@memoarchitect/ontology 0.7.0 → 0.8.22

package/examples/nested-architecture-dsm/model/catalog/architecture/logical/structure.sysml

@@ -1,15 +1,16 @@
 // Logical structure — the column axis of the DSM.
 //
 // Four levels deep on purpose (System → Subsystem → Subsystem → component),
-// so expanding and collapsing the matrix has something real to do. Nesting is
-// declared with Composes rather than left implicit, which is what the DSM
-// reads to build the column tree.
+// so expanding and collapsing the matrix has something real to do. Containment
+// is native nesting; the builder synthesizes the `composes` relationship the
+// DSM reads to build the column tree, so no explicit Composes edge is written.
 package memo_examples_nested_architecture_dsm_architecture_logical_structure {
     private import ScalarValues::*;
 
     private import memo_core_enumerations::*;
     private import memo_core_relationships::*;
     private import memo_architecture_logical_structure::*;
+    private import memo_architecture_operational_context_use_context::*;
 
     // ── Level 0: the system ──────────────────────────────────────
     part sysTherapyDelivery : System {
@@ -18,166 +19,147 @@ package memo_examples_nested_architecture_dsm_architecture_logical_structure {
         attribute :>> systemType = SystemTypeKind::logical;
         attribute :>> systemBoundaryDescription = "Everything inside the pump enclosure, including its power path and user interface.";
         attribute :>> responsibility = "Deliver a prescribed infusion safely and report what it delivered.";
-    }
 
-    // ── Level 1: subsystems ──────────────────────────────────────
-    part subFluidPath : Subsystem {
-        attribute :>> id = "NDS-SUB-001"; attribute :>> name = "FluidPathSubsystem";
-        attribute :>> componentRole = ComponentRoleKind::generic;
-        attribute :>> systemType = SystemTypeKind::hardware;
-        attribute :>> responsibility = "Move fluid from the reservoir to the patient line at a commanded rate.";
-    }
-    part subControl : Subsystem {
-        attribute :>> id = "NDS-SUB-002"; attribute :>> name = "ControlSubsystem";
-        attribute :>> componentRole = ComponentRoleKind::controlElement;
-        attribute :>> systemType = SystemTypeKind::software;
-        attribute :>> responsibility = "Decide what the fluid path should do, and hold the therapy state.";
-    }
-    part subUserInterface : Subsystem {
-        attribute :>> id = "NDS-SUB-003"; attribute :>> name = "UserInterfaceSubsystem";
-        attribute :>> componentRole = ComponentRoleKind::userInterface;
-        attribute :>> systemType = SystemTypeKind::software;
-        attribute :>> responsibility = "Present therapy state to the clinician and accept their input.";
-    }
-    part subPower : Subsystem {
-        attribute :>> id = "NDS-SUB-004"; attribute :>> name = "PowerSubsystem";
-        attribute :>> componentRole = ComponentRoleKind::generic;
-        attribute :>> systemType = SystemTypeKind::hardware;
-        attribute :>> responsibility = "Supply and monitor power across mains and battery operation.";
-    }
+        // ── Level 1: subsystems ──────────────────────────────────
+        part subFluidPath : Subsystem {
+            attribute :>> id = "NDS-SUB-001"; attribute :>> name = "FluidPathSubsystem";
+            attribute :>> componentRole = ComponentRoleKind::generic;
+            attribute :>> systemType = SystemTypeKind::hardware;
+            attribute :>> responsibility = "Move fluid from the reservoir to the patient line at a commanded rate.";
 
-    connection : Composes connect parent ::> sysTherapyDelivery to child ::> subFluidPath;
-    connection : Composes connect parent ::> sysTherapyDelivery to child ::> subControl;
-    connection : Composes connect parent ::> sysTherapyDelivery to child ::> subUserInterface;
-    connection : Composes connect parent ::> sysTherapyDelivery to child ::> subPower;
+            // ── Level 2/3: components ─────────────────────────────
+            part lcPumpMechanism : LogicalComponent {
+                attribute :>> id = "NDS-LC-001"; attribute :>> name = "PumpMechanism";
+                attribute :>> componentRole = ComponentRoleKind::controlElement;
+                attribute :>> systemType = SystemTypeKind::hardware;
+                attribute :>> responsibility = "Displace fluid under command.";
+                attribute :>> controlledVariable = "delivered volume per stroke";
+            }
+            part lcOcclusionChannel : LogicalComponent {
+                attribute :>> id = "NDS-LC-002"; attribute :>> name = "OcclusionSensingChannel";
+                attribute :>> componentRole = ComponentRoleKind::channel;
+                attribute :>> systemType = SystemTypeKind::hardware;
+                attribute :>> responsibility = "Sense line pressure and air in line.";
+                attribute :>> channelRole = ChannelRoleKind::primary;
+            }
+            part lcReservoirInterface : LogicalComponent {
+                attribute :>> id = "NDS-LC-003"; attribute :>> name = "ReservoirInterface";
+                attribute :>> componentRole = ComponentRoleKind::generic;
+                attribute :>> systemType = SystemTypeKind::hardware;
+                attribute :>> responsibility = "Seat the reservoir and expose its remaining volume.";
+            }
+        }
+        part subControl : Subsystem {
+            attribute :>> id = "NDS-SUB-002"; attribute :>> name = "ControlSubsystem";
+            attribute :>> componentRole = ComponentRoleKind::controlElement;
+            attribute :>> systemType = SystemTypeKind::software;
+            attribute :>> responsibility = "Decide what the fluid path should do, and hold the therapy state.";
 
-    // ── Level 2: a subsystem inside a subsystem ──────────────────
-    // The safety monitor is nested one level deeper than its peers, which is
-    // what makes a collapsed ControlSubsystem row a genuine roll-up rather
-    // than a rename of its children.
-    part subSafetyMonitor : Subsystem {
-        attribute :>> id = "NDS-SUB-005"; attribute :>> name = "SafetyMonitorSubsystem";
-        attribute :>> componentRole = ComponentRoleKind::channel;
-        attribute :>> systemType = SystemTypeKind::software;
-        attribute :>> responsibility = "Watch the control path from outside it and stop delivery on breach.";
-        attribute :>> safetyPartition = "monitor partition, separate MPU region from the control partition";
-    }
-    connection : Composes connect parent ::> subControl to child ::> subSafetyMonitor;
+            // ── Level 2: a subsystem inside a subsystem ───────────
+            // The safety monitor is nested one level deeper than its peers,
+            // which is what makes a collapsed ControlSubsystem row a genuine
+            // roll-up rather than a rename of its children.
+            part subSafetyMonitor : Subsystem {
+                attribute :>> id = "NDS-SUB-005"; attribute :>> name = "SafetyMonitorSubsystem";
+                attribute :>> componentRole = ComponentRoleKind::channel;
+                attribute :>> systemType = SystemTypeKind::software;
+                attribute :>> responsibility = "Watch the control path from outside it and stop delivery on breach.";
+                attribute :>> safetyPartition = "monitor partition, separate MPU region from the control partition";
 
-    // ── Level 2/3: components ────────────────────────────────────
-    part lcPumpMechanism : LogicalComponent {
-        attribute :>> id = "NDS-LC-001"; attribute :>> name = "PumpMechanism";
-        attribute :>> componentRole = ComponentRoleKind::controlElement;
-        attribute :>> systemType = SystemTypeKind::hardware;
-        attribute :>> responsibility = "Displace fluid under command.";
-        attribute :>> controlledVariable = "delivered volume per stroke";
-    }
-    part lcOcclusionChannel : LogicalComponent {
-        attribute :>> id = "NDS-LC-002"; attribute :>> name = "OcclusionSensingChannel";
-        attribute :>> componentRole = ComponentRoleKind::channel;
-        attribute :>> systemType = SystemTypeKind::hardware;
-        attribute :>> responsibility = "Sense line pressure and air in line.";
-        attribute :>> channelRole = ChannelRoleKind::primary;
-    }
-    part lcReservoirInterface : LogicalComponent {
-        attribute :>> id = "NDS-LC-003"; attribute :>> name = "ReservoirInterface";
-        attribute :>> componentRole = ComponentRoleKind::generic;
-        attribute :>> systemType = SystemTypeKind::hardware;
-        attribute :>> responsibility = "Seat the reservoir and expose its remaining volume.";
-    }
-    connection : Composes connect parent ::> subFluidPath to child ::> lcPumpMechanism;
-    connection : Composes connect parent ::> subFluidPath to child ::> lcOcclusionChannel;
-    connection : Composes connect parent ::> subFluidPath to child ::> lcReservoirInterface;
+                part lcWatchdogChannel : LogicalComponent {
+                    attribute :>> id = "NDS-LC-006"; attribute :>> name = "WatchdogChannel";
+                    attribute :>> componentRole = ComponentRoleKind::channel;
+                    attribute :>> systemType = SystemTypeKind::software;
+                    attribute :>> responsibility = "Reset to the safe state when the control loop misses its deadline.";
+                    attribute :>> channelRole = ChannelRoleKind::monitor;
+                    attribute :>> diversityBasis = "independent time base from the control partition";
+                }
+                part lcPressureIntegrityChannel : LogicalComponent {
+                    attribute :>> id = "NDS-LC-007"; attribute :>> name = "PressureIntegrityChannel";
+                    attribute :>> componentRole = ComponentRoleKind::channel;
+                    attribute :>> systemType = SystemTypeKind::software;
+                    attribute :>> responsibility = "Cross-check pressure against the commanded rate and stop on divergence.";
+                    attribute :>> channelRole = ChannelRoleKind::monitor;
+                    attribute :>> diversityBasis = "different measurement principle from the primary occlusion channel";
+                }
+            }
+            part lcDoseController : LogicalComponent {
+                attribute :>> id = "NDS-LC-004"; attribute :>> name = "DoseController";
+                attribute :>> componentRole = ComponentRoleKind::controlElement;
+                attribute :>> systemType = SystemTypeKind::software;
+                attribute :>> responsibility = "Turn a prescription into rate commands.";
+                attribute :>> controlLaw = "closed loop on delivered volume, saturated at the prescribed limit";
+                attribute :>> controlledVariable = "infusion rate";
+            }
+            part lcTherapyStateStore : LogicalComponent {
+                attribute :>> id = "NDS-LC-005"; attribute :>> name = "TherapyStateStore";
+                attribute :>> componentRole = ComponentRoleKind::dataStore;
+                attribute :>> systemType = SystemTypeKind::software;
+                attribute :>> responsibility = "Hold the active therapy record across power cycles.";
+                attribute :>> persistenceRequirement = "survives power loss with the last completed transaction intact";
+                attribute :>> integrityRequirement = "CRC per record, rejected on mismatch";
+            }
+        }
+        part subUserInterface : Subsystem {
+            attribute :>> id = "NDS-SUB-003"; attribute :>> name = "UserInterfaceSubsystem";
+            attribute :>> componentRole = ComponentRoleKind::userInterface;
+            attribute :>> systemType = SystemTypeKind::software;
+            attribute :>> responsibility = "Present therapy state to the clinician and accept their input.";
 
-    part lcDoseController : LogicalComponent {
-        attribute :>> id = "NDS-LC-004"; attribute :>> name = "DoseController";
-        attribute :>> componentRole = ComponentRoleKind::controlElement;
-        attribute :>> systemType = SystemTypeKind::software;
-        attribute :>> responsibility = "Turn a prescription into rate commands.";
-        attribute :>> controlLaw = "closed loop on delivered volume, saturated at the prescribed limit";
-        attribute :>> controlledVariable = "infusion rate";
-    }
-    part lcTherapyStateStore : LogicalComponent {
-        attribute :>> id = "NDS-LC-005"; attribute :>> name = "TherapyStateStore";
-        attribute :>> componentRole = ComponentRoleKind::dataStore;
-        attribute :>> systemType = SystemTypeKind::software;
-        attribute :>> responsibility = "Hold the active therapy record across power cycles.";
-        attribute :>> persistenceRequirement = "survives power loss with the last completed transaction intact";
-        attribute :>> integrityRequirement = "CRC per record, rejected on mismatch";
-    }
-    connection : Composes connect parent ::> subControl to child ::> lcDoseController;
-    connection : Composes connect parent ::> subControl to child ::> lcTherapyStateStore;
+            part lcDisplayManager : LogicalComponent {
+                attribute :>> id = "NDS-LC-008"; attribute :>> name = "DisplayManager";
+                attribute :>> componentRole = ComponentRoleKind::userInterface;
+                attribute :>> systemType = SystemTypeKind::software;
+                attribute :>> responsibility = "Render therapy state on the main screen.";
+                attribute :>> interactionSummary = "read-only status surface, refreshed once per second";
+            }
+            part lcAlarmAnnunciator : LogicalComponent {
+                attribute :>> id = "NDS-LC-009"; attribute :>> name = "AlarmAnnunciator";
+                attribute :>> componentRole = ComponentRoleKind::userInterface;
+                attribute :>> systemType = SystemTypeKind::software;
+                attribute :>> responsibility = "Raise audible and visible alarms by priority.";
+                attribute :>> interactionSummary = "IEC 60601-1-8 alarm signals";
+            }
+            part lcKeypadHandler : LogicalComponent {
+                attribute :>> id = "NDS-LC-010"; attribute :>> name = "KeypadHandler";
+                attribute :>> componentRole = ComponentRoleKind::userInterface;
+                attribute :>> systemType = SystemTypeKind::software;
+                attribute :>> responsibility = "Debounce and interpret key presses.";
+                attribute :>> interactionSummary = "physical keypad, confirm-before-apply for every rate change";
+            }
+        }
+        part subPower : Subsystem {
+            attribute :>> id = "NDS-SUB-004"; attribute :>> name = "PowerSubsystem";
+            attribute :>> componentRole = ComponentRoleKind::generic;
+            attribute :>> systemType = SystemTypeKind::hardware;
+            attribute :>> responsibility = "Supply and monitor power across mains and battery operation.";
 
-    part lcWatchdogChannel : LogicalComponent {
-        attribute :>> id = "NDS-LC-006"; attribute :>> name = "WatchdogChannel";
-        attribute :>> componentRole = ComponentRoleKind::channel;
-        attribute :>> systemType = SystemTypeKind::software;
-        attribute :>> responsibility = "Reset to the safe state when the control loop misses its deadline.";
-        attribute :>> channelRole = ChannelRoleKind::monitor;
-        attribute :>> diversityBasis = "independent time base from the control partition";
-    }
-    part lcPressureIntegrityChannel : LogicalComponent {
-        attribute :>> id = "NDS-LC-007"; attribute :>> name = "PressureIntegrityChannel";
-        attribute :>> componentRole = ComponentRoleKind::channel;
-        attribute :>> systemType = SystemTypeKind::software;
-        attribute :>> responsibility = "Cross-check pressure against the commanded rate and stop on divergence.";
-        attribute :>> channelRole = ChannelRoleKind::monitor;
-        attribute :>> diversityBasis = "different measurement principle from the primary occlusion channel";
-    }
-    connection : Composes connect parent ::> subSafetyMonitor to child ::> lcWatchdogChannel;
-    connection : Composes connect parent ::> subSafetyMonitor to child ::> lcPressureIntegrityChannel;
+            part lcBatteryManager : LogicalComponent {
+                attribute :>> id = "NDS-LC-011"; attribute :>> name = "BatteryManager";
+                attribute :>> componentRole = ComponentRoleKind::generic;
+                attribute :>> systemType = SystemTypeKind::hardware;
+                attribute :>> responsibility = "Charge, gauge and protect the battery.";
+            }
+            part lcPowerRailMonitor : LogicalComponent {
+                attribute :>> id = "NDS-LC-012"; attribute :>> name = "PowerRailMonitor";
+                attribute :>> componentRole = ComponentRoleKind::channel;
+                attribute :>> systemType = SystemTypeKind::hardware;
+                attribute :>> responsibility = "Detect rail brownout and request a source switch.";
+                attribute :>> channelRole = ChannelRoleKind::monitor;
+            }
+        }
 
-    part lcDisplayManager : LogicalComponent {
-        attribute :>> id = "NDS-LC-008"; attribute :>> name = "DisplayManager";
-        attribute :>> componentRole = ComponentRoleKind::userInterface;
-        attribute :>> systemType = SystemTypeKind::software;
-        attribute :>> responsibility = "Render therapy state on the main screen.";
-        attribute :>> interactionSummary = "read-only status surface, refreshed once per second";
-    }
-    part lcAlarmAnnunciator : LogicalComponent {
-        attribute :>> id = "NDS-LC-009"; attribute :>> name = "AlarmAnnunciator";
-        attribute :>> componentRole = ComponentRoleKind::userInterface;
-        attribute :>> systemType = SystemTypeKind::software;
-        attribute :>> responsibility = "Raise audible and visible alarms by priority.";
-        attribute :>> interactionSummary = "IEC 60601-1-8 alarm signals";
-    }
-    part lcKeypadHandler : LogicalComponent {
-        attribute :>> id = "NDS-LC-010"; attribute :>> name = "KeypadHandler";
-        attribute :>> componentRole = ComponentRoleKind::userInterface;
-        attribute :>> systemType = SystemTypeKind::software;
-        attribute :>> responsibility = "Debounce and interpret key presses.";
-        attribute :>> interactionSummary = "physical keypad, confirm-before-apply for every rate change";
+        // ── Component-to-component dependency ─────────────────────
+        // What the DSM plots when both axes are architecture: who needs whom.
+        flow from subFluidPath.lcOcclusionChannel to subControl.lcDoseController;
+        flow from subControl.lcDoseController to subFluidPath.lcPumpMechanism;
+        flow from subFluidPath.lcPumpMechanism to subControl.lcTherapyStateStore;
+        flow from subControl.lcTherapyStateStore to subUserInterface.lcDisplayManager;
+        flow from subControl.subSafetyMonitor.lcWatchdogChannel to subControl.lcDoseController;
+        flow from subControl.subSafetyMonitor.lcPressureIntegrityChannel to subUserInterface.lcAlarmAnnunciator;
+        flow from subUserInterface.lcKeypadHandler to subControl.lcDoseController;
+        flow from subFluidPath.lcReservoirInterface to subFluidPath.lcPumpMechanism;
+        flow from subPower.lcBatteryManager to subPower.lcPowerRailMonitor;
+        flow from subPower.lcPowerRailMonitor to subUserInterface.lcAlarmAnnunciator;
     }
-    connection : Composes connect parent ::> subUserInterface to child ::> lcDisplayManager;
-    connection : Composes connect parent ::> subUserInterface to child ::> lcAlarmAnnunciator;
-    connection : Composes connect parent ::> subUserInterface to child ::> lcKeypadHandler;
-
-    part lcBatteryManager : LogicalComponent {
-        attribute :>> id = "NDS-LC-011"; attribute :>> name = "BatteryManager";
-        attribute :>> componentRole = ComponentRoleKind::generic;
-        attribute :>> systemType = SystemTypeKind::hardware;
-        attribute :>> responsibility = "Charge, gauge and protect the battery.";
-    }
-    part lcPowerRailMonitor : LogicalComponent {
-        attribute :>> id = "NDS-LC-012"; attribute :>> name = "PowerRailMonitor";
-        attribute :>> componentRole = ComponentRoleKind::channel;
-        attribute :>> systemType = SystemTypeKind::hardware;
-        attribute :>> responsibility = "Detect rail brownout and request a source switch.";
-        attribute :>> channelRole = ChannelRoleKind::monitor;
-    }
-    connection : Composes connect parent ::> subPower to child ::> lcBatteryManager;
-    connection : Composes connect parent ::> subPower to child ::> lcPowerRailMonitor;
-
-    // ── Component-to-component dependency ────────────────────────
-    // What the DSM plots when both axes are architecture: who needs whom.
-    connection : ExchangesWith connect source ::> lcOcclusionChannel to target ::> lcDoseController;
-    connection : ExchangesWith connect source ::> lcDoseController to target ::> lcPumpMechanism;
-    connection : ExchangesWith connect source ::> lcPumpMechanism to target ::> lcTherapyStateStore;
-    connection : ExchangesWith connect source ::> lcTherapyStateStore to target ::> lcDisplayManager;
-    connection : ExchangesWith connect source ::> lcWatchdogChannel to target ::> lcDoseController;
-    connection : ExchangesWith connect source ::> lcPressureIntegrityChannel to target ::> lcAlarmAnnunciator;
-    connection : ExchangesWith connect source ::> lcKeypadHandler to target ::> lcDoseController;
-    connection : ExchangesWith connect source ::> lcReservoirInterface to target ::> lcPumpMechanism;
-    connection : ExchangesWith connect source ::> lcBatteryManager to target ::> lcPowerRailMonitor;
-    connection : ExchangesWith connect source ::> lcPowerRailMonitor to target ::> lcAlarmAnnunciator;
 }

package/examples/nested-architecture-dsm/model/catalog/assurance/verification_validation/verification_validation.sysml

@@ -2,6 +2,7 @@
 // the traceability matrix (function → verification case).
 package memo_examples_nested_architecture_dsm_assurance_verification_validation {
     private import ScalarValues::*;
+    private import memo_core_dimensions::*;   // ElementStatusKind
 
     private import memo_core_enumerations::*;
     private import memo_core_relationships::*;
@@ -13,78 +14,100 @@ package memo_examples_nested_architecture_dsm_assurance_verification_validation
         attribute :>> id = "NDS-VER-001"; attribute :>> name = "VerifyDoseAccuracy";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Gravimetric delivery over 60 minutes is within ±5% of the prescribed volume at 1, 25 and 999 mL/h.";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqDoseAccuracy; }
+        subject verified : Base::Anything[*] = (fnDeliverTherapy, fnDeliverTherapy.fnMeterFluid, fnDeliverTherapy.fnMeterFluid.fnDriveActuator, fnDeliverTherapy.fnMeterFluid.fnMeasureDelivered, fnDeliverTherapy.fnControlDose, fnDeliverTherapy.fnControlDose.fnComputeRate);
     }
     verification vcOcclusionResponse : VerificationCase {
         attribute :>> id = "NDS-VER-002"; attribute :>> name = "VerifyOcclusionResponse";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Delivery stops within 2 s of the occlusion threshold being crossed, at every supported rate.";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqOcclusionDetection; }
+        subject verified : Base::Anything[*] = (fnEnsureSafety, fnEnsureSafety.fnDetectOcclusion, fnEnsureSafety.fnEnforceDoseLimits);
     }
     verification vcAirInLineResponse : VerificationCase {
         attribute :>> id = "NDS-VER-003"; attribute :>> name = "VerifyAirInLineResponse";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "A 0.1 mL air bolus stops delivery and raises a high-priority alarm.";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqAirInLine; }
+        subject verified : Base::Anything[*] = (fnEnsureSafety.fnDetectAirInLine);
     }
     verification vcAlarmSignals : VerificationCase {
         attribute :>> id = "NDS-VER-004"; attribute :>> name = "VerifyAlarmSignals";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Alarm signals conform to IEC 60601-1-8 for every priority, and persist until cleared or acknowledged.";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqAlarmAnnunciation; }
+        subject verified : Base::Anything[*] = (fnInformUser.fnAnnunciateAlarm);
     }
     verification vcBatteryEndurance : VerificationCase {
         attribute :>> id = "NDS-VER-005"; attribute :>> name = "VerifyBatteryEndurance";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Delivery continues for at least 4 hours at 25 mL/h from a fully charged battery after mains loss.";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqBatteryEndurance; }
+        subject verified : Base::Anything[*] = (fnManagePower, fnManagePower.fnMonitorBattery);
     }
     verification vcConfirmationFlow : VerificationCase {
         attribute :>> id = "NDS-VER-006"; attribute :>> name = "VerifyConfirmationFlow";
         attribute :>> methodKind = VerificationMethodKind::demonstration;
         attribute :>> acceptanceCriteria = "No rate change reaches the controller without an explicit confirmation step.";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqPrescriptionConfirmation; }
+        subject verified : Base::Anything[*] = (fnDeliverTherapy.fnControlDose.fnValidatePrescription, fnInformUser.fnAcceptInput);
     }
     verification vcStatusLegibility : VerificationCase {
         attribute :>> id = "NDS-VER-007"; attribute :>> name = "VerifyStatusLegibility";
         attribute :>> methodKind = VerificationMethodKind::inspection;
         attribute :>> acceptanceCriteria = "Rate and volume delivered are readable at 1 m under 100–1000 lux.";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        objective { verify reqStatusVisibility; }
+        subject verified : Base::Anything[*] = (fnInformUser, fnInformUser.fnRenderStatus);
     }
     verification vcPowerSourceSwitch : VerificationCase {
         attribute :>> id = "NDS-VER-008"; attribute :>> name = "VerifyPowerSourceSwitch";
         attribute :>> methodKind = VerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Rail brownout switches source without interrupting delivery.";
-        attribute :>> status = "planned";
+        attribute :>> status = ElementStatusKind::approved;
+
+        subject verified : Base::Anything[*] = (fnManagePower.fnSelectPowerSource);
     }
 
     // Requirement → verification case.
-    connection verDoseAccuracy : VerifiedBy connect verificationTarget ::> reqDoseAccuracy to verificationCase ::> vcDoseAccuracy;
-    connection verOcclusion : VerifiedBy connect verificationTarget ::> reqOcclusionDetection to verificationCase ::> vcOcclusionResponse;
-    connection verAirInLine : VerifiedBy connect verificationTarget ::> reqAirInLine to verificationCase ::> vcAirInLineResponse;
-    connection verAlarm : VerifiedBy connect verificationTarget ::> reqAlarmAnnunciation to verificationCase ::> vcAlarmSignals;
-    connection verBattery : VerifiedBy connect verificationTarget ::> reqBatteryEndurance to verificationCase ::> vcBatteryEndurance;
-    connection verConfirmation : VerifiedBy connect verificationTarget ::> reqPrescriptionConfirmation to verificationCase ::> vcConfirmationFlow;
-    connection verStatus : VerifiedBy connect verificationTarget ::> reqStatusVisibility to verificationCase ::> vcStatusLegibility;
+
+
+
+
+
+
 
     // Function → verification case, so safety-critical functions carry their
     // own verification rather than inheriting it through a requirement.
-    connection verFnDeliverTherapy : VerifiedBy connect verificationTarget ::> fnDeliverTherapy to verificationCase ::> vcDoseAccuracy;
-    connection verFnMeterFluid : VerifiedBy connect verificationTarget ::> fnMeterFluid to verificationCase ::> vcDoseAccuracy;
-    connection verFnDriveActuator : VerifiedBy connect verificationTarget ::> fnDriveActuator to verificationCase ::> vcDoseAccuracy;
-    connection verFnMeasureDelivered : VerifiedBy connect verificationTarget ::> fnMeasureDelivered to verificationCase ::> vcDoseAccuracy;
-    connection verFnControlDose : VerifiedBy connect verificationTarget ::> fnControlDose to verificationCase ::> vcDoseAccuracy;
-    connection verFnComputeRate : VerifiedBy connect verificationTarget ::> fnComputeRate to verificationCase ::> vcDoseAccuracy;
-    connection verFnValidatePrescription : VerifiedBy connect verificationTarget ::> fnValidatePrescription to verificationCase ::> vcConfirmationFlow;
-    connection verFnEnsureSafety : VerifiedBy connect verificationTarget ::> fnEnsureSafety to verificationCase ::> vcOcclusionResponse;
-    connection verFnDetectOcclusion : VerifiedBy connect verificationTarget ::> fnDetectOcclusion to verificationCase ::> vcOcclusionResponse;
-    connection verFnDetectAirInLine : VerifiedBy connect verificationTarget ::> fnDetectAirInLine to verificationCase ::> vcAirInLineResponse;
-    connection verFnEnforceDoseLimits : VerifiedBy connect verificationTarget ::> fnEnforceDoseLimits to verificationCase ::> vcOcclusionResponse;
-    connection verFnInformUser : VerifiedBy connect verificationTarget ::> fnInformUser to verificationCase ::> vcStatusLegibility;
-    connection verFnRenderStatus : VerifiedBy connect verificationTarget ::> fnRenderStatus to verificationCase ::> vcStatusLegibility;
-    connection verFnAnnunciateAlarm : VerifiedBy connect verificationTarget ::> fnAnnunciateAlarm to verificationCase ::> vcAlarmSignals;
-    connection verFnAcceptInput : VerifiedBy connect verificationTarget ::> fnAcceptInput to verificationCase ::> vcConfirmationFlow;
-    connection verFnManagePower : VerifiedBy connect verificationTarget ::> fnManagePower to verificationCase ::> vcBatteryEndurance;
-    connection verFnMonitorBattery : VerifiedBy connect verificationTarget ::> fnMonitorBattery to verificationCase ::> vcBatteryEndurance;
-    connection verFnSelectPowerSource : VerifiedBy connect verificationTarget ::> fnSelectPowerSource to verificationCase ::> vcPowerSourceSwitch;
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
 }

package/examples/nested-architecture-dsm/model/catalog/traces.sysml

@@ -15,35 +15,34 @@ package memo_examples_nested_architecture_dsm_traces {
     private import memo_examples_nested_architecture_dsm_assurance_requirements::*;
 
     // ── Function → block allocation ──────────────────────────────
-    connection allocDrive : AllocatedTo connect function ::> fnDriveActuator to allocatedElement ::> lcPumpMechanism;
-    connection allocMeasure : AllocatedTo connect function ::> fnMeasureDelivered to allocatedElement ::> lcPumpMechanism;
-    connection allocComputeRate : AllocatedTo connect function ::> fnComputeRate to allocatedElement ::> lcDoseController;
-    connection allocValidate : AllocatedTo connect function ::> fnValidatePrescription to allocatedElement ::> lcDoseController;
-    connection allocOcclusion : AllocatedTo connect function ::> fnDetectOcclusion to allocatedElement ::> lcOcclusionChannel;
-    connection allocAirInLine : AllocatedTo connect function ::> fnDetectAirInLine to allocatedElement ::> lcOcclusionChannel;
+    allocate fnDeliverTherapy.fnMeterFluid.fnDriveActuator to sysTherapyDelivery.subFluidPath.lcPumpMechanism;
+    allocate fnDeliverTherapy.fnMeterFluid.fnMeasureDelivered to sysTherapyDelivery.subFluidPath.lcPumpMechanism;
+    allocate fnDeliverTherapy.fnControlDose.fnComputeRate to sysTherapyDelivery.subControl.lcDoseController;
+    allocate fnDeliverTherapy.fnControlDose.fnValidatePrescription to sysTherapyDelivery.subControl.lcDoseController;
+    allocate fnEnsureSafety.fnDetectOcclusion to sysTherapyDelivery.subFluidPath.lcOcclusionChannel;
+    allocate fnEnsureSafety.fnDetectAirInLine to sysTherapyDelivery.subFluidPath.lcOcclusionChannel;
     // Two channels carry the same protective function — the redundancy shows
     // up in the matrix as two marks on one row.
-    connection allocLimitsWatchdog : AllocatedTo connect function ::> fnEnforceDoseLimits to allocatedElement ::> lcWatchdogChannel;
-    connection allocLimitsPressure : AllocatedTo connect function ::> fnEnforceDoseLimits to allocatedElement ::> lcPressureIntegrityChannel;
-    connection allocRender : AllocatedTo connect function ::> fnRenderStatus to allocatedElement ::> lcDisplayManager;
-    connection allocAlarm : AllocatedTo connect function ::> fnAnnunciateAlarm to allocatedElement ::> lcAlarmAnnunciator;
-    connection allocInput : AllocatedTo connect function ::> fnAcceptInput to allocatedElement ::> lcKeypadHandler;
-    connection allocBattery : AllocatedTo connect function ::> fnMonitorBattery to allocatedElement ::> lcBatteryManager;
-    connection allocPowerSource : AllocatedTo connect function ::> fnSelectPowerSource to allocatedElement ::> lcPowerRailMonitor;
+    allocate fnEnsureSafety.fnEnforceDoseLimits to sysTherapyDelivery.subControl.subSafetyMonitor.lcWatchdogChannel;
+    allocate fnEnsureSafety.fnEnforceDoseLimits to sysTherapyDelivery.subControl.subSafetyMonitor.lcPressureIntegrityChannel;
+    allocate fnInformUser.fnRenderStatus to sysTherapyDelivery.subUserInterface.lcDisplayManager;
+    allocate fnInformUser.fnAnnunciateAlarm to sysTherapyDelivery.subUserInterface.lcAlarmAnnunciator;
+    allocate fnInformUser.fnAcceptInput to sysTherapyDelivery.subUserInterface.lcKeypadHandler;
+    allocate fnManagePower.fnMonitorBattery to sysTherapyDelivery.subPower.lcBatteryManager;
+    allocate fnManagePower.fnSelectPowerSource to sysTherapyDelivery.subPower.lcPowerRailMonitor;
     // A capability allocated at subsystem level rather than to one component:
     // collapsed, it lands in the same cell as its children's allocations.
-    connection allocMeterFluid : AllocatedTo connect function ::> fnMeterFluid to allocatedElement ::> subFluidPath;
-
+    allocate fnDeliverTherapy.fnMeterFluid to sysTherapyDelivery.subFluidPath;
     // ── Requirement → function satisfaction ──────────────────────
-    connection satDoseAccuracyRate : SatisfiedBy connect requiredElement ::> reqDoseAccuracy to satisfyingElement ::> fnComputeRate;
-    connection satDoseAccuracyDrive : SatisfiedBy connect requiredElement ::> reqDoseAccuracy to satisfyingElement ::> fnDriveActuator;
-    connection satOcclusion : SatisfiedBy connect requiredElement ::> reqOcclusionDetection to satisfyingElement ::> fnDetectOcclusion;
-    connection satOcclusionLimits : SatisfiedBy connect requiredElement ::> reqOcclusionDetection to satisfyingElement ::> fnEnforceDoseLimits;
-    connection satAirInLine : SatisfiedBy connect requiredElement ::> reqAirInLine to satisfyingElement ::> fnDetectAirInLine;
-    connection satAirInLineAlarm : SatisfiedBy connect requiredElement ::> reqAirInLine to satisfyingElement ::> fnAnnunciateAlarm;
-    connection satAlarm : SatisfiedBy connect requiredElement ::> reqAlarmAnnunciation to satisfyingElement ::> fnAnnunciateAlarm;
-    connection satBatteryMonitor : SatisfiedBy connect requiredElement ::> reqBatteryEndurance to satisfyingElement ::> fnMonitorBattery;
-    connection satBatterySource : SatisfiedBy connect requiredElement ::> reqBatteryEndurance to satisfyingElement ::> fnSelectPowerSource;
-    connection satConfirmation : SatisfiedBy connect requiredElement ::> reqPrescriptionConfirmation to satisfyingElement ::> fnAcceptInput;
-    connection satConfirmationValidate : SatisfiedBy connect requiredElement ::> reqPrescriptionConfirmation to satisfyingElement ::> fnValidatePrescription;
+
+
+
+
+
+
+
+
+
+
+
 }

package/examples/reusable-instrument/model/catalog/reusable_instrument.sysml

@@ -24,8 +24,9 @@ package memo_examples_reusable_instrument {
         attribute :>> goalStatement = "Return a used instrument to sterile, functional condition for the next case.";
         attribute :>> preCondition = "instrument collected from the OR; gross soil removed at point of use";
         attribute :>> successOutcome = "instrument cleaned, inspected, sterilized, and released to sterile storage";
+        subject supportingSystem;
+        actor sterileProcessingTechActor = sterileProcessingTech;
     }
-    connection : Initiates connect initiatingUser ::> sterileProcessingTech to initiatedUseCase ::> ucSterilize;
 
     // Reprocessing workflow: exists independently of any single instrument.
     action wfReprocess : OperationalWorkflow {
@@ -33,6 +34,9 @@ package memo_examples_reusable_instrument {
         attribute :>> workflowState = WorkflowStateKind::asIs;
         attribute :>> entryCondition = "used instrument received in decontamination";
         attribute :>> completionCondition = "sterile pack released to storage";
+
+        action wsClean : WorkflowStep { ref :>> performedActivity = actClean; }
+        first wsClean then wsInspect;
     }
     action actClean : OperationalActivity {
         attribute :>> id = "RI-ACT-001"; attribute :>> name = "CleanAndDisinfect";
@@ -46,16 +50,14 @@ package memo_examples_reusable_instrument {
         attribute :>> id = "RI-ACT-003"; attribute :>> name = "PackAndAutoclave";
         attribute :>> criticality = CriticalityKind::high;
     }
-    action wsClean : WorkflowStep { ref :>> performedActivity = actClean; }
     action wsInspect : WorkflowStep { ref :>> performedActivity = actInspect; }
     action wsSterilize : WorkflowStep { ref :>> performedActivity = actSterilizeLoad; }
-    connection : Composes connect parent ::> wfReprocess to child ::> wsClean;
-    first wsClean then wsInspect;
     first wsInspect then wsSterilize;
     connection : Supports { attribute :>> supportKind = SupportKind::useCase; connect supporter ::> wfReprocess to supported ::> ucSterilize; }
 
-    action scNominalCycle : OperativeScenario {
+    action scNominalCycle : MemoScenario {
         attribute :>> id = "RI-SC-001"; attribute :>> name = "NominalReprocessingCycle";
+        attribute :>> scenarioKind = ScenarioKind::operative;
         attribute :>> variantKind = ScenarioVariantKind::nominal;
         attribute :>> operationalCondition = OperationalConditionKind::normal;
         ref :>> parentWorkflow = wfReprocess;