@memoarchitect/ontology 0.7.0 → 0.8.22

package/examples/gpca-pump/model/catalog/gpca_verification.sysml

@@ -1,8 +1,16 @@
 package memo_examples_gpca_pump_gpca_verification {
+    private import memo_examples_gpca_pump_gpca_requirements::*;
+    private import memo_examples_gpca_pump_gpca_formal_behavior::*;
+    private import memo_examples_gpca_pump_gpca_architecture::*;
+    private import memo_examples_gpca_pump_gpca_risk::*;
+    private import memo_examples_gpca_pump_gpca_behavior_modes::*;
+    private import memo_examples_sysml_diagram_samples_viewpoints_unassigned_views_requirements_view::*;
     private import ScalarValues::*;
+    private import memo_core_dimensions::*;   // ElementStatusKind
 
     private import memo_assurance_verification_validation::*;
     private import memo_core_enumerations::*;
+    private import memo_core_common::*;
 
     // ── Verification cases ──────────────────────────────────────
     verification vcModeRange : VerificationCase {
@@ -10,112 +18,155 @@ package memo_examples_gpca_pump_gpca_verification {
         attribute :>> name = "VerifyModeRange";
         attribute :>> methodKind = VerificationMethodKind::formalProof;
         attribute :>> acceptanceCriteria = "Current_System_mode only takes valid exclusive values";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqCs01; }
+        subject verified : Base::Anything[*] = (guaranteeExclusiveMode, gpcaDevice.gpcaSoftware.tlm, gpcaDevice.gpcaSoftware.outputBus);
     }
     verification vcLockout : VerificationCase {
         attribute :>> id = "VER-002";
         attribute :>> name = "VerifyBolusLockout";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "No patient bolus initiated when lockout or max bolus constraints active";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqCs25; }
+        subject verified : Base::Anything[*] = (lockoutControl, guaranteeLockoutPreventsBolus, tcBolusResponse, gpcaDevice.gpcaSoftware.infusionMgr);
     }
     verification vcSameStepAlarm : VerificationCase {
         attribute :>> id = "VER-003";
         attribute :>> name = "VerifySameStepAlarmStop";
         attribute :>> methodKind = VerificationMethodKind::modelChecking;
         attribute :>> acceptanceCriteria = "Alarm output affects infusion in same execution step";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqCs19; }
+        subject verified : Base::Anything[*] = (propAlarmStopsSameStep, guaranteeAlarmStopsSameStep, tcAlarmLatency, gpcaDevice.gpcaSoftware.alarm);
     }
     verification vcTemporalModeSafety : VerificationCase {
         attribute :>> id = "VER-004";
         attribute :>> name = "VerifyTemporalModeSafety";
         attribute :>> methodKind = VerificationMethodKind::modelChecking;
         attribute :>> acceptanceCriteria = "No invalid transitions and pause on critical alarms";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqCs75; verify reqDoorOpen; }
+        subject verified : Base::Anything[*] = (propLockoutTimerMonotonic, temporalNoInvalidTransition);
     }
     verification vcAirInLine : VerificationCase {
         attribute :>> id = "VER-005";
         attribute :>> name = "VerifyAirInLineStop";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Injected air above threshold pauses infusion and annunciates per the REQ 59 High-priority actions (REQ-CS-21)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqCs21; }
+        subject verified : Base::Anything[*] = (airDetectionControl);
     }
     verification vcOcclusion : VerificationCase {
         attribute :>> id = "VER-006";
         attribute :>> name = "VerifyOcclusionDetection";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Clamped line above pressure threshold pauses infusion and annunciates (REQ-X-04)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqOcclusion; }
+        subject verified : Base::Anything[*] = (occlusionAlarmControl);
     }
     verification vcEmptyReservoir : VerificationCase {
         attribute :>> id = "VER-007";
         attribute :>> name = "VerifyEmptyReservoirStop";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Reservoir-empty assertion transitions to PAUSED (KVO flow) and annunciates per the REQ 59 High-priority actions (REQ-CS-23)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqCs23; }
+        subject verified : Base::Anything[*] = (reservoirMonitorControl, gpcaDevice.gpcaSoftware.systemStatus);
     }
     verification vcPost : VerificationCase {
         attribute :>> id = "VER-008";
         attribute :>> name = "VerifyPowerOnSelfTest";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Each injected POST fault (CPU, RAM, ROM, watchdog, sensors) blocks therapy and alarms (REQ-X-02)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqPost; }
+        subject verified : Base::Anything[*] = (gpcaDevice.gpcaSoftware.systemMonitor);
     }
     verification vcPowerLoss : VerificationCase {
         attribute :>> id = "VER-009";
         attribute :>> name = "VerifyPowerLossRetentionAndResume";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Prescription and log intact after power cycle; therapy resumes only after confirmation (REQ-X-03)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqPowerLossRetention; verify reqBatteryBackup; }
     }
     verification vcWatchdog : VerificationCase {
         attribute :>> id = "VER-010";
         attribute :>> name = "VerifyWatchdogSafeState";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Induced CPU hang forces zero flow and continuous alarm within 60 ms (REQ-X-08, TC-003)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqWatchdogSafeState; }
+        subject verified : Base::Anything[*] = (watchdogControl, tcWatchdogTimeout);
     }
     verification vcHourlyMax : VerificationCase {
         attribute :>> id = "VER-011";
         attribute :>> name = "VerifyHourlyDoseCeiling";
         attribute :>> methodKind = VerificationMethodKind::simulation;
         attribute :>> acceptanceCriteria = "Randomized bolus/basal schedules never exceed hourly maximum in sliding window (REQ-X-06)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqMaxHourlyDose; }
     }
     verification vcPumpAccuracy : VerificationCase {
         attribute :>> id = "VER-012";
         attribute :>> name = "VerifyDeliveryAccuracy";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Gravimetric bench measurement within ±5% (Tolerance_Min_const) across rate range (REQ-X-11)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqPumpAccuracy; }
     }
     verification vcAlarmLoudness : VerificationCase {
         attribute :>> id = "VER-013";
         attribute :>> name = "VerifyAlarmSoundPressure";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Each priority tone meets Audio_level_const, 50 db for 2 s per I 8 (REQ-X-12)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqCs72; verify reqAlarmLoudness; }
     }
     verification vcFreeFlow : VerificationCase {
         attribute :>> id = "VER-014";
         attribute :>> name = "VerifyAntiFreeFlowValve";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "No gravity flow with set disengaged under worst-case head height (REQ-X-14)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqFreeFlowPrevention; }
+        subject verified : Base::Anything[*] = (freeFlowValveControl);
     }
     verification vcStuckButton : VerificationCase {
         attribute :>> id = "VER-015";
         attribute :>> name = "VerifyStuckButtonDetection";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Shorted pendant input yields no bolus and Medium-priority notification after 60 s (REQ-X-09)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqStuckButton; }
     }
     verification vcFlowCrossCheck : VerificationCase {
         attribute :>> id = "VER-016";
         attribute :>> name = "VerifyFlowCrossCheck";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Injected deviation beyond Tolerance_Min_const sustained past Max_Duration_OverInfusion_const pauses therapy and annunciates (REQ-X-10)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqFlowCrossCheck; }
+        subject verified : Base::Anything[*] = (flowCrossCheckControl);
     }
 
     verification vcDrugLibrary : VerificationCase {
@@ -123,56 +174,74 @@ package memo_examples_gpca_pump_gpca_verification {
         attribute :>> name = "VerifyDrugLibraryEnforcement";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Hard-limit entries rejected, soft-limit entries require confirmation, both logged (REQ-X-01)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqDrugLibraryLimits; }
+        subject verified : Base::Anything[*] = (drugLibraryControl, gpcaDevice.gpcaSoftware.config);
     }
     verification vcPrescriptionConfirm : VerificationCase {
         attribute :>> id = "VER-018";
         attribute :>> name = "VerifyPrescriptionConfirmation";
         attribute :>> methodKind = VerificationMethodKind::demonstration;
         attribute :>> acceptanceCriteria = "Therapy cannot start without distinct confirmation; displayed values equal stored values (REQ-CS-09)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqCs09; }
     }
     verification vcEventLog : VerificationCase {
         attribute :>> id = "VER-019";
         attribute :>> name = "VerifyEventLogIntegrity";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Operational/error log entries per REQ-CS-78..81; tampering detectable (REQ-X-07)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqCs78; verify reqEventLogging; }
+        subject verified : Base::Anything[*] = (gpcaDevice.gpcaSoftware.logging);
     }
     verification vcReverseDeliveryPause : VerificationCase {
         attribute :>> id = "VER-020";
         attribute :>> name = "VerifyReverseDeliveryPause";
         attribute :>> methodKind = VerificationMethodKind::modelChecking;
         attribute :>> acceptanceCriteria = "Continuous or cumulative reverse delivery beyond the REQ-CS-22 duration limits transitions to PAUSED and raises the Reverse Delivery notification (NOTIF-04)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        subject verified : Base::Anything[*] = (reverseDeliveryPauseControl);
     }
     verification vcAntiRefluxMechanism : VerificationCase {
         attribute :>> id = "VER-021";
         attribute :>> name = "VerifyContinuousReverseDeliveryPrevention";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "During normal use and single fault condition, continuous reverse delivery is not possible (IEC 601-2-24 basis per GPCA safety requirements)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        subject verified : Base::Anything[*] = (antiRefluxDesignControl);
     }
     verification vcVtbiCeiling : VerificationCase {
         attribute :>> id = "VER-022";
         attribute :>> name = "VerifyVtbiCeilingPause";
         attribute :>> methodKind = VerificationMethodKind::modelChecking;
         attribute :>> acceptanceCriteria = "Actual volume infused above the drug-database maximum VTBI transitions to PAUSED with flow at most KVO (REQ-CS-20, AGREE GP-008) and raises NOTIF-06";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        subject verified : Base::Anything[*] = (vtbiLimitPauseControl);
     }
     verification vcInfusionComplete : VerificationCase {
         attribute :>> id = "VER-023";
         attribute :>> name = "VerifyInfusionCompleteStop";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Reaching prescribed total duration or maximum VTBI transitions ACTIVE to IDLE with Infusion Complete actions (REQ-CS-28)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        subject verified : Base::Anything[*] = (infusionCompleteControl);
     }
     verification vcDoorInterlock : VerificationCase {
         attribute :>> id = "VER-024";
         attribute :>> name = "VerifyDoorOpenDeliveryInhibit";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Door open during THERAPY limits flow to at most KVO and raises a notification (AGREE GP-011; REQ-X-05)";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        subject verified : Base::Anything[*] = (doorInterlockControl);
     }
 
     // ── Validation cases (design validation / IEC 62366) ────────
@@ -194,7 +263,8 @@ package memo_examples_gpca_pump_gpca_verification {
     }
 
     // ── Test artifacts and evidence ─────────────────────────────
-    part testReportLockout : TestArtifact {
+    part testReportLockout : MemoEvidence {
+        attribute :>> evidenceKind = EvidenceKind::testArtifact;
         attribute :>> id = "TEST-001";
         attribute :>> name = "BolusLockoutTestReport";
         attribute :>> version = "0.1";
@@ -202,7 +272,8 @@ package memo_examples_gpca_pump_gpca_verification {
         attribute :>> artifactKind = ArtifactKind::testReport;
         attribute :>> resultSummary = "planned";
     }
-    part testProtocolSafetySuite : TestArtifact {
+    part testProtocolSafetySuite : MemoEvidence {
+        attribute :>> evidenceKind = EvidenceKind::testArtifact;
         attribute :>> id = "TEST-002";
         attribute :>> name = "SafetyAlarmTestProtocol";
         attribute :>> version = "0.1";
@@ -210,7 +281,8 @@ package memo_examples_gpca_pump_gpca_verification {
         attribute :>> artifactKind = ArtifactKind::testProtocol;
         attribute :>> resultSummary = "covers VER-005..VER-010, VER-015, VER-016, VER-020, VER-022..VER-024";
     }
-    part evidenceLockout : Evidence {
+    part evidenceLockout : MemoEvidence {
+        attribute :>> evidenceKind = EvidenceKind::evidence;
         attribute :>> id = "EVD-001";
         attribute :>> name = "BolusLockoutEvidence";
         attribute :>> version = "0.1";
@@ -218,7 +290,8 @@ package memo_examples_gpca_pump_gpca_verification {
         attribute :>> evidenceType = "verification evidence";
         attribute :>> integrityStatus = "draft";
     }
-    part evidenceModeRange : Evidence {
+    part evidenceModeRange : MemoEvidence {
+        attribute :>> evidenceKind = EvidenceKind::evidence;
         attribute :>> id = "EVD-002";
         attribute :>> name = "ModeRangeEvidence";
         attribute :>> version = "0.1";
@@ -226,7 +299,8 @@ package memo_examples_gpca_pump_gpca_verification {
         attribute :>> evidenceType = "formal proof evidence";
         attribute :>> integrityStatus = "draft";
     }
-    part evidenceSameStepAlarm : Evidence {
+    part evidenceSameStepAlarm : MemoEvidence {
+        attribute :>> evidenceKind = EvidenceKind::evidence;
         attribute :>> id = "EVD-003";
         attribute :>> name = "SameStepAlarmEvidence";
         attribute :>> version = "0.1";
@@ -234,7 +308,8 @@ package memo_examples_gpca_pump_gpca_verification {
         attribute :>> evidenceType = "model checking evidence";
         attribute :>> integrityStatus = "draft";
     }
-    part evidenceTemporalModeSafety : Evidence {
+    part evidenceTemporalModeSafety : MemoEvidence {
+        attribute :>> evidenceKind = EvidenceKind::evidence;
         attribute :>> id = "EVD-004";
         attribute :>> name = "TemporalModeSafetyEvidence";
         attribute :>> version = "0.1";
@@ -242,7 +317,8 @@ package memo_examples_gpca_pump_gpca_verification {
         attribute :>> evidenceType = "model checking evidence";
         attribute :>> integrityStatus = "draft";
     }
-    part evidenceSafetyAlarmSuite : Evidence {
+    part evidenceSafetyAlarmSuite : MemoEvidence {
+        attribute :>> evidenceKind = EvidenceKind::evidence;
         attribute :>> id = "EVD-005";
         attribute :>> name = "SafetyAlarmSuiteEvidence";
         attribute :>> version = "0.1";
@@ -250,7 +326,8 @@ package memo_examples_gpca_pump_gpca_verification {
         attribute :>> evidenceType = "bench test evidence for alarm-driven safe states";
         attribute :>> integrityStatus = "draft";
     }
-    part evidenceUsability : Evidence {
+    part evidenceUsability : MemoEvidence {
+        attribute :>> evidenceKind = EvidenceKind::evidence;
         attribute :>> id = "EVD-006";
         attribute :>> name = "SummativeUsabilityEvidence";
         attribute :>> version = "0.1";
@@ -258,7 +335,8 @@ package memo_examples_gpca_pump_gpca_verification {
         attribute :>> evidenceType = "summative usability report per IEC 62366-1";
         attribute :>> integrityStatus = "draft";
     }
-    part evidenceHardwareBench : Evidence {
+    part evidenceHardwareBench : MemoEvidence {
+        attribute :>> evidenceKind = EvidenceKind::evidence;
         attribute :>> id = "EVD-008";
         attribute :>> name = "HardwareBenchEvidence";
         attribute :>> version = "0.1";
@@ -266,7 +344,8 @@ package memo_examples_gpca_pump_gpca_verification {
         attribute :>> evidenceType = "bench evidence for alarm loudness and anti-free-flow valve";
         attribute :>> integrityStatus = "draft";
     }
-    part evidenceDoseProgramming : Evidence {
+    part evidenceDoseProgramming : MemoEvidence {
+        attribute :>> evidenceKind = EvidenceKind::evidence;
         attribute :>> id = "EVD-009";
         attribute :>> name = "DoseProgrammingEvidence";
         attribute :>> version = "0.1";
@@ -274,7 +353,8 @@ package memo_examples_gpca_pump_gpca_verification {
         attribute :>> evidenceType = "test evidence for prescription limits, confirmation, dose ceiling, and event log";
         attribute :>> integrityStatus = "draft";
     }
-    part evidenceDeliveryAccuracy : Evidence {
+    part evidenceDeliveryAccuracy : MemoEvidence {
+        attribute :>> evidenceKind = EvidenceKind::evidence;
         attribute :>> id = "EVD-007";
         attribute :>> name = "DeliveryAccuracyEvidence";
         attribute :>> version = "0.1";

package/examples/gpca-pump/model/catalog/project.sysml

@@ -17,5 +17,10 @@ package memo_examples_gpca_pump_project {
         ref :>> selectedMethodology = gpcaMethodDefinition;
         // The project adds nothing to the methodology's selection.
         attribute :>> scopeMode = ScopeModeKind::explicit;
+        // The submission regimes this device targets. `memo standards check`
+        // reads this to decide which standards are required: an EU + US launch
+        // pulls in both the harmonised IEC/ISO packs and 21 CFR Part 820,
+        // where a CE-only project would not be asked for the FDA clauses.
+        attribute :>> regulatoryRegime = (RegulatoryRegimeKind::CE, RegulatoryRegimeKind::MDR, RegulatoryRegimeKind::FDA_510k);
     }
 }

package/examples/gpca-pump/model/catalog/viewpoints/context/views/context_system_context_view.sysml

@@ -33,7 +33,7 @@ package memo_examples_gpca_pump_viewpoints_context_views_context_system_context_
             attribute :>> id = "QRY-CTX-101";
             attribute :>> name = "GPCA_SystemContextQuery";
             attribute :>> includeElementKinds = ("Actor", "UseContext", "IntendedUse", "ReasonablyForeseeableMisuse", "OperationalEntity");
-            attribute :>> includeRelationshipKinds = ("InteractsWith", "ExchangesWith", "ConnectsPhysically", "Governs", "AppliesInContext");
+            attribute :>> includeRelationshipKinds = ("InteractsWith", "flow", "connect", "Governs", "AppliesInContext");
             attribute :>> includeLayers = ("context", "operational");
             attribute :>> selectionExpression = "product == 'GPCA'";
             attribute :>> rationaleText = "Auto-populate the GPCA context view from the context layer.";

package/examples/gpca-pump/model/catalog/viewpoints/cybersecurity/views/cybersecurity_cybersecurity_view.sysml

@@ -33,7 +33,7 @@ package memo_examples_gpca_pump_viewpoints_cybersecurity_views_cybersecurity_cyb
         part :>> selectionQuery {
             attribute :>> id = "QRY-CYB-001";
             attribute :>> name = "GPCA_CybersecurityQuery";
-            attribute :>> includeElementKinds = ("CybersecurityAsset", "Threat", "Vulnerability", "CyberHazard", "CyberRisk", "CyberMitigation", "SecurityRequirement", "TrustBoundary", "ThreatScenario");
+            attribute :>> includeElementKinds = ("CybersecurityAsset", "Threat", "Vulnerability", "CyberHazard", "CyberRisk", "CyberMitigation", "SecurityRequirement", "TrustBoundary", "MemoScenario[scenarioKind=threat]");
             attribute :>> includeLayers = ("cybersecurity", "risk", "assurance");
             attribute :>> includeConcerns = (ConcernKind::cybersecurity, ConcernKind::privacy, ConcernKind::safety);
             attribute :>> selectionExpression = "product == 'GPCA'";

package/examples/gpca-pump/model/catalog/viewpoints/cybersecurity/views/document_threat_model_view.sysml

@@ -22,7 +22,7 @@ package memo_examples_gpca_pump_viewpoints_cybersecurity_views_document_threat_m
         part :>> selectionQuery {
             attribute :>> id = "QRY-DOC-008";
             attribute :>> name = "threatModelViewQuery";
-            attribute :>> includeElementKinds = ("Threat", "ThreatScenario", "Vulnerability", "CybersecurityAsset", "TrustBoundary", "AttackSurface", "CyberMitigation", "SecurityRequirement");
+            attribute :>> includeElementKinds = ("Threat", "MemoScenario[scenarioKind=threat]", "Vulnerability", "CybersecurityAsset", "TrustBoundary", "AttackSurface", "CyberMitigation", "SecurityRequirement");
             attribute :>> includeRelationshipKinds = ("ThreatenedBy", "Exploits", "RealizedByScenario", "CrossesTrustBoundary", "Mitigates", "DerivesCyberRequirement");
             attribute :>> rationaleText = "Declares what this document-backed view renders; the web renderer is presentation-only.";
         }

package/examples/gpca-pump/model/catalog/viewpoints/logical/views/document_architecture_description_view.sysml

@@ -28,7 +28,7 @@ package memo_examples_gpca_pump_viewpoints_logical_views_document_architecture_d
             attribute :>> id = "QRY-DOC-005";
             attribute :>> name = "architectureDescriptionViewQuery";
             attribute :>> includeElementKinds = ("LogicalComponent", "SystemFunction", "ComponentExchange", "SoftwareSystem", "SoftwareModule", "HardwareAssembly", "ProcessingNode", "PhysicalPort", "FunctionalFlow", "FunctionalFlowStep");
-            attribute :>> includeRelationshipKinds = ("Composes", "AllocatedTo", "Realizes", "BindsToInterface", "InvolvesFunction", "Precedes", "DeploysTo", "HostedBy");
+            attribute :>> includeRelationshipKinds = ("Composes", "AllocatedTo", "Realizes", "BindsToInterface", "Performs", "Succession", "DeploysTo", "HostedBy");
             attribute :>> rationaleText = "Declares what this document-backed view renders; the web renderer is presentation-only.";
         }
     }

package/examples/gpca-pump/model/catalog/viewpoints/logical/views/logical_device_interconnect_view.sysml

@@ -25,7 +25,7 @@ package memo_examples_gpca_pump_viewpoints_logical_views_logical_device_intercon
         attribute :>> presentationKind = (PresentationKind::internalDiagram);
         attribute :>> viewKind = DiagramViewKind::interconnection;
         attribute :>> diagramType = "ibd";
-        attribute :>> dataSourceDescription = "GPCA hardware assemblies, software system, software components, boundary ports, and the ExchangesWith/Composes topology";
+        attribute :>> dataSourceDescription = "GPCA hardware assemblies, software system, software components, boundary ports, and the flow/bind/Composes topology";
         attribute :>> autoPopulate = true;
         attribute :>> queryDescription = "Include hardware assemblies, the software system with its components and boundary ports, and the exchange topology between them.";
         attribute :>> documentUsage = ("SDD", "Architecture Description", "QMSR");
@@ -33,7 +33,7 @@ package memo_examples_gpca_pump_viewpoints_logical_views_logical_device_intercon
             attribute :>> id = "QRY-LOG-003";
             attribute :>> name = "GPCA_DeviceInterconnectQuery";
             attribute :>> includeElementIds = ("gpcaDevice", "gpcaDeviceSensors", "gpcaSoftware", "gpcaActuators", "devOpCmdIn", "devDbIn", "devPresIn", "devPatientIn", "devGpcaOut", "snsOpCmdIn", "snsDbIn", "snsPresIn", "snsPatientIn", "snsOpCmdOut", "snsPresOut", "snsPatientOut", "snsSensorOut", "snsConstOut", "snsDbOut", "portOpCmdIn", "portPresIn", "portPatientIn", "portSensorIn", "portConstIn", "portDbIn", "portGpcaSwOut", "actGpcaSwIn", "actGpcaOut", "tlm", "systemStatus", "alarm", "config", "infusionMgr", "systemMonitor", "logging", "outputBus");
-            attribute :>> includeRelationshipKinds = ("ExchangesWith", "Composes");
+            attribute :>> includeRelationshipKinds = ("flow", "bind", "Composes");
             attribute :>> includeLayers = ("logical_structure", "software_structure", "interfaces");
             attribute :>> selectionExpression = "product == 'GPCA'";
             attribute :>> rationaleText = "Render the device interconnect: parts with boundary ports as nodes, AADL connections as typed connectors, composition as nesting.";

package/examples/gpca-pump/model/catalog/viewpoints/logical/views/logical_mode_state_view.sysml

@@ -32,7 +32,7 @@ package memo_examples_gpca_pump_viewpoints_logical_views_logical_mode_state_view
         part :>> selectionQuery {
             attribute :>> id = "QRY-BHV-101";
             attribute :>> name = "GPCA_ModeStateQuery";
-            attribute :>> includeElementKinds = ("StateMachine", "ModeState", "Transition", "BehaviorProperty", "TimingConstraint");
+            attribute :>> includeElementKinds = ("StateMachine", "MemoState[stateKind=mode]", "Transition", "BehaviorProperty", "TimingConstraint");
             attribute :>> includeLayers = ("behavior");
             attribute :>> selectionExpression = "product == 'GPCA'";
             attribute :>> rationaleText = "Auto-populate the mode state view from the behavior layer.";

package/examples/gpca-pump/model/catalog/viewpoints/operational/views/operational_scenario_sequence_view.sysml

@@ -31,7 +31,7 @@ package memo_examples_gpca_pump_viewpoints_operational_views_operational_scenari
         part :>> selectionQuery {
             attribute :>> id = "QRY-BHV-102";
             attribute :>> name = "GPCA_ScenarioSequenceQuery";
-            attribute :>> includeElementKinds = ("FunctionalScenario", "OperativeScenario", "FunctionalFlow", "FunctionalFlowStep");
+            attribute :>> includeElementKinds = ("MemoScenario[scenarioKind=functional]", "MemoScenario[scenarioKind=operative]", "FunctionalFlow", "FunctionalFlowStep");
             attribute :>> includeLayers = ("operational", "system");
             attribute :>> selectionExpression = "product == 'GPCA'";
             attribute :>> rationaleText = "Auto-populate scenario sequences from the system layer.";

package/examples/gpca-pump/model/catalog/viewpoints/operational/views/operational_use_case_view.sysml

@@ -33,7 +33,7 @@ package memo_examples_gpca_pump_viewpoints_operational_views_operational_use_cas
             attribute :>> id = "QRY-OPS-101";
             attribute :>> name = "GPCA_UseCaseQuery";
             attribute :>> includeElementKinds = ("Actor", "User", "UseCase");
-            attribute :>> includeRelationshipKinds = ("Initiates", "ParticipatesIn");
+            attribute :>> includeRelationshipKinds = ("ParticipatesIn");
             attribute :>> includeLayers = ("context", "operational");
             attribute :>> selectionExpression = "product == 'GPCA'";
             attribute :>> rationaleText = "Auto-populate the GPCA use case view from the operational layer.";

package/examples/gpca-pump/model/catalog/viewpoints/requirements/views/document_dhf_index_view.sysml

@@ -27,8 +27,8 @@ package memo_examples_gpca_pump_viewpoints_requirements_views_document_dhf_index
         part :>> selectionQuery {
             attribute :>> id = "QRY-DOC-007";
             attribute :>> name = "dhfIndexViewQuery";
-            attribute :>> includeElementKinds = ("MemoDocumentView", "MemoDiagramView", "MemoUsabilityEngineeringView", "MemoCybersecurityThreatModelView", "MemoCybersecurityAssessmentView", "Evidence", "Citation");
-            attribute :>> includeRelationshipKinds = ("IncludedIn", "ProducesEvidence");
+            attribute :>> includeElementKinds = ("MemoDocumentView", "MemoDiagramView", "MemoUsabilityEngineeringView", "MemoCybersecurityThreatModelView", "MemoCybersecurityAssessmentView", "MemoEvidence", "Citation");
+            attribute :>> includeRelationshipKinds = ("ProducesEvidence");
             attribute :>> rationaleText = "Declares what this document-backed view renders; the web renderer is presentation-only.";
         }
     }

package/examples/gpca-pump/model/catalog/viewpoints/risk/views/document_hazard_analysis_view.sysml

@@ -4,9 +4,12 @@ package memo_examples_gpca_pump_viewpoints_risk_views_document_hazard_analysis_v
     private import memo_viewpoints_definitions::*;
     private import memo_viewpoints_risk_risk_viewpoint::*;
     private import memo_core_enumerations::*;
+    private import memo_examples_gpca_pump_gpca_analysis::*;
 
     view hazardAnalysisView : MemoDocumentView {
         expose memo_examples_gpca_pump_viewpoints_risk_views_document_hazard_analysis_view::*;
+        expose fmeaDelivery;
+        expose ftaOverdose;
         attribute :>> id = "DOC-009";
         attribute :>> name = "HazardAnalysisReportView";
         attribute :>> title = "GPCA Hazard Analysis Report View";
@@ -23,8 +26,8 @@ package memo_examples_gpca_pump_viewpoints_risk_views_document_hazard_analysis_v
         part :>> selectionQuery {
             attribute :>> id = "QRY-DOC-003";
             attribute :>> name = "hazardAnalysisViewQuery";
-            attribute :>> includeElementKinds = ("FMEAWorksheet", "FailureMode", "FailureCause", "FailureEffect", "DetectionMethod", "FMEAAction", "FaultTree", "FaultTreeEvent", "FaultTreeGate", "MinimalCutSet", "Hazard", "HazardCause", "SequenceOfEvents");
-            attribute :>> includeRelationshipKinds = ("HasFailureMode", "Causes", "DetectedBy", "Mitigates", "InputToGate", "ContainsEvent", "Mitigates", "IncludedIn");
+            attribute :>> includeElementKinds = ("FMEAWorksheet", "FailureMode", "FailureCause", "FailureEffect", "DetectionMethod", "FMEAAction", "FaultTree", "FaultTreeNode", "MinimalCutSet", "Hazard", "HazardCause", "SequenceOfEvents");
+            attribute :>> includeRelationshipKinds = ("HasFailureMode", "Causes", "DetectedBy", "Mitigates", "InputToGate", "ContainsEvent", "Mitigates");
             attribute :>> rationaleText = "Declares what this document-backed view renders; the web renderer is presentation-only.";
         }
     }

package/examples/gpca-pump/model/catalog/viewpoints/risk/views/document_rmf_view.sysml

@@ -4,9 +4,11 @@ package memo_examples_gpca_pump_viewpoints_risk_views_document_rmf_view {
     private import memo_viewpoints_definitions::*;
     private import memo_viewpoints_risk_risk_viewpoint::*;
     private import memo_core_enumerations::*;
+    private import memo_examples_gpca_pump_gpca_verification::*;
 
     view rmfView : MemoDocumentView {
         expose memo_examples_gpca_pump_viewpoints_risk_views_document_rmf_view::*;
+        expose evidenceLockout;
         attribute :>> id = "DOC-001";
         attribute :>> name = "RiskManagementFileView";
         attribute :>> title = "GPCA Risk Management File View";
@@ -23,8 +25,8 @@ package memo_examples_gpca_pump_viewpoints_risk_views_document_rmf_view {
         part :>> selectionQuery {
             attribute :>> id = "QRY-DOC-001";
             attribute :>> name = "rmfViewQuery";
-            attribute :>> includeElementKinds = ("IntendedUse", "ReasonablyForeseeableMisuse", "SafetyRelatedCharacteristic", "Hazard", "HazardCause", "SequenceOfEvents", "HazardousSituation", "Harm", "Risk", "RiskControlMeasure", "ResidualRisk", "Benefit", "OverallResidualRiskEvaluation", "VerificationCase", "Evidence");
-            attribute :>> includeRelationshipKinds = ("Causes", "Mitigates", "Mitigates", "TracesRisk", "AssessedAgainst", "VerifiedBy", "ProducesEvidence", "IncludedIn");
+            attribute :>> includeElementKinds = ("IntendedUse", "ReasonablyForeseeableMisuse", "SafetyRelatedCharacteristic", "Hazard", "HazardCause", "SequenceOfEvents", "HazardousSituation", "Harm", "Risk", "RiskControlMeasure", "ResidualRisk", "Benefit", "OverallResidualRiskEvaluation", "VerificationCase", "MemoEvidence");
+            attribute :>> includeRelationshipKinds = ("Causes", "Mitigates", "Mitigates", "TracesRisk", "AssessedAgainst", "VerifiedBy", "ProducesEvidence");
             attribute :>> rationaleText = "Declares what this document-backed view renders; the web renderer is presentation-only.";
         }
     }

package/examples/gpca-pump/model/catalog/viewpoints/risk/views/risk_fmea_view.sysml

@@ -31,7 +31,7 @@ package memo_examples_gpca_pump_viewpoints_risk_views_risk_fmea_view {
         part :>> selectionQuery {
             attribute :>> id = "QRY-RISK-102";
             attribute :>> name = "GPCA_FmeaQuery";
-            attribute :>> includeElementKinds = ("FMEAWorksheet", "FailureMode", "FailureEffect", "FailureCause", "DetectionMethod", "FMEAAction", "FaultTree", "FaultTreeEvent", "FaultTreeGate", "MinimalCutSet");
+            attribute :>> includeElementKinds = ("FMEAWorksheet", "FailureMode", "FailureEffect", "FailureCause", "DetectionMethod", "FMEAAction", "FaultTree", "FaultTreeNode", "MinimalCutSet");
             attribute :>> includeLayers = ("analysis", "risk");
             attribute :>> includeConcerns = (ConcernKind::safety, ConcernKind::reliability);
             attribute :>> selectionExpression = "product == 'GPCA'";

package/examples/gpca-pump/model/catalog/viewpoints/software/views/document_sdd_view.sysml

@@ -23,7 +23,7 @@ package memo_examples_gpca_pump_viewpoints_software_views_document_sdd_view {
         part :>> selectionQuery {
             attribute :>> id = "QRY-DOC-004";
             attribute :>> name = "sddViewQuery";
-            attribute :>> includeElementKinds = ("SoftwareSystem", "SoftwareModule", "ModeState", "Transition", "Interface", "SystemFunction", "TimingConstraint", "SoftwareModule[moduleKind=soup]");
+            attribute :>> includeElementKinds = ("SoftwareSystem", "SoftwareModule", "MemoState[stateKind=mode]", "Transition", "Interface", "SystemFunction", "TimingConstraint", "SoftwareModule[moduleKind=soup]");
             attribute :>> includeRelationshipKinds = ("Composes", "AllocatedTo", "BindsToInterface", "Realizes", "DependsOnSoup", "Changes");
             attribute :>> rationaleText = "Declares what this document-backed view renders; the web renderer is presentation-only.";
         }

package/examples/gpca-pump/model/catalog/viewpoints/software/views/software_software_architecture_view.sysml

@@ -27,13 +27,13 @@ package memo_examples_gpca_pump_viewpoints_software_views_software_software_arch
         attribute :>> diagramType = "ibd";
         attribute :>> dataSourceDescription = "GPCA software structure, top-level ports, and the GPCA_SW.Impl connection set (CE-101..CE-142)";
         attribute :>> autoPopulate = true;
-        attribute :>> queryDescription = "Include the software system, its eight components, its boundary ports, and the ExchangesWith topology between them.";
+        attribute :>> queryDescription = "Include the software system, its eight components, its boundary ports, and the flow and delegation topology between them.";
         attribute :>> documentUsage = ("SDD", "QMSR");
         part :>> selectionQuery {
             attribute :>> id = "QRY-SW-101";
             attribute :>> name = "GPCA_SoftwareArchitectureQuery";
             attribute :>> includeElementKinds = ("SoftwareSystem", "SoftwareModule", "SoftwarePort");
-            attribute :>> includeRelationshipKinds = ("ExchangesWith", "Composes");
+            attribute :>> includeRelationshipKinds = ("flow", "bind", "Composes");
             attribute :>> includeLayers = ("software_structure", "interfaces");
             attribute :>> selectionExpression = "product == 'GPCA'";
             attribute :>> rationaleText = "Render the real GPCA_SW.Impl topology: components and boundary ports as nodes, AADL connections as edges.";

package/examples/gpca-pump/model/catalog/viewpoints/usability/views/document_usability_view.sysml

@@ -5,9 +5,11 @@ package memo_examples_gpca_pump_viewpoints_usability_views_document_usability_vi
     private import memo_viewpoints_usability_views_usability_engineering_view::*;
     private import memo_viewpoints_usability_usability_viewpoint::*;
     private import memo_core_enumerations::*;
+    private import memo_examples_gpca_pump_gpca_verification::*;
 
     view usabilityView : MemoUsabilityEngineeringView {
         expose memo_examples_gpca_pump_viewpoints_usability_views_document_usability_view::*;
+        expose evidenceUsability;
         attribute :>> id = "DOC-008";
         attribute :>> name = "UsabilityEngineeringFileView";
         attribute :>> title = "GPCA Usability Engineering File View";
@@ -22,8 +24,8 @@ package memo_examples_gpca_pump_viewpoints_usability_views_document_usability_vi
         part :>> selectionQuery {
             attribute :>> id = "QRY-DOC-002";
             attribute :>> name = "usabilityViewQuery";
-            attribute :>> includeElementKinds = ("UseError", "UseContext", "Actor", "ValidationCase", "OperativeScenario", "IntendedUse", "ReasonablyForeseeableMisuse");
-            attribute :>> includeRelationshipKinds = ("TestedByUsability", "RealizedByScenario", "InteractsWith", "IncludedIn");
+            attribute :>> includeElementKinds = ("UseError", "UseContext", "Actor", "ValidationCase", "MemoScenario[scenarioKind=operative]", "IntendedUse", "ReasonablyForeseeableMisuse");
+            attribute :>> includeRelationshipKinds = ("TestedByUsability", "RealizedByScenario", "InteractsWith");
             attribute :>> rationaleText = "Declares what this document-backed view renders; the web renderer is presentation-only.";
         }
     }