@memoarchitect/ontology 0.8.22 → 0.8.24

package/README.md

@@ -23,7 +23,7 @@ pin an exact release; the package has no repository or runtime dependency on Mem
 Tools or Memo Architect.
 
 ```bash
-pnpm add @memoarchitect/ontology@0.8.22
+pnpm add @memoarchitect/ontology@0.8.24
 ```
 
 > **Pre-1.0 notice:** ontology names, relationships, and package layout may

package/examples/connected-patient-monitor/memo.package.yaml

@@ -0,0 +1,3 @@
+name: connected-patient-monitor
+entrypoint: model/catalog/project.sysml
+include: [model]

package/examples/connected-patient-monitor/model/catalog/viewpoints/unassigned/views/connected_patient_monitor_overview.sysml

@@ -2,5 +2,5 @@ package memo_examples_connected_patient_monitor_viewpoints_unassigned_views_conn
     private import memo_examples_connected_patient_monitor::*;
     private import memo_viewpoints_definitions::*;
     private import memo_core_enumerations::*;
-    view connectedPatientMonitorOverview : MemoDiagramView { expose memo_examples_connected_patient_monitor::*; attribute depth = 2; attribute :>> title = "Connected Patient Monitor Overview"; attribute :>> viewKind = DiagramViewKind::interconnection; attribute :>> diagramType = "ibd"; }
+    view connectedPatientMonitorOverview : MemoDiagramView { expose memo_examples_connected_patient_monitor::*; attribute depth = 2; attribute :>> viewKind = DiagramViewKind::interconnection; attribute :>> diagramType = "ibd"; }
 }

package/examples/embedded-infusion-pump/memo.package.yaml

@@ -0,0 +1,3 @@
+name: embedded-infusion-pump
+entrypoint: model/catalog/project.sysml
+include: [model]

package/examples/embedded-infusion-pump/model/catalog/embedded_infusion_pump.sysml

@@ -1,6 +1,6 @@
 // Focused example: embedded programmable device — the three software views
 // (module / runtime / deployment) on a minimal infusion pump.
-// SoftwareElement buildsInto DeploymentUnit deploysTo ProcessingNode;
+// SoftwareElement buildsInto SoftwareDeploymentUnit deploysTo ProcessingNode;
 // SoftwareComponent hostedBy ProcessingNode with scheduling properties.
 package memo_examples_embedded_infusion_pump {
     private import ScalarValues::*;
@@ -43,7 +43,7 @@ package memo_examples_embedded_infusion_pump {
     #refinement dependency rtControlLoop to swInfusionControl;
 
     // Deployment view.
-    part duControlImage : DeploymentUnit {
+    part duControlImage : SoftwareDeploymentUnit {
         attribute :>> id = "EIP-DU-001"; attribute :>> name = "ControlFirmwareImage";
         attribute :>> unitKind = "signed firmware image";
         attribute :>> version = "3.1.0";

package/examples/embedded-infusion-pump/model/catalog/viewpoints/unassigned/views/embedded_infusion_pump_overview.sysml

@@ -2,5 +2,5 @@ package memo_examples_embedded_infusion_pump_viewpoints_unassigned_views_embedde
     private import memo_examples_embedded_infusion_pump::*;
     private import memo_viewpoints_definitions::*;
     private import memo_core_enumerations::*;
-    view embeddedInfusionPumpOverview : MemoDiagramView { expose memo_examples_embedded_infusion_pump::*; attribute depth = 2; attribute :>> title = "Embedded Infusion Pump Overview"; attribute :>> viewKind = DiagramViewKind::general; attribute :>> diagramType = "bdd"; }
+    view embeddedInfusionPumpOverview : MemoDiagramView { expose memo_examples_embedded_infusion_pump::*; attribute depth = 2; attribute :>> viewKind = DiagramViewKind::general; attribute :>> diagramType = "bdd"; }
 }

package/examples/functional-logical-physical/memo.package.yaml

@@ -0,0 +1,3 @@
+name: functional-logical-physical
+entrypoint: model/catalog/project.sysml
+include: [model]

package/examples/functional-logical-physical/model/catalog/functional_logical_physical.sysml

@@ -15,7 +15,7 @@ package memo_examples_functional_logical_physical {
     private import memo_architecture_implementation_hardware_structure::*;
 
     // Operational world: what the clinician does.
-    action actOcclusionResponse : OperationalActivity {
+    action actOcclusionResponse : OperativeAction {
         attribute :>> id = "FLP-ACT-001"; attribute :>> name = "RespondToLineOcclusion";
         attribute :>> criticality = CriticalityKind::high;
     }

package/examples/functional-logical-physical/model/catalog/viewpoints/unassigned/views/functional_logical_physical_overview.sysml

@@ -2,5 +2,5 @@ package memo_examples_functional_logical_physical_viewpoints_unassigned_views_fu
     private import memo_examples_functional_logical_physical::*;
     private import memo_viewpoints_definitions::*;
     private import memo_core_enumerations::*;
-    view functionalLogicalPhysicalOverview : MemoDiagramView { expose memo_examples_functional_logical_physical::*; attribute depth = 2; attribute :>> title = "Function to Physical Realization"; attribute :>> viewKind = DiagramViewKind::general; attribute :>> diagramType = "bdd"; }
+    view functionalLogicalPhysicalOverview : MemoDiagramView { expose memo_examples_functional_logical_physical::*; attribute depth = 2; attribute :>> viewKind = DiagramViewKind::general; attribute :>> diagramType = "bdd"; }
 }

package/examples/gpca-pump/memo.package.yaml

@@ -0,0 +1,3 @@
+name: gpca-pump
+entrypoint: model/catalog/project.sysml
+include: [model]

package/examples/gpca-pump/model/catalog/gpca_context.sysml

@@ -3,7 +3,9 @@ package memo_examples_gpca_pump_gpca_context {
 
     private import memo_architecture_operational_context_actors::*;
     private import memo_architecture_operational_context_use_context::*;
+    private import memo_architecture_operational_structure::*;
     private import memo_assurance_requirements::*;
+    private import memo_assurance_safety_risk::*;
     private import memo_assurance_human_factors::*;
     private import memo_core_enumerations::*;
     private import memo_examples_gpca_pump_gpca_operational::*;
@@ -12,7 +14,6 @@ package memo_examples_gpca_pump_gpca_context {
     part gpcaIntendedUse : IntendedUse {
         attribute :>> id = "IU-001";
         attribute :>> name = "GPCA_IntendedUse";
-        attribute :>> title = "GPCA Pump Intended Use";
         attribute :>> shortDescription = "Patient-controlled analgesia infusion of prescribed opioid analgesics.";
         attribute :>> description = "The GPCA pump delivers a prescribed analgesic drug intravenously at a programmed basal rate, supplemented by square boluses delivered automatically at programmed intervals and by patient-requested bolus doses, subject to lockout intervals and maximum-dose limits.";
         attribute :>> indication = "Management of acute post-operative or chronic pain requiring titrated intravenous opioid analgesia.";
@@ -20,12 +21,14 @@ package memo_examples_gpca_pump_gpca_context {
         attribute :>> patientPopulation = "Adult in-patients under clinical supervision.";
         attribute :>> clinicalBenefit = "Timely, patient-titrated analgesia with lower total opioid consumption than fixed-schedule dosing.";
         attribute :>> regulatoryClassification = "FDA Class II infusion pump (21 CFR 880.5725); IEC 62304 software safety class C.";
+        attribute :>> missionKind = "therapeutic device mission";
+        attribute :>> successCriteria = "Drug delivered per prescription; no overdose or undetected under-infusion; every hazardous condition annunciated within its alarm latency budget.";
+        attribute :>> operationalContext = "Acute-care hospital ward, fixed (non-ambulatory) location (UC-001).";
         attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §2.1-2.3 (GPCA overview, system functions, user characteristics)";
     }
     part bolusByProxyMisuse : ReasonablyForeseeableMisuse {
         attribute :>> id = "RFM-001";
         attribute :>> name = "BolusRequestBySomeoneOtherThanPatient";
-        attribute :>> title = "Bolus by proxy";
         attribute :>> shortDescription = "A caregiver or visitor presses the patient bolus control.";
         attribute :>> description = "A person other than the patient activates the bolus request control, bypassing the intended patient self-limiting behavior.";
         attribute :>> misuseContext = "Patient-controlled analgesia in a supervised hospital setting.";
@@ -42,7 +45,6 @@ package memo_examples_gpca_pump_gpca_context {
         attribute :>> environment = "indoor clinical environment, mains power with battery backup, pole or bed-rail mounted";
         attribute :>> jurisdiction = "generic (FDA/EU reference model)";
         attribute :>> connectedUse = true;
-        attribute :>> intendedUseReference = "IU-001";
     }
     // UC-002 (intra-hospital transport) removed: CriSys §2.4 states the
     // system is used in a fixed location and is not ambulatory.

package/examples/gpca-pump/model/catalog/gpca_cybersecurity.sysml

@@ -81,10 +81,9 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
         attribute :>> cweReference = "CWE-798";
     }
 
-    action tamperedConfigurationScenario : MemoScenario {
+    action tamperedConfigurationScenario : OperativeScenario {
         attribute :>> id = "SCN-001";
         attribute :>> name = "TamperedTherapyConfigurationScenario";
-        attribute :>> scenarioKind = ScenarioKind::threat;
         attribute :>> description = "An attacker with local access to the maintenance port alters lockout or dose parameters, aiming to bypass safety limits; may enable unsafe therapy delivery or bypass safeguards.";
         attribute :>> actorDescription = "unauthorized actor with local access to the maintenance port";
         attribute :>> defaultCategory = ThreatCategoryKind::tampering;

package/examples/gpca-pump/model/catalog/gpca_operational.sysml

@@ -78,7 +78,7 @@ package memo_examples_gpca_pump_gpca_operational {
     }
 
     // ── Operational activities (therapy lifecycle) ──────────────
-    action oaPrescribe : OperationalActivity {
+    action oaPrescribe : OperativeAction {
         attribute :>> id = "OA-001";
         attribute :>> name = "PrescribeTherapy";
         attribute :>> trigger = "patient requires titrated analgesia";
@@ -86,7 +86,7 @@ package memo_examples_gpca_pump_gpca_operational {
         attribute :>> postCondition = "prescription with basal rate, bolus volume, lockout, and max dose limits exists";
         attribute :>> criticality = CriticalityKind::high;
     }
-    action oaLoadReservoir : OperationalActivity {
+    action oaLoadReservoir : OperativeAction {
         attribute :>> id = "OA-002";
         attribute :>> name = "LoadDrugReservoir";
         attribute :>> trigger = "prescription issued or reservoir empty";
@@ -94,7 +94,7 @@ package memo_examples_gpca_pump_gpca_operational {
         attribute :>> postCondition = "reservoir mounted, door closed and latched";
         attribute :>> criticality = CriticalityKind::high;
     }
-    action oaProgram : OperationalActivity {
+    action oaProgram : OperativeAction {
         attribute :>> id = "OA-003";
         attribute :>> name = "ProgramPrescription";
         attribute :>> trigger = "reservoir loaded";
@@ -102,7 +102,7 @@ package memo_examples_gpca_pump_gpca_operational {
         attribute :>> postCondition = "prescription entered, checked against pharmacy-database safe values (I 9-I 11), and confirmed by second review";
         attribute :>> criticality = CriticalityKind::catastrophic;
     }
-    action oaStartTherapy : OperationalActivity {
+    action oaStartTherapy : OperativeAction {
         attribute :>> id = "OA-004";
         attribute :>> name = "StartInfusion";
         attribute :>> trigger = "prescription confirmed";
@@ -110,7 +110,7 @@ package memo_examples_gpca_pump_gpca_operational {
         attribute :>> postCondition = "basal infusion running";
         attribute :>> criticality = CriticalityKind::catastrophic;
     }
-    action oaRequestBolus : OperationalActivity {
+    action oaRequestBolus : OperativeAction {
         attribute :>> id = "OA-005";
         attribute :>> name = "RequestPatientBolus";
         attribute :>> trigger = "patient presses bolus request button";
@@ -118,7 +118,7 @@ package memo_examples_gpca_pump_gpca_operational {
         attribute :>> postCondition = "bolus delivered, or request ignored when lockout or max-dose limits apply";
         attribute :>> criticality = CriticalityKind::catastrophic;
     }
-    action oaRespondAlarm : OperationalActivity {
+    action oaRespondAlarm : OperativeAction {
         attribute :>> id = "OA-006";
         attribute :>> name = "RespondToAlarm";
         attribute :>> trigger = "audible or visual alarm annunciated";
@@ -126,7 +126,7 @@ package memo_examples_gpca_pump_gpca_operational {
         attribute :>> postCondition = "cause resolved and therapy resumed, or therapy stopped";
         attribute :>> criticality = CriticalityKind::catastrophic;
     }
-    action oaReviewLog : OperationalActivity {
+    action oaReviewLog : OperativeAction {
         attribute :>> id = "OA-007";
         attribute :>> name = "ReviewEventLog";
         attribute :>> trigger = "shift change, incident review, or dose audit";
@@ -134,7 +134,7 @@ package memo_examples_gpca_pump_gpca_operational {
         attribute :>> postCondition = "delivered doses and alarm history reviewed";
         attribute :>> criticality = CriticalityKind::medium;
     }
-    action oaMaintain : OperationalActivity {
+    action oaMaintain : OperativeAction {
         attribute :>> id = "OA-008";
         attribute :>> name = "MaintainDevice";
         attribute :>> trigger = "scheduled maintenance or fault";
@@ -169,8 +169,6 @@ package memo_examples_gpca_pump_gpca_operational {
         attribute :>> entryCondition = "A valid prescription and prepared reservoir are available.";
         attribute :>> completionCondition = "Therapy is started with confirmed prescription limits.";
 
-        action wsProgram : WorkflowStep { ref :>> performedActivity = oaProgram; }
-        action wsStart : WorkflowStep { ref :>> performedActivity = oaStartTherapy; }
     }
     action wfManageActiveTherapy : OperationalWorkflow {
         attribute :>> name = "ManageActiveTherapy";
@@ -178,16 +176,15 @@ package memo_examples_gpca_pump_gpca_operational {
         attribute :>> entryCondition = "Basal therapy is active.";
         attribute :>> completionCondition = "A bolus is handled or active therapy continues safely.";
 
-        action wsRequestBolus : WorkflowStep { ref :>> performedActivity = oaRequestBolus; }
         // Refinement targets a nested step by its local name — the shorthand's
         // `to` end does not accept a qualified path — so this is written
         // inside wsRequestBolus's own owning scope rather than at package
         // level.
-        #refinement dependency fcsBolusSense to wsRequestBolus;
-        #refinement dependency fcsBolusValidate to wsRequestBolus;
-        #refinement dependency fcsBolusCommand to wsRequestBolus;
-        #refinement dependency fcsBolusActuate to wsRequestBolus;
-        #refinement dependency fcsBolusLog to wsRequestBolus;
+        #refinement dependency fcsBolusSense to oaRequestBolus;
+        #refinement dependency fcsBolusValidate to oaRequestBolus;
+        #refinement dependency fcsBolusCommand to oaRequestBolus;
+        #refinement dependency fcsBolusActuate to oaRequestBolus;
+        #refinement dependency fcsBolusLog to oaRequestBolus;
     }
     action wfRespondToTherapyAlarm : OperationalWorkflow {
         attribute :>> name = "RespondToTherapyAlarm";
@@ -195,15 +192,11 @@ package memo_examples_gpca_pump_gpca_operational {
         attribute :>> entryCondition = "A therapy alarm or degraded condition is detected.";
         attribute :>> completionCondition = "The pump is safe and the clinician has resolved or escalated the condition.";
 
-        action wsRespondAlarm : WorkflowStep { ref :>> performedActivity = oaRespondAlarm; }
-        #refinement dependency fcsAlarmSense to wsRespondAlarm;
-        #refinement dependency fcsAlarmEvaluate to wsRespondAlarm;
-        #refinement dependency fcsAlarmStopInfusion to wsRespondAlarm;
-        #refinement dependency fcsAlarmAnnunciate to wsRespondAlarm;
+        #refinement dependency fcsAlarmSense to oaRespondAlarm;
+        #refinement dependency fcsAlarmEvaluate to oaRespondAlarm;
+        #refinement dependency fcsAlarmStopInfusion to oaRespondAlarm;
+        #refinement dependency fcsAlarmAnnunciate to oaRespondAlarm;
     }
-    connection : Supports { attribute :>> supportKind = SupportKind::useCase; connect supporter ::> wfPrepareAndStartTherapy to supported ::> ucDeliverPcaTherapy; }
-    connection : Supports { attribute :>> supportKind = SupportKind::useCase; connect supporter ::> wfManageActiveTherapy to supported ::> ucDeliverPcaTherapy; }
-    connection : Supports { attribute :>> supportKind = SupportKind::useCase; connect supporter ::> wfRespondToTherapyAlarm to supported ::> ucDeliverPcaTherapy; }
 
 
     // ── Operational capabilities ────────────────────────────────
@@ -223,131 +216,90 @@ package memo_examples_gpca_pump_gpca_operational {
     }
 
     // ── Operational scenarios ───────────────────────────────────
-    action osNominalTherapy : MemoScenario {
+    action osNominalTherapy : OperativeScenario {
         attribute :>> id = "OS-001";
         attribute :>> name = "NominalTherapySession";
-        attribute :>> scenarioKind = ScenarioKind::operative;
-        attribute :>> variantKind = ScenarioVariantKind::nominal;
-        attribute :>> operationalCondition = OperationalConditionKind::normal;
         attribute :>> preCondition = "prescription issued, reservoir loaded";
         attribute :>> postCondition = "therapy completed and stopped by clinician";
         attribute :>> pathSummary = "Prescribe > load reservoir > program and confirm > start basal > patient boluses within limits > stop therapy > review log.";
         attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §2.2 Main GPCA System Functions";
-        ref :>> parentWorkflow = wfManageActiveTherapy;
-        ref :>> parentUseCase = ucDeliverPcaTherapy;
-        ref :>> activities = oaCompleteNominalTherapy;
 
-        action oaCompleteNominalTherapy : OperationalActivity {
+        action oaCompleteNominalTherapy : OperativeAction {
             attribute :>> name = "CompleteNominalTherapy";
             action deliverWithinLimits; action recordTherapyEvent;
             first start then deliverWithinLimits; first deliverWithinLimits then recordTherapyEvent; first recordTherapyEvent then done;
         }
     }
-    action osLockoutBolus : MemoScenario {
+    action osLockoutBolus : OperativeScenario {
+        attribute :>> scenarioKind = ScenarioKind::alternate;
         attribute :>> id = "OS-002";
         attribute :>> name = "BolusRequestDuringLockout";
-        attribute :>> scenarioKind = ScenarioKind::operative;
-        attribute :>> variantKind = ScenarioVariantKind::alternate;
-        attribute :>> variationPoint = "patient bolus request during the nominal therapy lockout interval";
-        attribute :>> operationalCondition = OperationalConditionKind::foreseeableMisuse;
         attribute :>> preCondition = "basal infusion active; lockout interval running";
         attribute :>> postCondition = "request ignored, logged; basal continues unchanged";
         attribute :>> pathSummary = "Patient presses bolus button during lockout > infusion manager rejects request > event logged > no additional drug delivered.";
         attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.9 PATIENT BOLUS mode (lockout requirements)";
-        ref :>> parentWorkflow = wfManageActiveTherapy;
-        ref :>> parentUseCase = ucDeliverPcaTherapy;
-        ref :>> baseScenario = osNominalTherapy;
-        ref :>> activities = oaRejectBolusDuringLockout;
 
-        action oaRejectBolusDuringLockout : OperationalActivity {
+        action oaRejectBolusDuringLockout : OperativeAction {
             attribute :>> name = "RejectBolusDuringLockout";
             action checkLockout; action rejectAndLog;
             first start then checkLockout; first checkLockout then rejectAndLog; first rejectAndLog then done;
         }
     }
-    action osOcclusionAlarm : MemoScenario {
+    action osOcclusionAlarm : OperativeScenario {
+        attribute :>> scenarioKind = ScenarioKind::alternate;
         attribute :>> id = "OS-003";
         attribute :>> name = "OcclusionDetectedDuringInfusion";
-        attribute :>> scenarioKind = ScenarioKind::operative;
-        attribute :>> variantKind = ScenarioVariantKind::exception;
-        attribute :>> variationPoint = "occlusion detected while nominal infusion is active";
-        attribute :>> operationalCondition = OperationalConditionKind::degraded;
         attribute :>> preCondition = "therapy active; downstream line becomes blocked";
         attribute :>> postCondition = "infusion paused, alarm annunciated, clinician clears occlusion and resumes";
         attribute :>> pathSummary = "Occlusion sensor exceeds pressure threshold > alarm raised same step > infusion paused > audible and visual annunciation > clinician resolves and resumes.";
         attribute :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.2 Alarms and Alerts (occlusion)";
-        ref :>> parentWorkflow = wfRespondToTherapyAlarm;
-        ref :>> parentUseCase = ucDeliverPcaTherapy;
-        ref :>> baseScenario = osNominalTherapy;
-        ref :>> activities = oaRespondToOcclusion;
 
-        action oaRespondToOcclusion : OperationalActivity {
+        action oaRespondToOcclusion : OperativeAction {
             attribute :>> name = "RespondToOcclusion";
             action pauseInfusion; action annunciateOcclusion; action resolveAndResume;
             first start then pauseInfusion; first pauseInfusion then annunciateOcclusion; first annunciateOcclusion then resolveAndResume; first resolveAndResume then done;
         }
     }
-    action osAirInLine : MemoScenario {
+    action osAirInLine : OperativeScenario {
+        attribute :>> scenarioKind = ScenarioKind::alternate;
         attribute :>> id = "OS-004";
         attribute :>> name = "AirInLineDetected";
-        attribute :>> scenarioKind = ScenarioKind::operative;
-        attribute :>> variantKind = ScenarioVariantKind::exception;
-        attribute :>> variationPoint = "air-in-line detected while nominal infusion is active";
-        attribute :>> operationalCondition = OperationalConditionKind::degraded;
         attribute :>> preCondition = "therapy active; air bubble enters tubing";
         attribute :>> postCondition = "infusion stopped before air reaches patient; alarm annunciated";
         attribute :>> pathSummary = "Air-in-line sensor detects bubble above threshold > transition to PAUSED (KVO flow) > High-priority Air embolism notification > clinician re-primes line and restarts.";
         attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.3 Notification Requirements (REQ 59: Air embolism)";
-        ref :>> parentWorkflow = wfRespondToTherapyAlarm;
-        ref :>> parentUseCase = ucDeliverPcaTherapy;
-        ref :>> baseScenario = osNominalTherapy;
-        ref :>> activities = oaRespondToAirInLine;
 
-        action oaRespondToAirInLine : OperationalActivity {
+        action oaRespondToAirInLine : OperativeAction {
             attribute :>> name = "RespondToAirInLine";
             action stopOrKvo; action annunciateAir; action reprimeAndRestart;
             first start then stopOrKvo; first stopOrKvo then annunciateAir; first annunciateAir then reprimeAndRestart; first reprimeAndRestart then done;
         }
     }
-    action osEmptyReservoir : MemoScenario {
+    action osEmptyReservoir : OperativeScenario {
+        attribute :>> scenarioKind = ScenarioKind::alternate;
         attribute :>> id = "OS-005";
         attribute :>> name = "ReservoirEmptyDuringTherapy";
-        attribute :>> scenarioKind = ScenarioKind::operative;
-        attribute :>> variantKind = ScenarioVariantKind::exception;
-        attribute :>> variationPoint = "reservoir-empty threshold reached during nominal therapy";
-        attribute :>> operationalCondition = OperationalConditionKind::degraded;
         attribute :>> preCondition = "therapy active; reservoir volume reaches empty threshold";
         attribute :>> postCondition = "infusion stopped, alarm raised, reservoir replaced";
         attribute :>> pathSummary = "Reservoir-empty condition detected > transition to PAUSED (KVO flow) > High-priority Empty Reservoir notification > clinician loads new reservoir > therapy resumed with saved prescription.";
         attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.3 Notification Requirements (REQ 59: Empty Reservoir)";
-        ref :>> parentWorkflow = wfRespondToTherapyAlarm;
-        ref :>> parentUseCase = ucDeliverPcaTherapy;
-        ref :>> baseScenario = osNominalTherapy;
-        ref :>> activities = oaReplaceEmptyReservoir;
 
-        action oaReplaceEmptyReservoir : OperationalActivity {
+        action oaReplaceEmptyReservoir : OperativeAction {
             attribute :>> name = "ReplaceEmptyReservoir";
             action stopAndAnnunciate; action replaceReservoir; action resumeTherapy;
             first start then stopAndAnnunciate; first stopAndAnnunciate then replaceReservoir; first replaceReservoir then resumeTherapy; first resumeTherapy then done;
         }
     }
-    action osPowerLoss : MemoScenario {
+    action osPowerLoss : OperativeScenario {
+        attribute :>> scenarioKind = ScenarioKind::alternate;
         attribute :>> id = "OS-006";
         attribute :>> name = "MainsPowerLossAndRecovery";
-        attribute :>> scenarioKind = ScenarioKind::operative;
-        attribute :>> variantKind = ScenarioVariantKind::recovery;
-        attribute :>> variationPoint = "mains supply lost during nominal therapy";
-        attribute :>> operationalCondition = OperationalConditionKind::degraded;
         attribute :>> preCondition = "therapy active on mains power";
         attribute :>> postCondition = "therapy continues on battery; prescription preserved across full power loss";
         attribute :>> pathSummary = "Mains lost > battery takes over with notification > if battery depletes, pump stops safely > on power restore, saved prescription recovered and therapy resumed only after clinician confirmation.";
         attribute :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.4.3 Electrical Hazards (battery failure)";
-        ref :>> parentWorkflow = wfRespondToTherapyAlarm;
-        ref :>> parentUseCase = ucDeliverPcaTherapy;
-        ref :>> baseScenario = osNominalTherapy;
-        ref :>> activities = oaRecoverAfterPowerLoss;
 
-        action oaRecoverAfterPowerLoss : OperationalActivity {
+        action oaRecoverAfterPowerLoss : OperativeAction {
             attribute :>> name = "RecoverAfterPowerLoss";
             action switchToBattery; action restorePrescription; action confirmRestart;
             first start then switchToBattery; first switchToBattery then restorePrescription; first restorePrescription then confirmRestart; first confirmRestart then done;
@@ -359,4 +311,22 @@ package memo_examples_gpca_pump_gpca_operational {
     #refinement dependency osAirInLine to ucDeliverPcaTherapy;
     #refinement dependency osEmptyReservoir to ucDeliverPcaTherapy;
     #refinement dependency osPowerLoss to ucDeliverPcaTherapy;
+
+    // ── Operational trace relations ─────────────────────────────
+    connection : RealizesUseCase connect realizingWorkflow ::> wfPrepareAndStartTherapy to realizedUseCase ::> ucDeliverPcaTherapy;
+    connection : RealizesUseCase connect realizingWorkflow ::> wfManageActiveTherapy to realizedUseCase ::> ucDeliverPcaTherapy;
+    connection : RealizesUseCase connect realizingWorkflow ::> wfRespondToTherapyAlarm to realizedUseCase ::> ucDeliverPcaTherapy;
+    connection : EnablesUseCase connect enablingCapability ::> ocTitratedAnalgesia to enabledUseCase ::> ucDeliverPcaTherapy;
+    connection : EnablesUseCase connect enablingCapability ::> ocFailSafeTherapy to enabledUseCase ::> ucDeliverPcaTherapy;
+    connection : RequiresCapability connect requiringIntendedUse ::> gpcaIntendedUse to requiredCapability ::> ocTitratedAnalgesia;
+    connection : RequiresCapability connect requiringIntendedUse ::> gpcaIntendedUse to requiredCapability ::> ocFailSafeTherapy;
+
+
+    connection : HasScenario connect owningWorkflow ::> wfManageActiveTherapy to pathScenario ::> osNominalTherapy;
+    connection : HasScenario connect owningWorkflow ::> wfManageActiveTherapy to pathScenario ::> osLockoutBolus;
+    connection : HasScenario connect owningWorkflow ::> wfRespondToTherapyAlarm to pathScenario ::> osOcclusionAlarm;
+    connection : HasScenario connect owningWorkflow ::> wfRespondToTherapyAlarm to pathScenario ::> osAirInLine;
+    connection : HasScenario connect owningWorkflow ::> wfRespondToTherapyAlarm to pathScenario ::> osEmptyReservoir;
+    connection : HasScenario connect owningWorkflow ::> wfRespondToTherapyAlarm to pathScenario ::> osPowerLoss;
+
 }

package/examples/gpca-pump/model/catalog/gpca_system.sysml

@@ -9,15 +9,9 @@ package memo_examples_gpca_pump_gpca_system {
     private import memo_architecture_operational_use_cases::*;
     private import memo_core_common::*;
 
-    part gpcaMission : Mission {
-        attribute :>> id = "MSN-001";
-        attribute :>> name = "GPCA_Mission";
-        attribute :>> title = "Safe Patient-Controlled Analgesia";
-        attribute :>> shortDescription = "Deliver prescribed analgesia with patient-controlled boluses, never exceeding safe dose limits.";
-        attribute :>> missionKind = "therapeutic device mission";
-        attribute :>> successCriteria = "Drug delivered per prescription; no overdose or undetected under-infusion; every hazardous condition annunciated within its alarm latency budget.";
-        attribute :>> operationalContext = "Acute-care hospital ward, fixed (non-ambulatory) location (UC-001).";
-    }
+    // The device's top-level goal is its IntendedUse (gpcaIntendedUse in
+    // gpca_context) — a MemoMission. The former separate gpcaMission was
+    // retired: "mission" duplicated the regulated intended-use statement.
 
     // ── Functional chains ───────────────────────────────────────
     part fcPatientBolus : FunctionalFlow {
@@ -105,24 +99,17 @@ package memo_examples_gpca_pump_gpca_system {
     }
 
     // ── System scenarios ────────────────────────────────────────
-    action ssBolusDuringBasal : MemoScenario {
+    action ssBolusDuringBasal : OperativeScenario {
         attribute :>> id = "SS-001";
         attribute :>> name = "PatientBolusDuringBasal";
-        attribute :>> scenarioKind = ScenarioKind::functional;
-        attribute :>> variantKind = ScenarioVariantKind::nominal;
-        attribute :>> operationalCondition = OperationalConditionKind::normal;
         attribute :>> preCondition = "BASAL mode active; no REQ 25 ignore condition holds";
         attribute :>> postCondition = "PATIENT_BOLUS mode entered, bolus delivered, return to BASAL";
     }
-    action ssAlarmPause : MemoScenario {
+    action ssAlarmPause : OperativeScenario {
+        attribute :>> scenarioKind = ScenarioKind::alternate;
         attribute :>> id = "SS-002";
         attribute :>> name = "InhibitingNotificationPausesInfusion";
-        attribute :>> scenarioKind = ScenarioKind::functional;
-        attribute :>> variantKind = ScenarioVariantKind::exception;
-        attribute :>> variationPoint = "an infusion-inhibiting notification interrupts active therapy";
-        attribute :>> operationalCondition = OperationalConditionKind::degraded;
         attribute :>> preCondition = "any ACTIVE therapy mode; infusion-inhibiting notification detected (REQ 59)";
         attribute :>> postCondition = "PAUSED mode entered in same execution step at FlowRate_kvo_hd keep-vein-open flow; notification annunciated per REQ 59";
-        ref :>> baseScenario = ssBolusDuringBasal;
     }
 }

package/examples/gpca-pump/model/catalog/gpca_trace.sysml

@@ -72,9 +72,6 @@ package memo_examples_gpca_pump_gpca_trace {
     first oaLoadReservoir then oaProgram;
     first oaProgram then oaStartTherapy;
     first oaStartTherapy then oaRequestBolus;
-    connection : Supports { attribute :>> supportKind = SupportKind::capability; connect supporter ::> oaStartTherapy to supported ::> ocTitratedAnalgesia; }
-    connection : Supports { attribute :>> supportKind = SupportKind::capability; connect supporter ::> oaRequestBolus to supported ::> ocTitratedAnalgesia; }
-    connection : Supports { attribute :>> supportKind = SupportKind::capability; connect supporter ::> oaRespondAlarm to supported ::> ocFailSafeTherapy; }
     connection : DerivesFrom connect sourceDriver ::> oaProgram to targetRequirement ::> reqDrugLibraryLimits;
     connection : DerivesFrom connect sourceDriver ::> oaRequestBolus to targetRequirement ::> reqCs25;
     connection : DerivesFrom connect sourceDriver ::> oaRespondAlarm to targetRequirement ::> reqCs59;

package/examples/gpca-pump/model/catalog/viewpoints/context/views/context_system_context_view.sysml

@@ -18,7 +18,6 @@ package memo_examples_gpca_pump_viewpoints_context_views_context_system_context_
         attribute depth = 2;
         attribute :>> id = "VIEW-CTX-101";
         attribute :>> name = "GPCA_SystemContextView";
-        attribute :>> title = "GPCA System Context View";
         attribute :>> shortDescription = "Actors, use contexts, and external entities at the GPCA system boundary.";
         attribute :>> description = "Shows the CriSys Fig 2.1 boundary: patient, clinician, prescription, drug reservoir, needle, hospital pharmacy database, and hospital environment around the pump, with directional data flows, physical drug-path connections, and the intended use anchoring the boundary.";
         attribute :>> outputKind = (ViewOutputKind::diagram);
@@ -28,7 +27,6 @@ package memo_examples_gpca_pump_viewpoints_context_views_context_system_context_
         attribute :>> dataSourceDescription = "GPCA context layer: actors, use contexts, intended use, operational entities";
         attribute :>> autoPopulate = true;
         attribute :>> queryDescription = "Include actors, use contexts, intended use, and external operational entities.";
-        attribute :>> documentUsage = ("Architecture Description", "Usability Engineering File");
         part :>> selectionQuery {
             attribute :>> id = "QRY-CTX-101";
             attribute :>> name = "GPCA_SystemContextQuery";
@@ -38,6 +36,6 @@ package memo_examples_gpca_pump_viewpoints_context_views_context_system_context_
             attribute :>> selectionExpression = "product == 'GPCA'";
             attribute :>> rationaleText = "Auto-populate the GPCA context view from the context layer.";
         }
-        part :>> viewpointDefinition = contextViewpoint;
+        ref :>> viewpointDefinition = contextViewpoint;
     }
 }

package/examples/gpca-pump/model/catalog/viewpoints/cybersecurity/views/cybersecurity_cybersecurity_view.sysml

@@ -19,7 +19,6 @@ package memo_examples_gpca_pump_viewpoints_cybersecurity_views_cybersecurity_cyb
         attribute depth = 2;
         attribute :>> id = "VIEW-CYB-001";
         attribute :>> name = "GPCA_CybersecurityView";
-        attribute :>> title = "GPCA Cybersecurity View";
         attribute :>> shortDescription = "Shows GPCA assets, trust boundaries, threats, vulnerabilities, and mitigations.";
         attribute :>> description = "Product-specific cybersecurity view intended for secure product development and cross-reference into cybersecurity risk documentation.";
         attribute :>> outputKind = (ViewOutputKind::diagram);
@@ -29,16 +28,15 @@ package memo_examples_gpca_pump_viewpoints_cybersecurity_views_cybersecurity_cyb
         attribute :>> dataSourceDescription = "GPCA cyber assets, threat scenarios, and trace links";
         attribute :>> autoPopulate = true;
         attribute :>> queryDescription = "Include cyber assets, trust boundaries, threats, vulnerabilities, cyber hazards, cyber risks, mitigations, security requirements, and verification.";
-        attribute :>> documentUsage = ("Threat Model", "Cybersecurity Risk Assessment", "QMSR");
         part :>> selectionQuery {
             attribute :>> id = "QRY-CYB-001";
             attribute :>> name = "GPCA_CybersecurityQuery";
-            attribute :>> includeElementKinds = ("CybersecurityAsset", "Threat", "Vulnerability", "CyberHazard", "CyberRisk", "CyberMitigation", "SecurityRequirement", "TrustBoundary", "MemoScenario[scenarioKind=threat]");
+            attribute :>> includeElementKinds = ("CybersecurityAsset", "Threat", "Vulnerability", "CyberHazard", "CyberRisk", "CyberMitigation", "SecurityRequirement", "TrustBoundary", "OperativeScenario[scenarioKind=threat]");
             attribute :>> includeLayers = ("cybersecurity", "risk", "assurance");
             attribute :>> includeConcerns = (ConcernKind::cybersecurity, ConcernKind::privacy, ConcernKind::safety);
             attribute :>> selectionExpression = "product == 'GPCA'";
             attribute :>> rationaleText = "Auto-populate the GPCA cybersecurity view from the cyber layer and cross-layer trace model.";
         }
-        part :>> viewpointDefinition = cybersecurityViewpoint;
+        ref :>> viewpointDefinition = cybersecurityViewpoint;
     }
 }

package/examples/gpca-pump/model/catalog/viewpoints/cybersecurity/views/document_cyber_assessment_view.sysml

@@ -10,15 +10,12 @@ package memo_examples_gpca_pump_viewpoints_cybersecurity_views_document_cyber_as
         expose memo_examples_gpca_pump_viewpoints_cybersecurity_views_document_cyber_assessment_view::*;
         attribute :>> id = "DOC-003";
         attribute :>> name = "GPCAMemoCybersecurityAssessmentView";
-        attribute :>> title = "GPCA Cybersecurity Assessment View";
         attribute :>> shortDescription = "Cybersecurity risk-assessment-oriented document view for GPCA.";
         attribute :>> description = "Captures GPCA cyber risks, mitigations, security requirements, verification, and safety/privacy traceability for cybersecurity assessment records.";
         attribute :>> version = "0.1";
         attribute :>> lifecycleState = LifecycleStateKind::development;
         attribute :>> marketScope = "generic";
-        attribute :>> documentUsage = ("Cybersecurity Risk Assessment", "RMF", "QMSR");
-        attribute :>> sectionIdentifier = "CYB-RA";
-        part :>> viewpointDefinition = cybersecurityViewpoint;
+        ref :>> viewpointDefinition = cybersecurityViewpoint;
         part :>> selectionQuery {
             attribute :>> id = "QRY-DOC-009";
             attribute :>> name = "cyberAssessmentViewQuery";

package/examples/gpca-pump/model/catalog/viewpoints/cybersecurity/views/document_threat_model_view.sysml

@@ -10,19 +10,16 @@ package memo_examples_gpca_pump_viewpoints_cybersecurity_views_document_threat_m
         expose memo_examples_gpca_pump_viewpoints_cybersecurity_views_document_threat_model_view::*;
         attribute :>> id = "DOC-002";
         attribute :>> name = "GPCACyberThreatModelView";
-        attribute :>> title = "GPCA Cybersecurity Threat Model View";
         attribute :>> shortDescription = "Threat-model-oriented document view for GPCA.";
         attribute :>> description = "Captures GPCA cyber assets, trust boundaries, threats, threat scenarios, vulnerabilities, and mitigations for secure product development records.";
         attribute :>> version = "0.1";
         attribute :>> lifecycleState = LifecycleStateKind::development;
         attribute :>> marketScope = "generic";
-        attribute :>> documentUsage = ("Threat Model", "QMSR");
-        attribute :>> sectionIdentifier = "CYB-TM";
-        part :>> viewpointDefinition = cybersecurityViewpoint;
+        ref :>> viewpointDefinition = cybersecurityViewpoint;
         part :>> selectionQuery {
             attribute :>> id = "QRY-DOC-008";
             attribute :>> name = "threatModelViewQuery";
-            attribute :>> includeElementKinds = ("Threat", "MemoScenario[scenarioKind=threat]", "Vulnerability", "CybersecurityAsset", "TrustBoundary", "AttackSurface", "CyberMitigation", "SecurityRequirement");
+            attribute :>> includeElementKinds = ("Threat", "OperativeScenario[scenarioKind=threat]", "Vulnerability", "CybersecurityAsset", "TrustBoundary", "AttackSurface", "CyberMitigation", "SecurityRequirement");
             attribute :>> includeRelationshipKinds = ("ThreatenedBy", "Exploits", "RealizedByScenario", "CrossesTrustBoundary", "Mitigates", "DerivesCyberRequirement");
             attribute :>> rationaleText = "Declares what this document-backed view renders; the web renderer is presentation-only.";
         }

package/examples/gpca-pump/model/catalog/viewpoints/functional/views/functional_function_allocation_view.sysml

@@ -18,7 +18,6 @@ package memo_examples_gpca_pump_viewpoints_functional_views_functional_function_
         attribute depth = 2;
         attribute :>> id = "VIEW-FUN-102";
         attribute :>> name = "GPCA_FunctionAllocationView";
-        attribute :>> title = "GPCA Function Allocation View";
         attribute :>> shortDescription = "Allocation of logical functions to software components and hardware assemblies.";
         attribute :>> outputKind = (ViewOutputKind::matrix);
         attribute :>> presentationKind = (PresentationKind::traceMatrix);
@@ -27,7 +26,6 @@ package memo_examples_gpca_pump_viewpoints_functional_views_functional_function_
         attribute :>> dataSourceDescription = "AllocatedTo links between functions and architecture elements";
         attribute :>> autoPopulate = true;
         attribute :>> queryDescription = "Include logical functions with their AllocatedTo targets.";
-        attribute :>> documentUsage = ("SDD", "Architecture Description");
         part :>> selectionQuery {
             attribute :>> id = "QRY-FUN-102";
             attribute :>> name = "GPCA_FunctionAllocationQuery";
@@ -37,6 +35,6 @@ package memo_examples_gpca_pump_viewpoints_functional_views_functional_function_
             attribute :>> selectionExpression = "product == 'GPCA'";
             attribute :>> rationaleText = "Show complete function-to-component allocation coverage.";
         }
-        part :>> viewpointDefinition = functionalViewpoint;
+        ref :>> viewpointDefinition = functionalViewpoint;
     }
 }