@memoarchitect/ontology 0.8.22 → 0.10.9

package/examples/gpca-pump/model/catalog/gpca_standards.sysml

@@ -29,12 +29,13 @@ package memo_examples_gpca_pump_gpca_standards {
     private import memo_examples_gpca_pump_gpca_physical::*;
     private import memo_examples_gpca_pump_gpca_risk::*;
 
+    private import memo_core_common::MemoIdentity;
     // ── The controlled documents clause evidence lands in ────────────────
     // TracesToDocument targets ControlledArtifact, so the DHF documents are
     // modelled as the artifacts they are rather than as a second document type.
 
     part docSrs : MarkdownDocumentSource {
-        attribute :>> id = "DOC-SRS";
+        @MemoIdentity { :>> providedId = "DOC-SRS"; }
         attribute :>> name = "SoftwareRequirementsSpecification";
         attribute :>> version = "1.0";
         attribute :>> artifactKind = ArtifactKind::requirementSpecification;
@@ -46,7 +47,7 @@ package memo_examples_gpca_pump_gpca_standards {
         attribute :>> generated = true;
     }
     part docSad : MarkdownDocumentSource {
-        attribute :>> id = "DOC-SAD";
+        @MemoIdentity { :>> providedId = "DOC-SAD"; }
         attribute :>> name = "SoftwareArchitectureDescription";
         attribute :>> version = "1.0";
         attribute :>> artifactKind = ArtifactKind::architectureDescription;
@@ -58,7 +59,7 @@ package memo_examples_gpca_pump_gpca_standards {
         attribute :>> generated = true;
     }
     part docHrs : MarkdownDocumentSource {
-        attribute :>> id = "DOC-HRS";
+        @MemoIdentity { :>> providedId = "DOC-HRS"; }
         attribute :>> name = "HardwareRequirementsSpecification";
         attribute :>> version = "1.0";
         attribute :>> artifactKind = ArtifactKind::requirementSpecification;
@@ -70,7 +71,7 @@ package memo_examples_gpca_pump_gpca_standards {
         attribute :>> generated = true;
     }
     part docRmf : MarkdownDocumentSource {
-        attribute :>> id = "DOC-RMF";
+        @MemoIdentity { :>> providedId = "DOC-RMF"; }
         attribute :>> name = "RiskManagementFile";
         attribute :>> version = "1.0";
         attribute :>> artifactKind = ArtifactKind::riskRecord;
@@ -84,78 +85,78 @@ package memo_examples_gpca_pump_gpca_standards {
 
     // ── IEC 62304 — software lifecycle ───────────────────────────────────
     // §5.2.2 software requirements content: every software requirement.
-    connection : ConformsTo connect conformingElement ::> reqOcclusion to clause ::> iec62304Clause5_2_2;
-    connection : ConformsTo connect conformingElement ::> reqDoorOpen to clause ::> iec62304Clause5_2_2;
-    connection : ConformsTo connect conformingElement ::> reqMaxHourlyDose to clause ::> iec62304Clause5_2_2;
-    connection : ConformsTo connect conformingElement ::> reqEventLogging to clause ::> iec62304Clause5_2_2;
-    connection : ConformsTo connect conformingElement ::> reqWatchdogSafeState to clause ::> iec62304Clause5_2_2;
-    connection : ConformsTo connect conformingElement ::> reqStuckButton to clause ::> iec62304Clause5_2_2;
-    connection : ConformsTo connect conformingElement ::> reqFlowCrossCheck to clause ::> iec62304Clause5_2_2;
+    connection : ConformsTo connect conformingElement ::> reqOcclusion to clause ::> iec62304::iec62304Clause5::iec62304Clause5_2::iec62304Clause5_2_2;
+    connection : ConformsTo connect conformingElement ::> reqDoorOpen to clause ::> iec62304::iec62304Clause5::iec62304Clause5_2::iec62304Clause5_2_2;
+    connection : ConformsTo connect conformingElement ::> reqMaxHourlyDose to clause ::> iec62304::iec62304Clause5::iec62304Clause5_2::iec62304Clause5_2_2;
+    connection : ConformsTo connect conformingElement ::> reqEventLogging to clause ::> iec62304::iec62304Clause5::iec62304Clause5_2::iec62304Clause5_2_2;
+    connection : ConformsTo connect conformingElement ::> reqWatchdogSafeState to clause ::> iec62304::iec62304Clause5::iec62304Clause5_2::iec62304Clause5_2_2;
+    connection : ConformsTo connect conformingElement ::> reqStuckButton to clause ::> iec62304::iec62304Clause5::iec62304Clause5_2::iec62304Clause5_2_2;
+    connection : ConformsTo connect conformingElement ::> reqFlowCrossCheck to clause ::> iec62304::iec62304Clause5::iec62304Clause5_2::iec62304Clause5_2_2;
 
     // §5.2.3 risk control measures carried into software requirements.
-    connection : ConformsTo connect conformingElement ::> reqWatchdogSafeState to clause ::> iec62304Clause5_2_3;
-    connection : ConformsTo connect conformingElement ::> reqFlowCrossCheck to clause ::> iec62304Clause5_2_3;
+    connection : ConformsTo connect conformingElement ::> reqWatchdogSafeState to clause ::> iec62304::iec62304Clause5::iec62304Clause5_2::iec62304Clause5_2_3;
+    connection : ConformsTo connect conformingElement ::> reqFlowCrossCheck to clause ::> iec62304::iec62304Clause5::iec62304Clause5_2::iec62304Clause5_2_3;
 
     // §5.3 software architectural design: the software decomposition.
-    connection : ConformsTo connect conformingElement ::> gpcaDevice.gpcaSoftware to clause ::> iec62304Clause5_3;
-    connection : ConformsTo connect conformingElement ::> gpcaDevice.gpcaSoftware.tlm to clause ::> iec62304Clause5_3;
-    connection : ConformsTo connect conformingElement ::> gpcaDevice.gpcaSoftware.infusionMgr to clause ::> iec62304Clause5_3;
-    connection : ConformsTo connect conformingElement ::> gpcaDevice.gpcaSoftware.systemMonitor to clause ::> iec62304Clause5_3;
-    connection : ConformsTo connect conformingElement ::> gpcaDevice.gpcaSoftware.config to clause ::> iec62304Clause5_3;
+    connection : ConformsTo connect conformingElement ::> gpcaDevice.gpcaSoftware to clause ::> iec62304::iec62304Clause5::iec62304Clause5_3;
+    connection : ConformsTo connect conformingElement ::> gpcaDevice.gpcaSoftware.tlm to clause ::> iec62304::iec62304Clause5::iec62304Clause5_3;
+    connection : ConformsTo connect conformingElement ::> gpcaDevice.gpcaSoftware.infusionMgr to clause ::> iec62304::iec62304Clause5::iec62304Clause5_3;
+    connection : ConformsTo connect conformingElement ::> gpcaDevice.gpcaSoftware.systemMonitor to clause ::> iec62304::iec62304Clause5::iec62304Clause5_3;
+    connection : ConformsTo connect conformingElement ::> gpcaDevice.gpcaSoftware.config to clause ::> iec62304::iec62304Clause5::iec62304Clause5_3;
 
     // ── IEC 60601-1 — basic safety and essential performance ─────────────
     // §8 protection against electrical hazards.
-    connection : ConformsTo connect conformingElement ::> reqBatteryBackup to clause ::> iec60601_1Clause8;
-    connection : ConformsTo connect conformingElement ::> powerSupply to clause ::> iec60601_1Clause8;
-    connection : ConformsTo connect conformingElement ::> batteryPack to clause ::> iec60601_1Clause8;
+    connection : ConformsTo connect conformingElement ::> reqBatteryBackup to clause ::> iec60601_1::iec60601_1Clause8;
+    connection : ConformsTo connect conformingElement ::> powerSupply to clause ::> iec60601_1::iec60601_1Clause8;
+    connection : ConformsTo connect conformingElement ::> batteryPack to clause ::> iec60601_1::iec60601_1Clause8;
 
     // §9 protection against mechanical hazards.
-    connection : ConformsTo connect conformingElement ::> reqFreeFlowPrevention to clause ::> iec60601_1Clause9;
-    connection : ConformsTo connect conformingElement ::> antiFreeFlowValve to clause ::> iec60601_1Clause9;
-    connection : ConformsTo connect conformingElement ::> enclosure to clause ::> iec60601_1Clause9;
+    connection : ConformsTo connect conformingElement ::> reqFreeFlowPrevention to clause ::> iec60601_1::iec60601_1Clause9;
+    connection : ConformsTo connect conformingElement ::> antiFreeFlowValve to clause ::> iec60601_1::iec60601_1Clause9;
+    connection : ConformsTo connect conformingElement ::> enclosure to clause ::> iec60601_1::iec60601_1Clause9;
 
     // §14 programmable electrical medical systems.
-    connection : ConformsTo connect conformingElement ::> gpcaDevice.gpcaSoftware to clause ::> iec60601_1Clause14;
+    connection : ConformsTo connect conformingElement ::> gpcaDevice.gpcaSoftware to clause ::> iec60601_1::iec60601_1Clause14;
 
     // ── IEC 60601-1-2 — electromagnetic compatibility ────────────────────
-    connection : ConformsTo connect conformingElement ::> controllerBoard to clause ::> iec60601_1_2Clause7;
-    connection : ConformsTo connect conformingElement ::> controllerBoard to clause ::> iec60601_1_2Clause8;
-    connection : ConformsTo connect conformingElement ::> reqPost to clause ::> iec60601_1_2Clause8;
+    connection : ConformsTo connect conformingElement ::> controllerBoard to clause ::> iec60601_1_2::iec60601_1_2Clause7;
+    connection : ConformsTo connect conformingElement ::> controllerBoard to clause ::> iec60601_1_2::iec60601_1_2Clause8;
+    connection : ConformsTo connect conformingElement ::> reqPost to clause ::> iec60601_1_2::iec60601_1_2Clause8;
 
     // ── ISO 14971 — risk management ──────────────────────────────────────
     // §7 risk control: the risk control measures themselves.
-    connection : ConformsTo connect conformingElement ::> lockoutControl to clause ::> iso14971Clause7;
-    connection : ConformsTo connect conformingElement ::> occlusionAlarmControl to clause ::> iso14971Clause7;
-    connection : ConformsTo connect conformingElement ::> airDetectionControl to clause ::> iso14971Clause7;
-    connection : ConformsTo connect conformingElement ::> freeFlowValveControl to clause ::> iso14971Clause7;
-    connection : ConformsTo connect conformingElement ::> doorInterlockControl to clause ::> iso14971Clause7;
-    connection : ConformsTo connect conformingElement ::> watchdogControl to clause ::> iso14971Clause7;
-    connection : ConformsTo connect conformingElement ::> flowCrossCheckControl to clause ::> iso14971Clause7;
+    connection : ConformsTo connect conformingElement ::> lockoutControl to clause ::> iso14971::iso14971Clause7;
+    connection : ConformsTo connect conformingElement ::> occlusionAlarmControl to clause ::> iso14971::iso14971Clause7;
+    connection : ConformsTo connect conformingElement ::> airDetectionControl to clause ::> iso14971::iso14971Clause7;
+    connection : ConformsTo connect conformingElement ::> freeFlowValveControl to clause ::> iso14971::iso14971Clause7;
+    connection : ConformsTo connect conformingElement ::> doorInterlockControl to clause ::> iso14971::iso14971Clause7;
+    connection : ConformsTo connect conformingElement ::> watchdogControl to clause ::> iso14971::iso14971Clause7;
+    connection : ConformsTo connect conformingElement ::> flowCrossCheckControl to clause ::> iso14971::iso14971Clause7;
 
     // ── Where the evidence for each claim is written down ────────────────
     // The section reference rides on the link, not on a duplicate section type.
-    connection : TracesToDocument connect tracedElement ::> iec62304Clause5_2_2 to artifact ::> docSrs {
+    connection : TracesToDocument connect tracedElement ::> iec62304::iec62304Clause5::iec62304Clause5_2::iec62304Clause5_2_2 to artifact ::> docSrs {
         attribute :>> sectionReference = "3";
     }
-    connection : TracesToDocument connect tracedElement ::> iec62304Clause5_2_3 to artifact ::> docSrs {
+    connection : TracesToDocument connect tracedElement ::> iec62304::iec62304Clause5::iec62304Clause5_2::iec62304Clause5_2_3 to artifact ::> docSrs {
         attribute :>> sectionReference = "3.2";
     }
-    connection : TracesToDocument connect tracedElement ::> iec62304Clause5_3 to artifact ::> docSad {
+    connection : TracesToDocument connect tracedElement ::> iec62304::iec62304Clause5::iec62304Clause5_3 to artifact ::> docSad {
         attribute :>> sectionReference = "4";
     }
-    connection : TracesToDocument connect tracedElement ::> iec60601_1Clause8 to artifact ::> docHrs {
+    connection : TracesToDocument connect tracedElement ::> iec60601_1::iec60601_1Clause8 to artifact ::> docHrs {
         attribute :>> sectionReference = "4";
     }
-    connection : TracesToDocument connect tracedElement ::> iec60601_1Clause9 to artifact ::> docHrs {
+    connection : TracesToDocument connect tracedElement ::> iec60601_1::iec60601_1Clause9 to artifact ::> docHrs {
         attribute :>> sectionReference = "6";
     }
-    connection : TracesToDocument connect tracedElement ::> iec60601_1Clause14 to artifact ::> docSad {
+    connection : TracesToDocument connect tracedElement ::> iec60601_1::iec60601_1Clause14 to artifact ::> docSad {
         attribute :>> sectionReference = "6.2";
     }
-    connection : TracesToDocument connect tracedElement ::> iec60601_1_2Clause7 to artifact ::> docHrs {
+    connection : TracesToDocument connect tracedElement ::> iec60601_1_2::iec60601_1_2Clause7 to artifact ::> docHrs {
         attribute :>> sectionReference = "5";
     }
-    connection : TracesToDocument connect tracedElement ::> iso14971Clause7 to artifact ::> docRmf {
+    connection : TracesToDocument connect tracedElement ::> iso14971::iso14971Clause7 to artifact ::> docRmf {
         attribute :>> sectionReference = "5";
     }
 }

package/examples/gpca-pump/model/catalog/gpca_system.sysml

@@ -9,19 +9,14 @@ package memo_examples_gpca_pump_gpca_system {
     private import memo_architecture_operational_use_cases::*;
     private import memo_core_common::*;
 
-    part gpcaMission : Mission {
-        attribute :>> id = "MSN-001";
-        attribute :>> name = "GPCA_Mission";
-        attribute :>> title = "Safe Patient-Controlled Analgesia";
-        attribute :>> shortDescription = "Deliver prescribed analgesia with patient-controlled boluses, never exceeding safe dose limits.";
-        attribute :>> missionKind = "therapeutic device mission";
-        attribute :>> successCriteria = "Drug delivered per prescription; no overdose or undetected under-infusion; every hazardous condition annunciated within its alarm latency budget.";
-        attribute :>> operationalContext = "Acute-care hospital ward, fixed (non-ambulatory) location (UC-001).";
-    }
+    private import memo_core_common::MemoIdentity;
+    // The device's top-level goal is its IntendedUse (gpcaIntendedUse in
+    // gpca_context) — a MemoMission. The former separate gpcaMission was
+    // retired: "mission" duplicated the regulated intended-use statement.
 
     // ── Functional chains ───────────────────────────────────────
     part fcPatientBolus : FunctionalFlow {
-        attribute :>> id = "FC-001";
+        @MemoIdentity { :>> providedId = "FC-001"; }
         attribute :>> name = "PatientBolusChain";
         attribute :>> flowCategory = FunctionalFlowKind::nominal;
         attribute :>> endToEndLatencyBudgetMs = "100";
@@ -35,23 +30,23 @@ package memo_examples_gpca_pump_gpca_system {
         perform fcsBolusLog;
     }
     action fcsBolusSense : FunctionalFlowStep {
-        attribute :>> id = "FCS-001"; attribute :>> name = "SenseBolusRequest";
+        @MemoIdentity { :>> providedId = "FCS-001"; } attribute :>> name = "SenseBolusRequest";
         ref :>> function = fnAcquireSensors; ref :>> exchangedItem = ddBolusRequest;
     }
     action fcsBolusValidate : FunctionalFlowStep {
-        attribute :>> id = "FCS-002"; attribute :>> name = "CheckLockoutAndMaxDose";
+        @MemoIdentity { :>> providedId = "FCS-002"; } attribute :>> name = "CheckLockoutAndMaxDose";
         ref :>> function = fnEnforceLimits; ref :>> exchangedItem = ddPrescription;
     }
     action fcsBolusCommand : FunctionalFlowStep {
-        attribute :>> id = "FCS-003"; attribute :>> name = "CommandBolusFlow";
+        @MemoIdentity { :>> providedId = "FCS-003"; } attribute :>> name = "CommandBolusFlow";
         ref :>> function = fnManageInfusion; ref :>> exchangedItem = cdFlowCommand;
     }
     action fcsBolusActuate : FunctionalFlowStep {
-        attribute :>> id = "FCS-004"; attribute :>> name = "ActuatePumpMotor";
+        @MemoIdentity { :>> providedId = "FCS-004"; } attribute :>> name = "ActuatePumpMotor";
         ref :>> function = fnCommandPump; ref :>> exchangedItem = cdFlowCommand;
     }
     action fcsBolusLog : FunctionalFlowStep {
-        attribute :>> id = "FCS-005"; attribute :>> name = "LogBolusOutcome";
+        @MemoIdentity { :>> providedId = "FCS-005"; } attribute :>> name = "LogBolusOutcome";
         ref :>> function = fnLogEvents; ref :>> exchangedItem = ddEventRecord;
     }
     first fcsBolusSense then fcsBolusValidate;
@@ -60,7 +55,7 @@ package memo_examples_gpca_pump_gpca_system {
     first fcsBolusActuate then fcsBolusLog;
 
     part fcAlarmStop : FunctionalFlow {
-        attribute :>> id = "FC-002";
+        @MemoIdentity { :>> providedId = "FC-002"; }
         attribute :>> name = "AlarmDetectionToSafeStateChain";
         attribute :>> flowCategory = FunctionalFlowKind::alarm;
         attribute :>> endToEndLatencyBudgetMs = "20";
@@ -73,19 +68,19 @@ package memo_examples_gpca_pump_gpca_system {
         perform fcsAlarmAnnunciate;
     }
     action fcsAlarmSense : FunctionalFlowStep {
-        attribute :>> id = "FCS-006"; attribute :>> name = "SenseAlarmCondition";
+        @MemoIdentity { :>> providedId = "FCS-006"; } attribute :>> name = "SenseAlarmCondition";
         ref :>> function = fnAcquireSensors; ref :>> exchangedItem = ddSensorVector;
     }
     action fcsAlarmEvaluate : FunctionalFlowStep {
-        attribute :>> id = "FCS-007"; attribute :>> name = "EvaluateAlarmCondition";
+        @MemoIdentity { :>> providedId = "FCS-007"; } attribute :>> name = "EvaluateAlarmCondition";
         ref :>> function = fnMonitorAlarm; ref :>> exchangedItem = ddSensorVector;
     }
     action fcsAlarmStopInfusion : FunctionalFlowStep {
-        attribute :>> id = "FCS-008"; attribute :>> name = "LimitFlowToKvoSameStep";
+        @MemoIdentity { :>> providedId = "FCS-008"; } attribute :>> name = "LimitFlowToKvoSameStep";
         ref :>> function = fnManageInfusion; ref :>> exchangedItem = cdAlarmSignal;
     }
     action fcsAlarmAnnunciate : FunctionalFlowStep {
-        attribute :>> id = "FCS-009"; attribute :>> name = "AnnunciateAudibleVisual";
+        @MemoIdentity { :>> providedId = "FCS-009"; } attribute :>> name = "AnnunciateAudibleVisual";
         ref :>> function = fnAnnunciate; ref :>> exchangedItem = cdAlarmSignal;
     }
     first fcsAlarmSense then fcsAlarmEvaluate;
@@ -93,7 +88,7 @@ package memo_examples_gpca_pump_gpca_system {
     first fcsAlarmStopInfusion then fcsAlarmAnnunciate;
 
     part fcStartup : FunctionalFlow {
-        attribute :>> id = "FC-003";
+        @MemoIdentity { :>> providedId = "FC-003"; }
         attribute :>> name = "PowerOnSelfTestChain";
         attribute :>> flowCategory = FunctionalFlowKind::startup;
         attribute :>> endToEndLatencyBudgetMs = "5000";
@@ -105,24 +100,17 @@ package memo_examples_gpca_pump_gpca_system {
     }
 
     // ── System scenarios ────────────────────────────────────────
-    action ssBolusDuringBasal : MemoScenario {
-        attribute :>> id = "SS-001";
+    action ssBolusDuringBasal : OperativeScenario {
+        @MemoIdentity { :>> providedId = "SS-001"; }
         attribute :>> name = "PatientBolusDuringBasal";
-        attribute :>> scenarioKind = ScenarioKind::functional;
-        attribute :>> variantKind = ScenarioVariantKind::nominal;
-        attribute :>> operationalCondition = OperationalConditionKind::normal;
         attribute :>> preCondition = "BASAL mode active; no REQ 25 ignore condition holds";
         attribute :>> postCondition = "PATIENT_BOLUS mode entered, bolus delivered, return to BASAL";
     }
-    action ssAlarmPause : MemoScenario {
-        attribute :>> id = "SS-002";
+    action ssAlarmPause : OperativeScenario {
+        attribute :>> scenarioKind = ScenarioKind::alternate;
+        @MemoIdentity { :>> providedId = "SS-002"; }
         attribute :>> name = "InhibitingNotificationPausesInfusion";
-        attribute :>> scenarioKind = ScenarioKind::functional;
-        attribute :>> variantKind = ScenarioVariantKind::exception;
-        attribute :>> variationPoint = "an infusion-inhibiting notification interrupts active therapy";
-        attribute :>> operationalCondition = OperationalConditionKind::degraded;
         attribute :>> preCondition = "any ACTIVE therapy mode; infusion-inhibiting notification detected (REQ 59)";
         attribute :>> postCondition = "PAUSED mode entered in same execution step at FlowRate_kvo_hd keep-vein-open flow; notification annunciated per REQ 59";
-        ref :>> baseScenario = ssBolusDuringBasal;
     }
 }

package/examples/gpca-pump/model/catalog/gpca_trace.sysml

@@ -40,12 +40,12 @@ package memo_examples_gpca_pump_gpca_trace {
     private import memo_viewpoints_definitions::*;
 
     // ── System context interactions (context view) ──────────────
-    connection : InteractsWith connect contextParticipant ::> actorPatient to target ::> entityGpcaPump;
-    connection : InteractsWith connect contextParticipant ::> actorNurse to target ::> entityGpcaPump;
-    connection : InteractsWith connect contextParticipant ::> actorPrescriber to target ::> entityGpcaPump;
-    connection : InteractsWith connect contextParticipant ::> actorPharmacist to target ::> entityGpcaPump;
-    connection : InteractsWith connect contextParticipant ::> actorTechnician to target ::> entityGpcaPump;
-    connection : InteractsWith connect contextParticipant ::> actorPharmacist to target ::> entityPharmacy;
+    connection connect actorPatient to entityGpcaPump;
+    connection connect actorNurse to entityGpcaPump;
+    connection connect actorPrescriber to entityGpcaPump;
+    connection connect actorPharmacist to entityGpcaPump;
+    connection connect actorTechnician to entityGpcaPump;
+    connection connect actorPharmacist to entityPharmacy;
 
     // ── Fig 2.1 context flows (CriSys §2.1) ─────────────────────
     // Data flows
@@ -72,9 +72,6 @@ package memo_examples_gpca_pump_gpca_trace {
     first oaLoadReservoir then oaProgram;
     first oaProgram then oaStartTherapy;
     first oaStartTherapy then oaRequestBolus;
-    connection : Supports { attribute :>> supportKind = SupportKind::capability; connect supporter ::> oaStartTherapy to supported ::> ocTitratedAnalgesia; }
-    connection : Supports { attribute :>> supportKind = SupportKind::capability; connect supporter ::> oaRequestBolus to supported ::> ocTitratedAnalgesia; }
-    connection : Supports { attribute :>> supportKind = SupportKind::capability; connect supporter ::> oaRespondAlarm to supported ::> ocFailSafeTherapy; }
     connection : DerivesFrom connect sourceDriver ::> oaProgram to targetRequirement ::> reqDrugLibraryLimits;
     connection : DerivesFrom connect sourceDriver ::> oaRequestBolus to targetRequirement ::> reqCs25;
     connection : DerivesFrom connect sourceDriver ::> oaRespondAlarm to targetRequirement ::> reqCs59;
@@ -346,7 +343,7 @@ package memo_examples_gpca_pump_gpca_trace {
     allocate fnSelfTest to gpcaDevice.gpcaSoftware.systemMonitor;
     // ── Deployment, hosting, and interface realization ──────────
     allocation gpcaSoftwareDeployment : DeploysTo allocate gpcaDevice.gpcaSoftware to controllerBoard;
-    connection : HostedBy connect processingNode ::> mainController to hostAssembly ::> controllerBoard;
+    allocation : HostedBy allocate mainController to controllerBoard;
     #refinement dependency sensorInputInterface to hwSoftwareBus;
     #refinement dependency actuatorCommandInterface to pumpMotorDrive;
     connection : BindsToInterface connect portElement ::> portPatientPendant to boundInterface ::> bolusButtonLine;
@@ -534,7 +531,9 @@ package memo_examples_gpca_pump_gpca_trace {
     connection : TracesRisk connect sourceRiskElement ::> ueAlarmDisregard to targetRiskElement ::> seqOcclusion;
 
     // ── FMEA and fault tree integration ─────────────────────────
-    connection : AnalyzedBy connect element ::> pumpMotorAssembly to analysisArtifact ::> fmeaDelivery;
+    // Was `AnalyzedBy`: a zero-attribute edge from an element to the
+    // artifact analysing it, which is what a bare dependency states.
+    dependency from pumpMotorAssembly to fmeaDelivery;
     connection : HasFailureMode connect element ::> pumpMotorAssembly to failureMode ::> fmMotorRunaway;
     connection : HasFailureMode connect element ::> airInLineSensor to failureMode ::> fmAirSensorSilent;
     connection : HasFailureMode connect element ::> occlusionSensor to failureMode ::> fmOcclusionDrift;