect requirementElement ::> reqCs26 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs27 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs28 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs29 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs30 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs31 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs32 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs33 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs34 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs35 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs36 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs37 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs38 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs39 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs40 to satisfyingElement ::> infusionMgr;
-    connection : SatisfiedBy connect requirementElement ::> reqCs41 to satisfyingElement ::> infusionMgr;
-    connection : SatisfiedBy connect requirementElement ::> reqCs42 to satisfyingElement ::> infusionMgr;
-    connection : SatisfiedBy connect requirementElement ::> reqCs43 to satisfyingElement ::> infusionMgr;
-    connection : SatisfiedBy connect requirementElement ::> reqCs44 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs45 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs46 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs47 to satisfyingElement ::> tlm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs48 to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqCs49 to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqCs50 to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqCs51 to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqCs52 to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqCs53 to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqCs54 to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqCs55 to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqCs56 to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqCs57 to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqCs58 to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqCs60 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs61 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs62 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs63 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs64 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs65 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs66 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs67 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs68 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs69 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs70 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs71 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs74 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs76 to satisfyingElement ::> alarm;
-    connection : SatisfiedBy connect requirementElement ::> reqCs79 to satisfyingElement ::> logging;
-    connection : SatisfiedBy connect requirementElement ::> reqCs80 to satisfyingElement ::> logging;
-    connection : SatisfiedBy connect requirementElement ::> reqCs81 to satisfyingElement ::> logging;
-    connection : SatisfiedBy connect requirementElement ::> reqCs82 to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqCs83 to satisfyingElement ::> enclosure;
-    connection : SatisfiedBy connect requirementElement ::> reqCs84 to satisfyingElement ::> enclosure;
-    connection : SatisfiedBy connect requirementElement ::> reqCs85 to satisfyingElement ::> logging;
-    connection : SatisfiedBy connect requirementElement ::> reqCs86 to satisfyingElement ::> config;
-    connection : SatisfiedBy connect requirementElement ::> reqPumpAccuracy to satisfyingElement ::> pumpMotorAssembly;
-    connection : SatisfiedBy connect requirementElement ::> reqAlarmLoudness to satisfyingElement ::> audibleAlarm;
-    connection : SatisfiedBy connect requirementElement ::> reqBatteryBackup to satisfyingElement ::> batteryPack;
-    connection : SatisfiedBy connect requirementElement ::> reqFreeFlowPrevention to satisfyingElement ::> antiFreeFlowValve;
 
-    // ── Function allocation ─────────────────────────────────────
-    connection : AllocatedTo connect function ::> fnAcquireSensors to allocatedElement ::> gpcaDeviceSensors;
-    connection : AllocatedTo connect function ::> fnAcquireSensors to allocatedElement ::> systemStatus;
-    connection : AllocatedTo connect function ::> fnPresentStatus to allocatedElement ::> outputBus;
-    connection : AllocatedTo connect function ::> fnValidatePrescription to allocatedElement ::> config;
-    connection : AllocatedTo connect function ::> fnMonitorAlarm to allocatedElement ::> alarm;
-    connection : AllocatedTo connect function ::> fnAnnunciate to allocatedElement ::> audibleAlarm;
-    connection : AllocatedTo connect function ::> fnManageInfusion to allocatedElement ::> infusionMgr;
-    connection : AllocatedTo connect function ::> fnEnforceLimits to allocatedElement ::> infusionMgr;
-    connection : AllocatedTo connect function ::> fnCommandPump to allocatedElement ::> pumpMotorAssembly;
-    connection : AllocatedTo connect function ::> fnLogEvents to allocatedElement ::> logging;
-    connection : AllocatedTo connect function ::> fnManagePower to allocatedElement ::> systemMonitor;
-    connection : AllocatedTo connect function ::> fnPresentStatus to allocatedElement ::> operatorDisplay;
-    connection : AllocatedTo connect function ::> fnSelfTest to allocatedElement ::> systemMonitor;
 
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+    // ── Function allocation ─────────────────────────────────────
+    allocate fnAcquireSensors to gpcaDevice.gpcaDeviceSensors;
+    allocate fnAcquireSensors to gpcaDevice.gpcaSoftware.systemStatus;
+    allocate fnPresentStatus to gpcaDevice.gpcaSoftware.outputBus;
+    allocate fnValidatePrescription to gpcaDevice.gpcaSoftware.config;
+    allocate fnMonitorAlarm to gpcaDevice.gpcaSoftware.alarm;
+    allocate fnAnnunciate to audibleAlarm;
+    allocate fnManageInfusion to gpcaDevice.gpcaSoftware.infusionMgr;
+    allocate fnEnforceLimits to gpcaDevice.gpcaSoftware.infusionMgr;
+    allocate fnCommandPump to pumpMotorAssembly;
+    allocate fnLogEvents to gpcaDevice.gpcaSoftware.logging;
+    allocate fnManagePower to gpcaDevice.gpcaSoftware.systemMonitor;
+    allocate fnPresentStatus to operatorDisplay;
+    allocate fnSelfTest to gpcaDevice.gpcaSoftware.systemMonitor;
     // ── Deployment, hosting, and interface realization ──────────
-    connection : DeploysTo connect deploymentUnit ::> gpcaSoftware to node ::> controllerBoard;
+    allocation gpcaSoftwareDeployment : DeploysTo allocate gpcaDevice.gpcaSoftware to controllerBoard;
     connection : HostedBy connect processingNode ::> mainController to hostAssembly ::> controllerBoard;
-    connection : Realizes connect realized ::> sensorInputInterface to realizing ::> hwSoftwareBus;
-    connection : Realizes connect realized ::> actuatorCommandInterface to realizing ::> pumpMotorDrive;
+    #refinement dependency sensorInputInterface to hwSoftwareBus;
+    #refinement dependency actuatorCommandInterface to pumpMotorDrive;
     connection : BindsToInterface connect portElement ::> portPatientPendant to boundInterface ::> bolusButtonLine;
     connection : BindsToInterface connect portElement ::> portMotorDrive to boundInterface ::> pumpMotorDrive;
     connection : BindsToInterface connect portElement ::> portSensorHarness to boundInterface ::> occlusionAnalogLine;
-    connection : AllocatedTo connect function ::> lfSensorAcquisition to allocatedElement ::> exSensorVector;
-    connection : AllocatedTo connect function ::> lfFlowCommand to allocatedElement ::> exFlowCommand;
-    connection : AllocatedTo connect function ::> lfAlarmSignal to allocatedElement ::> exAlarmAnnunciation;
-    connection : AllocatedTo connect function ::> lfPrescriptionEntry to allocatedElement ::> exPrescriptionEntry;
-
+    allocate lfSensorAcquisition to exSensorVector;
+    allocate lfFlowCommand to exFlowCommand;
+    allocate lfAlarmSignal to exAlarmAnnunciation;
+    allocate lfPrescriptionEntry to exPrescriptionEntry;
     // ── Fig 4.1 mode hierarchy (CriSys §4.1) ────────────────────
-    connection : Composes connect parent ::> topLevelModeMachine to child ::> modeOFF;
-    connection : Composes connect parent ::> topLevelModeMachine to child ::> modeON;
-    connection : Composes connect parent ::> modeON to child ::> modeIDLE;
-    connection : Composes connect parent ::> modeON to child ::> modeTHERAPY;
-    connection : Composes connect parent ::> modeTHERAPY to child ::> modePAUSED;
-    connection : Composes connect parent ::> modeTHERAPY to child ::> modeACTIVE;
-    connection : Composes connect parent ::> modeACTIVE to child ::> modeBASAL;
-    connection : Composes connect parent ::> modeACTIVE to child ::> modeSQUARE;
-    connection : Composes connect parent ::> modeACTIVE to child ::> modePBOLUS;
-
-    // ── GPCA_SW.Impl connection topology (AADL, 1:1; CE-101..142) ──
-    // Edges mirror the 42 GPCA_SW.Impl port connections; immediate
-    // semantics per connection are carried on the CE-1xx elements.
-    connection : ExchangesWith connect source ::> portOpCmdIn to target ::> tlm;
-    connection : ExchangesWith connect source ::> portConstIn to target ::> tlm;
-    connection : ExchangesWith connect source ::> tlm to target ::> outputBus;
-    connection : ExchangesWith connect source ::> infusionMgr to target ::> systemStatus;
-    connection : ExchangesWith connect source ::> tlm to target ::> systemStatus;
-    connection : ExchangesWith connect source ::> portSensorIn to target ::> systemStatus;
-    connection : ExchangesWith connect source ::> portConstIn to target ::> systemStatus;
-    connection : ExchangesWith connect source ::> config to target ::> systemStatus;
-    connection : ExchangesWith connect source ::> systemStatus to target ::> outputBus;
-    connection : ExchangesWith connect source ::> infusionMgr to target ::> alarm;
-    connection : ExchangesWith connect source ::> tlm to target ::> alarm;
-    connection : ExchangesWith connect source ::> systemMonitor to target ::> alarm;
-    connection : ExchangesWith connect source ::> portOpCmdIn to target ::> alarm;
-    connection : ExchangesWith connect source ::> portDbIn to target ::> alarm;
-    connection : ExchangesWith connect source ::> portSensorIn to target ::> alarm;
-    connection : ExchangesWith connect source ::> portConstIn to target ::> alarm;
-    connection : ExchangesWith connect source ::> systemStatus to target ::> alarm;
-    connection : ExchangesWith connect source ::> config to target ::> alarm;
-    connection : ExchangesWith connect source ::> alarm to target ::> outputBus;
-    connection : ExchangesWith connect source ::> tlm to target ::> config;
-    connection : ExchangesWith connect source ::> portPresIn to target ::> config;
-    connection : ExchangesWith connect source ::> portOpCmdIn to target ::> config;
-    connection : ExchangesWith connect source ::> portDbIn to target ::> config;
-    connection : ExchangesWith connect source ::> portConstIn to target ::> config;
-    connection : ExchangesWith connect source ::> systemStatus to target ::> config;
-    connection : ExchangesWith connect source ::> config to target ::> outputBus;
-    connection : ExchangesWith connect source ::> tlm to target ::> infusionMgr;
-    connection : ExchangesWith connect source ::> portOpCmdIn to target ::> infusionMgr;
-    connection : ExchangesWith connect source ::> portPatientIn to target ::> infusionMgr;
-    connection : ExchangesWith connect source ::> config to target ::> infusionMgr;
-    connection : ExchangesWith connect source ::> alarm to target ::> infusionMgr;
-    connection : ExchangesWith connect source ::> systemStatus to target ::> infusionMgr;
-    connection : ExchangesWith connect source ::> infusionMgr to target ::> outputBus;
-    connection : ExchangesWith connect source ::> tlm to target ::> systemMonitor;
-    connection : ExchangesWith connect source ::> systemMonitor to target ::> outputBus;
-    connection : ExchangesWith connect source ::> tlm to target ::> logging;
-    connection : ExchangesWith connect source ::> config to target ::> logging;
-    connection : ExchangesWith connect source ::> alarm to target ::> logging;
-    connection : ExchangesWith connect source ::> systemStatus to target ::> logging;
-    connection : ExchangesWith connect source ::> infusionMgr to target ::> logging;
-    connection : ExchangesWith connect source ::> logging to target ::> outputBus;
-    connection : ExchangesWith connect source ::> outputBus to target ::> portGpcaSwOut;
+
+    // ── GPCA_SW.Impl connection topology (AADL; CE-101..142) ─────
+    // The COMPONENT-granularity half of the 42 GPCA_SW.Impl port
+    // connections; immediate semantics per connection are carried on
+    // the CE-1xx elements.
+    //
+    // Only the 27 subcomponent-to-subcomponent edges live here. AADL's
+    // other 15 are DELEGATIONS between GPCA_SW's own boundary port and
+    // a subcomponent, and a delegation has no component-granularity
+    // spelling: writing it `portOpCmdIn -> tlm` mixes a port end with a
+    // component end, and SysML v2 rejects it because a boundary port
+    // reads as a sink from outside its part. All 15 are already
+    // recorded exactly, at port granularity, as `bind` statements in
+    // gpca_interfaces.sysml — so nothing is lost by not restating them
+    // here in a granularity that cannot express them.
+    flow from gpcaDevice.gpcaSoftware.tlm to gpcaDevice.gpcaSoftware.outputBus;
+    flow from gpcaDevice.gpcaSoftware.infusionMgr to gpcaDevice.gpcaSoftware.systemStatus;
+    flow from gpcaDevice.gpcaSoftware.tlm to gpcaDevice.gpcaSoftware.systemStatus;
+    flow from gpcaDevice.gpcaSoftware.config to gpcaDevice.gpcaSoftware.systemStatus;
+    flow from gpcaDevice.gpcaSoftware.systemStatus to gpcaDevice.gpcaSoftware.outputBus;
+    flow from gpcaDevice.gpcaSoftware.infusionMgr to gpcaDevice.gpcaSoftware.alarm;
+    flow from gpcaDevice.gpcaSoftware.tlm to gpcaDevice.gpcaSoftware.alarm;
+    flow from gpcaDevice.gpcaSoftware.systemMonitor to gpcaDevice.gpcaSoftware.alarm;
+    flow from gpcaDevice.gpcaSoftware.systemStatus to gpcaDevice.gpcaSoftware.alarm;
+    flow from gpcaDevice.gpcaSoftware.config to gpcaDevice.gpcaSoftware.alarm;
+    flow from gpcaDevice.gpcaSoftware.alarm to gpcaDevice.gpcaSoftware.outputBus;
+    flow from gpcaDevice.gpcaSoftware.tlm to gpcaDevice.gpcaSoftware.config;
+    flow from gpcaDevice.gpcaSoftware.systemStatus to gpcaDevice.gpcaSoftware.config;
+    flow from gpcaDevice.gpcaSoftware.config to gpcaDevice.gpcaSoftware.outputBus;
+    flow from gpcaDevice.gpcaSoftware.tlm to gpcaDevice.gpcaSoftware.infusionMgr;
+    flow from gpcaDevice.gpcaSoftware.config to gpcaDevice.gpcaSoftware.infusionMgr;
+    flow from gpcaDevice.gpcaSoftware.alarm to gpcaDevice.gpcaSoftware.infusionMgr;
+    flow from gpcaDevice.gpcaSoftware.systemStatus to gpcaDevice.gpcaSoftware.infusionMgr;
+    flow from gpcaDevice.gpcaSoftware.infusionMgr to gpcaDevice.gpcaSoftware.outputBus;
+    flow from gpcaDevice.gpcaSoftware.tlm to gpcaDevice.gpcaSoftware.systemMonitor;
+    flow from gpcaDevice.gpcaSoftware.systemMonitor to gpcaDevice.gpcaSoftware.outputBus;
+    flow from gpcaDevice.gpcaSoftware.tlm to gpcaDevice.gpcaSoftware.logging;
+    flow from gpcaDevice.gpcaSoftware.config to gpcaDevice.gpcaSoftware.logging;
+    flow from gpcaDevice.gpcaSoftware.alarm to gpcaDevice.gpcaSoftware.logging;
+    flow from gpcaDevice.gpcaSoftware.systemStatus to gpcaDevice.gpcaSoftware.logging;
+    flow from gpcaDevice.gpcaSoftware.infusionMgr to gpcaDevice.gpcaSoftware.logging;
+    flow from gpcaDevice.gpcaSoftware.logging to gpcaDevice.gpcaSoftware.outputBus;
 
     // ── GPCA_SW boundary features (AADL GPCA_SW.aadl; CITE-002) ──
     // The seven top-level ports are features of GPCA_Software, so
-    // interconnection views pin them on the software boundary.
-    connection : Composes connect parent ::> gpcaSoftware to child ::> portOpCmdIn;
-    connection : Composes connect parent ::> gpcaSoftware to child ::> portPresIn;
-    connection : Composes connect parent ::> gpcaSoftware to child ::> portPatientIn;
-    connection : Composes connect parent ::> gpcaSoftware to child ::> portSensorIn;
-    connection : Composes connect parent ::> gpcaSoftware to child ::> portConstIn;
-    connection : Composes connect parent ::> gpcaSoftware to child ::> portDbIn;
-    connection : Composes connect parent ::> gpcaSoftware to child ::> portGpcaSwOut;
-
-    // ── Device/subsystem feature ownership (published AADL, 1:1) ──
-    connection : Composes connect parent ::> gpcaDevice to child ::> devOpCmdIn;
-    connection : Composes connect parent ::> gpcaDevice to child ::> devDbIn;
-    connection : Composes connect parent ::> gpcaDevice to child ::> devPresIn;
-    connection : Composes connect parent ::> gpcaDevice to child ::> devPatientIn;
-    connection : Composes connect parent ::> gpcaDevice to child ::> devGpcaOut;
-    connection : Composes connect parent ::> gpcaDeviceSensors to child ::> snsOpCmdIn;
-    connection : Composes connect parent ::> gpcaDeviceSensors to child ::> snsDbIn;
-    connection : Composes connect parent ::> gpcaDeviceSensors to child ::> snsPresIn;
-    connection : Composes connect parent ::> gpcaDeviceSensors to child ::> snsPatientIn;
-    connection : Composes connect parent ::> gpcaDeviceSensors to child ::> snsOpCmdOut;
-    connection : Composes connect parent ::> gpcaDeviceSensors to child ::> snsPresOut;
-    connection : Composes connect parent ::> gpcaDeviceSensors to child ::> snsPatientOut;
-    connection : Composes connect parent ::> gpcaDeviceSensors to child ::> snsSensorOut;
-    connection : Composes connect parent ::> gpcaDeviceSensors to child ::> snsConstOut;
-    connection : Composes connect parent ::> gpcaDeviceSensors to child ::> snsDbOut;
-    connection : Composes connect parent ::> gpcaActuators to child ::> actGpcaSwIn;
-    connection : Composes connect parent ::> gpcaActuators to child ::> actGpcaOut;
+    // interconnection views pin them on the software boundary. Each software
+    // module owns the AADL features it declares, natively: the ports are
+    // nested in the module's own body in gpca_architecture.sysml, not wired
+    // here with a separate relationship.
 
     // ── GPCA_Device.Impl connections (GPCA_Device.aadl, 1:1) ──
-    connection : ExchangesWith connect source ::> devOpCmdIn to target ::> snsOpCmdIn;
-    connection : ExchangesWith connect source ::> devDbIn to target ::> snsDbIn;
-    connection : ExchangesWith connect source ::> devPresIn to target ::> snsPresIn;
-    connection : ExchangesWith connect source ::> devPatientIn to target ::> snsPatientIn;
-    connection : ExchangesWith connect source ::> snsOpCmdOut to target ::> portOpCmdIn;
-    connection : ExchangesWith connect source ::> snsPresOut to target ::> portPresIn;
-    connection : ExchangesWith connect source ::> snsPatientOut to target ::> portPatientIn;
-    connection : ExchangesWith connect source ::> snsSensorOut to target ::> portSensorIn;
-    connection : ExchangesWith connect source ::> snsConstOut to target ::> portConstIn;
-    connection : ExchangesWith connect source ::> snsDbOut to target ::> portDbIn;
-    connection : ExchangesWith connect source ::> portGpcaSwOut to target ::> actGpcaSwIn;
-    connection : ExchangesWith connect source ::> actGpcaOut to target ::> devGpcaOut;
+    bind gpcaDevice.devOpCmdIn = gpcaDevice.gpcaDeviceSensors.snsOpCmdIn;
+    bind gpcaDevice.devDbIn = gpcaDevice.gpcaDeviceSensors.snsDbIn;
+    bind gpcaDevice.devPresIn = gpcaDevice.gpcaDeviceSensors.snsPresIn;
+    bind gpcaDevice.devPatientIn = gpcaDevice.gpcaDeviceSensors.snsPatientIn;
+    flow from gpcaDevice.gpcaDeviceSensors.snsOpCmdOut to gpcaDevice.gpcaSoftware.portOpCmdIn;
+    flow from gpcaDevice.gpcaDeviceSensors.snsPresOut to gpcaDevice.gpcaSoftware.portPresIn;
+    flow from gpcaDevice.gpcaDeviceSensors.snsPatientOut to gpcaDevice.gpcaSoftware.portPatientIn;
+    flow from gpcaDevice.gpcaDeviceSensors.snsSensorOut to gpcaDevice.gpcaSoftware.portSensorIn;
+    flow from gpcaDevice.gpcaDeviceSensors.snsConstOut to gpcaDevice.gpcaSoftware.portConstIn;
+    flow from gpcaDevice.gpcaDeviceSensors.snsDbOut to gpcaDevice.gpcaSoftware.portDbIn;
+    flow from gpcaDevice.gpcaSoftware.portGpcaSwOut to gpcaDevice.gpcaActuators.actGpcaSwIn;
+    bind gpcaDevice.gpcaActuators.actGpcaOut = gpcaDevice.devGpcaOut;
 
     // ── Risk chains (ISO 14971, GIIP causal-tree structure) ─────
     // Categorized causes converge on each hazard (GIIP Tables 2-9
@@ -622,62 +575,61 @@ package memo_examples_gpca_pump_model_catalog_gpca_trace {
     connection : Mitigates { attribute :>> mitigationKind = MitigationKind::cutSet; connect control ::> lockoutControl to mitigatedElement ::> mcsBolusPath; }
 
     // ── Verification coverage (IEC 62304 §5.7) ──────────────────
-    connection : VerifiedBy connect verificationTarget ::> reqCs01 to verificationCase ::> vcModeRange;
-    connection : VerifiedBy connect verificationTarget ::> reqCs25 to verificationCase ::> vcLockout;
-    connection : VerifiedBy connect verificationTarget ::> reqCs19 to verificationCase ::> vcSameStepAlarm;
-    connection : VerifiedBy connect verificationTarget ::> reqDrugLibraryLimits to verificationCase ::> vcDrugLibrary;
-    connection : VerifiedBy connect verificationTarget ::> reqCs09 to verificationCase ::> vcPrescriptionConfirm;
-    connection : VerifiedBy connect verificationTarget ::> reqPost to verificationCase ::> vcPost;
-    connection : VerifiedBy connect verificationTarget ::> reqPowerLossRetention to verificationCase ::> vcPowerLoss;
-    connection : VerifiedBy connect verificationTarget ::> reqCs72 to verificationCase ::> vcAlarmLoudness;
-    connection : VerifiedBy connect verificationTarget ::> reqCs75 to verificationCase ::> vcTemporalModeSafety;
-    connection : VerifiedBy connect verificationTarget ::> reqCs21 to verificationCase ::> vcAirInLine;
-    connection : VerifiedBy connect verificationTarget ::> reqOcclusion to verificationCase ::> vcOcclusion;
-    connection : VerifiedBy connect verificationTarget ::> reqCs23 to verificationCase ::> vcEmptyReservoir;
-    connection : VerifiedBy connect verificationTarget ::> reqDoorOpen to verificationCase ::> vcTemporalModeSafety;
-    connection : VerifiedBy connect verificationTarget ::> reqMaxHourlyDose to verificationCase ::> vcHourlyMax;
-    connection : VerifiedBy connect verificationTarget ::> reqCs78 to verificationCase ::> vcEventLog;
-    connection : VerifiedBy connect verificationTarget ::> reqEventLogging to verificationCase ::> vcEventLog;
-    connection : VerifiedBy connect verificationTarget ::> reqWatchdogSafeState to verificationCase ::> vcWatchdog;
-    connection : VerifiedBy connect verificationTarget ::> reqStuckButton to verificationCase ::> vcStuckButton;
-    connection : VerifiedBy connect verificationTarget ::> reqFlowCrossCheck to verificationCase ::> vcFlowCrossCheck;
-    connection : VerifiedBy connect verificationTarget ::> reqPumpAccuracy to verificationCase ::> vcPumpAccuracy;
-    connection : VerifiedBy connect verificationTarget ::> reqAlarmLoudness to verificationCase ::> vcAlarmLoudness;
-    connection : VerifiedBy connect verificationTarget ::> reqBatteryBackup to verificationCase ::> vcPowerLoss;
-    connection : VerifiedBy connect verificationTarget ::> reqFreeFlowPrevention to verificationCase ::> vcFreeFlow;
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
     // risk controls
-    connection : VerifiedBy connect verificationTarget ::> lockoutControl to verificationCase ::> vcLockout;
-    connection : VerifiedBy connect verificationTarget ::> airDetectionControl to verificationCase ::> vcAirInLine;
-    connection : VerifiedBy connect verificationTarget ::> occlusionAlarmControl to verificationCase ::> vcOcclusion;
-    connection : VerifiedBy connect verificationTarget ::> reservoirMonitorControl to verificationCase ::> vcEmptyReservoir;
-    connection : VerifiedBy connect verificationTarget ::> drugLibraryControl to verificationCase ::> vcDrugLibrary;
-    connection : VerifiedBy connect verificationTarget ::> freeFlowValveControl to verificationCase ::> vcFreeFlow;
-    connection : VerifiedBy connect verificationTarget ::> watchdogControl to verificationCase ::> vcWatchdog;
-    connection : VerifiedBy connect verificationTarget ::> flowCrossCheckControl to verificationCase ::> vcFlowCrossCheck;
-    connection : VerifiedBy connect verificationTarget ::> doorInterlockControl to verificationCase ::> vcDoorInterlock;
-    connection : VerifiedBy connect verificationTarget ::> reverseDeliveryPauseControl to verificationCase ::> vcReverseDeliveryPause;
-    connection : VerifiedBy connect verificationTarget ::> antiRefluxDesignControl to verificationCase ::> vcAntiRefluxMechanism;
-    connection : VerifiedBy connect verificationTarget ::> vtbiLimitPauseControl to verificationCase ::> vcVtbiCeiling;
-    connection : VerifiedBy connect verificationTarget ::> infusionCompleteControl to verificationCase ::> vcInfusionComplete;
+
+
+
+
+
+
+
+
+
+
+
+
+
     // behavior properties, contracts, and timing
-    connection : VerifiedBy connect verificationTarget ::> propAlarmStopsSameStep to verificationCase ::> vcSameStepAlarm;
-    connection : VerifiedBy connect verificationTarget ::> propLockoutTimerMonotonic to verificationCase ::> vcTemporalModeSafety;
-    connection : VerifiedBy connect verificationTarget ::> guaranteeExclusiveMode to verificationCase ::> vcModeRange;
-    connection : VerifiedBy connect verificationTarget ::> guaranteeLockoutPreventsBolus to verificationCase ::> vcLockout;
-    connection : VerifiedBy connect verificationTarget ::> guaranteeAlarmStopsSameStep to verificationCase ::> vcSameStepAlarm;
-    connection : VerifiedBy connect verificationTarget ::> temporalNoInvalidTransition to verificationCase ::> vcTemporalModeSafety;
-    connection : VerifiedBy connect verificationTarget ::> tcAlarmLatency to verificationCase ::> vcSameStepAlarm;
-    connection : VerifiedBy connect verificationTarget ::> tcBolusResponse to verificationCase ::> vcLockout;
-    connection : VerifiedBy connect verificationTarget ::> tcWatchdogTimeout to verificationCase ::> vcWatchdog;
+
+
+
+
+
+
+
+
+
     // class-C software items
-    connection : VerifiedBy connect verificationTarget ::> tlm to verificationCase ::> vcModeRange;
-    connection : VerifiedBy connect verificationTarget ::> alarm to verificationCase ::> vcSameStepAlarm;
-    connection : VerifiedBy connect verificationTarget ::> infusionMgr to verificationCase ::> vcLockout;
-    connection : VerifiedBy connect verificationTarget ::> config to verificationCase ::> vcDrugLibrary;
-    connection : VerifiedBy connect verificationTarget ::> logging to verificationCase ::> vcEventLog;
-    connection : VerifiedBy connect verificationTarget ::> systemMonitor to verificationCase ::> vcPost;
-    connection : VerifiedBy connect verificationTarget ::> systemStatus to verificationCase ::> vcEmptyReservoir;
-    connection : VerifiedBy connect verificationTarget ::> outputBus to verificationCase ::> vcModeRange;
+
+
+
+
+
+
+
 
     // ── Validation and usability testing ────────────────────────
     connection : Validates connect validationTarget ::> reqCs59 to validationCase ::> valSimulatedWard;
@@ -715,9 +667,4 @@ package memo_examples_gpca_pump_model_catalog_gpca_trace {
     connection : ProducesEvidence connect producer ::> vcEventLog to producedEvidence ::> evidenceDoseProgramming;
     connection : ProducesEvidence connect producer ::> vcPumpAccuracy to producedEvidence ::> evidenceDeliveryAccuracy;
     connection : ProducesEvidence connect producer ::> valSummativeUsability to producedEvidence ::> evidenceUsability;
-    connection : IncludedIn connect sourceElement ::> evidenceLockout to targetView ::> rmfView;
-    connection : IncludedIn connect sourceElement ::> evidenceSafetyAlarmSuite to targetView ::> vvView;
-    connection : IncludedIn connect sourceElement ::> evidenceUsability to targetView ::> usabilityView;
-    connection : IncludedIn connect sourceElement ::> fmeaDelivery to targetView ::> hazardAnalysisView;
-    connection : IncludedIn connect sourceElement ::> ftaOverdose to targetView ::> hazardAnalysisView;
 }