@memoarchitect/ontology 0.8.22 → 0.10.9

package/examples/gpca-pump/model/catalog/gpca_context.sysml

@@ -3,46 +3,50 @@ package memo_examples_gpca_pump_gpca_context {
 
     private import memo_architecture_operational_context_actors::*;
     private import memo_architecture_operational_context_use_context::*;
+    private import memo_architecture_operational_structure::*;
     private import memo_assurance_requirements::*;
+    private import memo_assurance_safety_risk::*;
     private import memo_assurance_human_factors::*;
     private import memo_core_enumerations::*;
     private import memo_examples_gpca_pump_gpca_operational::*;
 
+    private import memo_core_common::*;
+    private import memo_core_common::MemoIdentity;
     // ── Intended use (ISO 14971 §5.2, IEC 62366-1) ──────────────
     part gpcaIntendedUse : IntendedUse {
-        attribute :>> id = "IU-001";
+        @MemoIdentity { :>> providedId = "IU-001"; }
         attribute :>> name = "GPCA_IntendedUse";
-        attribute :>> title = "GPCA Pump Intended Use";
-        attribute :>> shortDescription = "Patient-controlled analgesia infusion of prescribed opioid analgesics.";
+        @MemoIdentity { :>> shortDescription = "Patient-controlled analgesia infusion of prescribed opioid analgesics."; }
         attribute :>> description = "The GPCA pump delivers a prescribed analgesic drug intravenously at a programmed basal rate, supplemented by square boluses delivered automatically at programmed intervals and by patient-requested bolus doses, subject to lockout intervals and maximum-dose limits.";
         attribute :>> indication = "Management of acute post-operative or chronic pain requiring titrated intravenous opioid analgesia.";
         attribute :>> contraindication = "Patients unable to comprehend or operate the bolus request mechanism; drugs without safe-value records in the hospital pharmacy database.";
         attribute :>> patientPopulation = "Adult in-patients under clinical supervision.";
         attribute :>> clinicalBenefit = "Timely, patient-titrated analgesia with lower total opioid consumption than fixed-schedule dosing.";
         attribute :>> regulatoryClassification = "FDA Class II infusion pump (21 CFR 880.5725); IEC 62304 software safety class C.";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §2.1-2.3 (GPCA overview, system functions, user characteristics)";
+        attribute :>> missionKind = "therapeutic device mission";
+        attribute :>> successCriteria = "Drug delivered per prescription; no overdose or undetected under-infusion; every hazardous condition annunciated within its alarm latency budget.";
+        attribute :>> operationalContext = "Acute-care hospital ward, fixed (non-ambulatory) location (UC-001).";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §2.1-2.3 (GPCA overview, system functions, user characteristics)"; }
     }
     part bolusByProxyMisuse : ReasonablyForeseeableMisuse {
-        attribute :>> id = "RFM-001";
+        @MemoIdentity { :>> providedId = "RFM-001"; }
         attribute :>> name = "BolusRequestBySomeoneOtherThanPatient";
-        attribute :>> title = "Bolus by proxy";
-        attribute :>> shortDescription = "A caregiver or visitor presses the patient bolus control.";
+        @MemoIdentity { :>> shortDescription = "A caregiver or visitor presses the patient bolus control."; }
         attribute :>> description = "A person other than the patient activates the bolus request control, bypassing the intended patient self-limiting behavior.";
         attribute :>> misuseContext = "Patient-controlled analgesia in a supervised hospital setting.";
         attribute :>> foreseeableBasis = "Known PCA use pattern represented in the GPCA hazard analysis.";
         attribute :>> affectedUseContext = "UC-001";
-        attribute :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.4.8; CITE-005: Open PCA ISO 14971 risk analysis, bolus-by-proxy event";
+        @MemoIdentity { :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.4.8; CITE-005: Open PCA ISO 14971 risk analysis, bolus-by-proxy event"; }
     }
 
     // ── Use contexts ────────────────────────────────────────────
     part hospitalWardContext : UseContext {
-        attribute :>> id = "UC-001";
+        @MemoIdentity { :>> providedId = "UC-001"; }
         attribute :>> name = "HospitalWardUseContext";
         attribute :>> careSetting = "acute-care hospital ward and post-anesthesia care unit";
         attribute :>> environment = "indoor clinical environment, mains power with battery backup, pole or bed-rail mounted";
         attribute :>> jurisdiction = "generic (FDA/EU reference model)";
         attribute :>> connectedUse = true;
-        attribute :>> intendedUseReference = "IU-001";
     }
     // UC-002 (intra-hospital transport) removed: CriSys §2.4 states the
     // system is used in a fixed location and is not ambulatory.
@@ -50,7 +54,7 @@ package memo_examples_gpca_pump_gpca_context {
     // ── Actors ──────────────────────────────────────────────────
     part actorPatient : User {
         attribute :>> actorKind = ActorKind::patient;
-        attribute :>> id = "ACT-001";
+        @MemoIdentity { :>> providedId = "ACT-001"; }
         attribute :>> name = "Patient";
         attribute :>> trainingLevel = "instructed by clinician on bolus request button only";
         attribute :>> description = "Receives the infusion and requests bolus doses via the patient pendant.";
@@ -58,7 +62,7 @@ package memo_examples_gpca_pump_gpca_context {
     }
     part actorNurse : User {
         attribute :>> actorKind = ActorKind::clinician;
-        attribute :>> id = "ACT-002";
+        @MemoIdentity { :>> providedId = "ACT-002"; }
         attribute :>> name = "ClinicianNurse";
         attribute :>> trainingLevel = "trained clinical user; programs prescriptions and responds to alarms";
         attribute :>> description = "Loads the drug reservoir, programs and confirms the prescription, starts/stops therapy, and responds to alarms.";
@@ -69,7 +73,7 @@ package memo_examples_gpca_pump_gpca_context {
     }
     part actorPrescriber : User {
         attribute :>> actorKind = ActorKind::clinician;
-        attribute :>> id = "ACT-003";
+        @MemoIdentity { :>> providedId = "ACT-003"; }
         attribute :>> name = "PrescribingPhysician";
         attribute :>> trainingLevel = "licensed prescriber";
         attribute :>> description = "Prescribes drug, concentration, basal rate, bolus volume, lockout interval, and maximum dose limits.";
@@ -77,7 +81,7 @@ package memo_examples_gpca_pump_gpca_context {
     }
     part actorPharmacist : User {
         attribute :>> actorKind = ActorKind::clinician;
-        attribute :>> id = "ACT-004";
+        @MemoIdentity { :>> providedId = "ACT-004"; }
         attribute :>> name = "Pharmacist";
         attribute :>> trainingLevel = "licensed pharmacist";
         attribute :>> description = "Prepares the drug reservoir and verifies drug and concentration against the prescription.";
@@ -85,7 +89,7 @@ package memo_examples_gpca_pump_gpca_context {
     }
     part actorTechnician : User {
         attribute :>> actorKind = ActorKind::technician;
-        attribute :>> id = "ACT-005";
+        @MemoIdentity { :>> providedId = "ACT-005"; }
         attribute :>> name = "BiomedicalTechnician";
         attribute :>> trainingLevel = "service-trained; authenticated service access";
         attribute :>> description = "Performs maintenance, battery replacement, and calibration through the service interface.";
@@ -94,43 +98,43 @@ package memo_examples_gpca_pump_gpca_context {
 
     // ── Foreseeable use errors (IEC 62366-1, AAMI TIR PCA) ──────
     part ueMisprogrammedRate : UseError {
-        attribute :>> id = "UE-001";
+        @MemoIdentity { :>> providedId = "UE-001"; }
         attribute :>> name = "MisprogrammedInfusionParameters";
         attribute :>> errorCategory = UseErrorCategoryKind::actionCategory;
         attribute :>> taskReference = "OA-003: Program prescription";
         attribute :>> severity = SeverityKind::catastrophic;
         attribute :>> rootCauseType = "decimal-point / unit entry slip during prescription programming";
         attribute :>> description = "Clinician enters a basal rate or bolus volume an order of magnitude off (e.g. mg vs mL, misplaced decimal).";
-        attribute :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.4.8 Use Hazards (incorrect dose settings)";
+        @MemoIdentity { :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.4.8 Use Hazards (incorrect dose settings)"; }
     }
     part ueBolusByProxy : UseError {
-        attribute :>> id = "UE-002";
+        @MemoIdentity { :>> providedId = "UE-002"; }
         attribute :>> name = "PCAByProxy";
         attribute :>> errorCategory = UseErrorCategoryKind::cognition;
         attribute :>> taskReference = "OA-005: Request patient bolus";
         attribute :>> severity = SeverityKind::catastrophic;
         attribute :>> rootCauseType = "family member or caregiver presses bolus button on behalf of a sedated patient";
         attribute :>> description = "Bolus doses requested by someone other than the patient defeat the inherent safety of patient-limited dosing.";
-        attribute :>> sourceReference = "illustrative — no source";
+        @MemoIdentity { :>> sourceReference = "illustrative — no source"; }
     }
     part ueWrongDrugLoaded : UseError {
-        attribute :>> id = "UE-003";
+        @MemoIdentity { :>> providedId = "UE-003"; }
         attribute :>> name = "WrongDrugOrConcentrationLoaded";
         attribute :>> errorCategory = UseErrorCategoryKind::cognition;
         attribute :>> taskReference = "OA-002: Load drug reservoir";
         attribute :>> severity = SeverityKind::catastrophic;
         attribute :>> rootCauseType = "reservoir containing wrong drug or concentration mounted without verification";
         attribute :>> description = "Loaded drug or concentration differs from the programmed prescription, so delivered dose differs from intended dose.";
-        attribute :>> sourceReference = "illustrative — no source";
+        @MemoIdentity { :>> sourceReference = "illustrative — no source"; }
     }
     part ueAlarmDisregard : UseError {
-        attribute :>> id = "UE-004";
+        @MemoIdentity { :>> providedId = "UE-004"; }
         attribute :>> name = "AlarmSilencedAndForgotten";
         attribute :>> errorCategory = UseErrorCategoryKind::memoryRecall;
         attribute :>> taskReference = "OA-006: Respond to alarm";
         attribute :>> severity = SeverityKind::serious;
         attribute :>> rootCauseType = "alarm silenced during high workload and the underlying condition never resolved";
         attribute :>> description = "Clinician silences an alarm and does not return to resolve the underlying condition (e.g. occlusion), interrupting therapy.";
-        attribute :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.4.8 Use Hazards (attentional/memory failure)";
+        @MemoIdentity { :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.4.8 Use Hazards (attentional/memory failure)"; }
     }
 }

package/examples/gpca-pump/model/catalog/gpca_cybersecurity.sysml

@@ -15,8 +15,9 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     private import memo_examples_gpca_pump_gpca_requirements::*;
     private import memo_examples_gpca_pump_gpca_verification::*;
 
+    private import memo_core_common::MemoIdentity;
     part therapyConfigurationAsset : CybersecurityAsset {
-        attribute :>> id = "AST-CYB-001";
+        @MemoIdentity { :>> providedId = "AST-CYB-001"; }
         attribute :>> name = "TherapyConfigurationAsset";
         attribute :>> assetKind = AssetKind::configuration;
         attribute :>> confidentialityNeed = "medium";
@@ -28,7 +29,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     part patientEventLogAsset : CybersecurityAsset {
-        attribute :>> id = "AST-CYB-002";
+        @MemoIdentity { :>> providedId = "AST-CYB-002"; }
         attribute :>> name = "PatientEventLogAsset";
         attribute :>> assetKind = AssetKind::auditRecord;
         attribute :>> confidentialityNeed = "high";
@@ -40,7 +41,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     part maintenancePortBoundary : TrustBoundary {
-        attribute :>> id = "TB-001";
+        @MemoIdentity { :>> providedId = "TB-001"; }
         attribute :>> name = "MaintenancePortBoundary";
         attribute :>> boundaryType = "service-access";
         attribute :>> crossingConstraint = "Boundary between service tooling and therapy controller runtime.";
@@ -48,7 +49,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     part unauthorizedConfigChangeThreat : Threat {
-        attribute :>> id = "TH-001";
+        @MemoIdentity { :>> providedId = "TH-001"; }
         attribute :>> name = "UnauthorizedTherapyConfigurationChange";
         attribute :>> driverKind = "cybersecurity";
         attribute :>> threatCategory = ThreatCategoryKind::tampering;
@@ -60,7 +61,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     part eventLogTamperingThreat : Threat {
-        attribute :>> id = "TH-002";
+        @MemoIdentity { :>> providedId = "TH-002"; }
         attribute :>> name = "PatientEventLogTampering";
         attribute :>> driverKind = "cybersecurity";
         attribute :>> threatCategory = ThreatCategoryKind::repudiation;
@@ -72,7 +73,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     part weakServiceAuthentication : Vulnerability {
-        attribute :>> id = "VULN-001";
+        @MemoIdentity { :>> providedId = "VULN-001"; }
         attribute :>> name = "WeakServiceAuthentication";
         attribute :>> weakness = "service mode relies on shared default credential";
         attribute :>> exploitability = "moderate";
@@ -81,17 +82,16 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
         attribute :>> cweReference = "CWE-798";
     }
 
-    action tamperedConfigurationScenario : MemoScenario {
-        attribute :>> id = "SCN-001";
+    action tamperedConfigurationScenario : OperativeScenario {
+        @MemoIdentity { :>> providedId = "SCN-001"; }
         attribute :>> name = "TamperedTherapyConfigurationScenario";
-        attribute :>> scenarioKind = ScenarioKind::threat;
         attribute :>> description = "An attacker with local access to the maintenance port alters lockout or dose parameters, aiming to bypass safety limits; may enable unsafe therapy delivery or bypass safeguards.";
         attribute :>> actorDescription = "unauthorized actor with local access to the maintenance port";
         attribute :>> defaultCategory = ThreatCategoryKind::tampering;
     }
 
     part unsafeDoseCyberHazard : CyberHazard {
-        attribute :>> id = "CHZ-001";
+        @MemoIdentity { :>> providedId = "CHZ-001"; }
         attribute :>> name = "UnsafeTherapyConfigurationHazard";
         attribute :>> hazardType = HazardTypeKind::drugDeliveryError;
         attribute :>> foreseeable = true;
@@ -102,7 +102,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     part configurationTamperingRisk : CyberRisk {
-        attribute :>> id = "CRISK-001";
+        @MemoIdentity { :>> providedId = "CRISK-001"; }
         attribute :>> name = "ConfigurationTamperingRisk";
         attribute :>> driverKind = "cyber risk";
         attribute :>> probabilityEstimate = ProbabilityKind::occasional;
@@ -116,7 +116,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     part strongServiceAuthentication : CyberMitigation {
-        attribute :>> id = "CMIT-001";
+        @MemoIdentity { :>> providedId = "CMIT-001"; }
         attribute :>> name = "StrongServiceAuthenticationAndAudit";
         attribute :>> controlKind = RiskControlKind::protectiveMeasure;
         attribute :>> implementationKind = RiskControlImplementationKind::softwareDesign;
@@ -127,7 +127,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     requirement reqAuthenticatedServiceAccess : SecurityRequirement {
-        attribute :>> id = "SREQ-001";
+        @MemoIdentity { :>> providedId = "SREQ-001"; }
         attribute :>> name = "AuthenticatedServiceAccess";
         attribute :>> statement = "The system shall require authenticated and authorized service access before any therapy configuration parameter can be modified.";
         attribute :>> sourceKind = RequirementSourceKind::risk;
@@ -145,9 +145,9 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     verification vcAuthenticatedServiceAccess : VerificationCase {
-        attribute :>> id = "CVER-001";
+        @MemoIdentity { :>> providedId = "CVER-001"; }
         attribute :>> name = "VerifyAuthenticatedServiceAccess";
-        attribute :>> methodKind = VerificationMethodKind::test;
+        attribute :>> methodKind = MemoVerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Only authenticated and authorized service sessions may modify therapy configuration; all attempts are logged.";
         attribute :>> status = ElementStatusKind::approved;
 

package/examples/gpca-pump/model/catalog/gpca_formal_behavior.sysml

@@ -4,6 +4,8 @@ package memo_examples_gpca_pump_gpca_formal_behavior {
     private import memo_architecture_functional_behavior::*;
     private import memo_core_enumerations::*;
 
+    private import memo_core_common::*;
+    private import memo_core_common::MemoIdentity;
     // ═════════════════════════════════════════════════════════════
     // Formal assume/guarantee properties translated 1:1 from the
     // CriSys AADL AGREE annexes (GPCA_SW.aadl composite contract;
@@ -13,161 +15,161 @@ package memo_examples_gpca_pump_gpca_formal_behavior {
     // guarantees zero flow.
     // ═════════════════════════════════════════════════════════════
     part gpcaSwContract : Contract {
-        attribute :>> id = "CTR-000";
+        @MemoIdentity { :>> providedId = "CTR-000"; }
         attribute :>> name = "GpcaSwCompositeContract";
         attribute :>> contractScope = "GPCA_SW (composite, verified compositionally over the 8 subcomponents)";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex"; }
     }
     part topLevelContract : Contract {
-        attribute :>> id = "CTR-001";
+        @MemoIdentity { :>> providedId = "CTR-001"; }
         attribute :>> name = "TopLevelModeContract";
         attribute :>> contractScope = "Top_Level_Mode";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, Top_Level_Mode.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, Top_Level_Mode.aadl AGREE annex"; }
     }
     part infusionManagerContract : Contract {
-        attribute :>> id = "CTR-002";
+        @MemoIdentity { :>> providedId = "CTR-002"; }
         attribute :>> name = "InfusionManagerContract";
         attribute :>> contractScope = "Infusion_Manager";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, Infusion_Manager.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, Infusion_Manager.aadl AGREE annex"; }
     }
     part alarmContract : Contract {
-        attribute :>> id = "CTR-003";
+        @MemoIdentity { :>> providedId = "CTR-003"; }
         attribute :>> name = "AlarmContract";
         attribute :>> contractScope = "Alarm";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, Alarm.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, Alarm.aadl AGREE annex"; }
     }
 
     // ── Assumptions (GPCA_SW.aadl) ──────────────────────────────
     part assumeVtbiHighPositive : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::assumption;
-        attribute :>> id = "AP-002";
+        @MemoIdentity { :>> providedId = "AP-002"; }
         attribute :>> name = "VtbiHighPositive";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "assume DB_IN.VTBI_High > 0";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex"; }
     }
     part assumeEmptyReservoirPositive : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::assumption;
-        attribute :>> id = "AP-003";
+        @MemoIdentity { :>> providedId = "AP-003"; }
         attribute :>> name = "EmptyReservoirConstPositive";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "assume CONST_IN.Empty_Reservoir > 0";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex"; }
     }
     part assumeValidPrescriptionSaved : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::assumption;
-        attribute :>> id = "AP-001";
+        @MemoIdentity { :>> providedId = "AP-001"; }
         attribute :>> name = "ValidPrescriptionSavedBeforeTherapy";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "assume a saved prescription is available before infusion initiation";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.3.1 (REQ 7)";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.3.1 (REQ 7)"; }
     }
 
     // ── Guarantees (GPCA_SW.aadl AGREE annex, 1:1) ──────────────
     part guaranteeExclusiveMode : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-001";
+        @MemoIdentity { :>> providedId = "GP-001"; }
         attribute :>> name = "ModeRange";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee mode_range: GPCA_SW_OUT.Current_System_Mode in {0, 1, 2, 3, 4, 6, 7, 8} (source enumeration omits 5)";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 1)";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 1)"; }
     }
     part guaranteeOffMode : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-004";
+        @MemoIdentity { :>> providedId = "GP-004"; }
         attribute :>> name = "NotStartImpliesModeZero";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee not(OP_CMD_IN.System_Start) => GPCA_SW_OUT.Current_System_Mode = 0";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex"; }
     }
     part guaranteeInitialStart : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-005";
+        @MemoIdentity { :>> providedId = "GP-005"; }
         attribute :>> name = "InitialSystemStartImpliesModeOne";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee sys_initial and OP_CMD_IN.System_Start => GPCA_SW_OUT.Current_System_Mode = 1";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 4 allocation: TLM System_Start -> System_On; IM System_On -> mode 1)";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 4 allocation: TLM System_Start -> System_On; IM System_On -> mode 1)"; }
     }
     part guaranteeOffToOn : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-006";
+        @MemoIdentity { :>> providedId = "GP-006"; }
         attribute :>> name = "OffToOnImpliesModeOne";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee not(sys_initial) and pre(GPCA_SW_OUT.Current_System_Mode) = 0 and OP_CMD_IN.System_Start => GPCA_SW_OUT.Current_System_Mode = 1";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 4)";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 4)"; }
     }
     part guaranteeEmptyReservoirNoFlow : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-007";
+        @MemoIdentity { :>> providedId = "GP-007"; }
         attribute :>> name = "EmptyReservoirImpliesNoFlow";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee (OP_CMD_IN.System_Start and pre(Current_System_Mode) > 1 and GPCA_SW_OUT.Reservoir_Volume < CONST_IN.Empty_Reservoir) => GPCA_SW_OUT.Commanded_Flow_Rate = 0";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 59 'Empty Reservoir')";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 59 'Empty Reservoir')"; }
     }
     part guaranteeVtbiKvo : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-008";
+        @MemoIdentity { :>> providedId = "GP-008"; }
         attribute :>> name = "OverVtbiImpliesFlowAtMostKvo";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee (OP_CMD_IN.System_Start and pre(Current_System_Mode) > 1 and GPCA_SW_OUT.Volume_Infused > DB_IN.VTBI_High) => GPCA_SW_OUT.Commanded_Flow_Rate <= GPCA_SW_OUT.Flow_Rate_KVO";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (over-infusion => keep-vein-open, not zero)";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (over-infusion => keep-vein-open, not zero)"; }
     }
     part guaranteeAirInLineKvo : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-009";
+        @MemoIdentity { :>> providedId = "GP-009"; }
         attribute :>> name = "AirInLineImpliesFlowAtMostKvo";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee (OP_CMD_IN.System_Start and SENSOR_IN.Air_In_Line) => GPCA_SW_OUT.Commanded_Flow_Rate <= GPCA_SW_OUT.Flow_Rate_KVO";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 21 'Air embolism')";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 21 'Air embolism')"; }
     }
     part guaranteeOcclusionKvo : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-010";
+        @MemoIdentity { :>> providedId = "GP-010"; }
         attribute :>> name = "OcclusionImpliesFlowAtMostKvo";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee (OP_CMD_IN.System_Start and SENSOR_IN.Occlusion) => GPCA_SW_OUT.Commanded_Flow_Rate <= GPCA_SW_OUT.Flow_Rate_KVO";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex"; }
     }
     part guaranteeDoorOpenKvo : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-011";
+        @MemoIdentity { :>> providedId = "GP-011"; }
         attribute :>> name = "DoorOpenImpliesFlowAtMostKvo";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee (OP_CMD_IN.System_Start and SENSOR_IN.Door_Open) => GPCA_SW_OUT.Commanded_Flow_Rate <= GPCA_SW_OUT.Flow_Rate_KVO";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex"; }
     }
     part guaranteeAlarmStopsSameStep : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-003";
+        @MemoIdentity { :>> providedId = "GP-003"; }
         attribute :>> name = "SameStepAlarmKvoGuarantee";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee an infusion-inhibiting notification in a step implies Commanded_Flow_Rate <= Flow_Rate_KVO in the same step (ALARM_OUT -> IM.ALARM_IN is an immediate connection)";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl (ALARM_to_IM immediate) with the flow <= KVO guarantees above";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl (ALARM_to_IM immediate) with the flow <= KVO guarantees above"; }
     }
     part guaranteeLockoutPreventsBolus : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-002";
+        @MemoIdentity { :>> providedId = "GP-002"; }
         attribute :>> name = "LockoutGuarantee";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee a BolusRequest_prog inside the LockOutPeriod_pbolus_prog window is ignored and no PATIENT BOLUS is initiated";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.6.1 (REQ 25.3, REQ 26)";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.6.1 (REQ 25.3, REQ 26)"; }
     }
 
     // ── Temporal properties over the mode machine ───────────────
     part temporalNoInvalidTransition : BehaviorProperty {
-        attribute :>> id = "BP-010";
+        @MemoIdentity { :>> providedId = "BP-010"; }
         attribute :>> name = "NoInvalidTransition";
         attribute :>> propertyKind = BehaviorPropertyKind::temporalProperty;
         attribute :>> languageKind = PropertyLanguageKind::ltlLike;
         attribute :>> formalExpression = "G(mode transitions follow only the edges of the Fig 4.1 hierarchy as constrained by REQ 4-5, 12-13, 19-23, 28-39, 46-47)";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1 Fig 4.1";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1 Fig 4.1"; }
     }
     part temporalPauseOnCriticalAlarm : BehaviorProperty {
-        attribute :>> id = "BP-011";
+        @MemoIdentity { :>> providedId = "BP-011"; }
         attribute :>> name = "PauseAtKvoOnInhibitingNotification";
         attribute :>> propertyKind = BehaviorPropertyKind::safetyProperty;
         attribute :>> languageKind = PropertyLanguageKind::ltlLike;
         attribute :>> formalExpression = "G(infusion_inhibiting_notification -> X (mode = PAUSED and Commanded_Flow_Rate <= Flow_Rate_KVO))";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.5.2 (REQ 19-23) and §4.1.10.1 (REQ 43)";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.5.2 (REQ 19-23) and §4.1.10.1 (REQ 43)"; }
     }
 }