@memoarchitect/ontology 0.8.24 → 0.10.9

package/examples/gpca-pump/model/catalog/gpca_cybersecurity.sysml

@@ -15,8 +15,9 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     private import memo_examples_gpca_pump_gpca_requirements::*;
     private import memo_examples_gpca_pump_gpca_verification::*;
 
+    private import memo_core_common::MemoIdentity;
     part therapyConfigurationAsset : CybersecurityAsset {
-        attribute :>> id = "AST-CYB-001";
+        @MemoIdentity { :>> providedId = "AST-CYB-001"; }
         attribute :>> name = "TherapyConfigurationAsset";
         attribute :>> assetKind = AssetKind::configuration;
         attribute :>> confidentialityNeed = "medium";
@@ -28,7 +29,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     part patientEventLogAsset : CybersecurityAsset {
-        attribute :>> id = "AST-CYB-002";
+        @MemoIdentity { :>> providedId = "AST-CYB-002"; }
         attribute :>> name = "PatientEventLogAsset";
         attribute :>> assetKind = AssetKind::auditRecord;
         attribute :>> confidentialityNeed = "high";
@@ -40,7 +41,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     part maintenancePortBoundary : TrustBoundary {
-        attribute :>> id = "TB-001";
+        @MemoIdentity { :>> providedId = "TB-001"; }
         attribute :>> name = "MaintenancePortBoundary";
         attribute :>> boundaryType = "service-access";
         attribute :>> crossingConstraint = "Boundary between service tooling and therapy controller runtime.";
@@ -48,7 +49,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     part unauthorizedConfigChangeThreat : Threat {
-        attribute :>> id = "TH-001";
+        @MemoIdentity { :>> providedId = "TH-001"; }
         attribute :>> name = "UnauthorizedTherapyConfigurationChange";
         attribute :>> driverKind = "cybersecurity";
         attribute :>> threatCategory = ThreatCategoryKind::tampering;
@@ -60,7 +61,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     part eventLogTamperingThreat : Threat {
-        attribute :>> id = "TH-002";
+        @MemoIdentity { :>> providedId = "TH-002"; }
         attribute :>> name = "PatientEventLogTampering";
         attribute :>> driverKind = "cybersecurity";
         attribute :>> threatCategory = ThreatCategoryKind::repudiation;
@@ -72,7 +73,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     part weakServiceAuthentication : Vulnerability {
-        attribute :>> id = "VULN-001";
+        @MemoIdentity { :>> providedId = "VULN-001"; }
         attribute :>> name = "WeakServiceAuthentication";
         attribute :>> weakness = "service mode relies on shared default credential";
         attribute :>> exploitability = "moderate";
@@ -82,7 +83,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     action tamperedConfigurationScenario : OperativeScenario {
-        attribute :>> id = "SCN-001";
+        @MemoIdentity { :>> providedId = "SCN-001"; }
         attribute :>> name = "TamperedTherapyConfigurationScenario";
         attribute :>> description = "An attacker with local access to the maintenance port alters lockout or dose parameters, aiming to bypass safety limits; may enable unsafe therapy delivery or bypass safeguards.";
         attribute :>> actorDescription = "unauthorized actor with local access to the maintenance port";
@@ -90,7 +91,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     part unsafeDoseCyberHazard : CyberHazard {
-        attribute :>> id = "CHZ-001";
+        @MemoIdentity { :>> providedId = "CHZ-001"; }
         attribute :>> name = "UnsafeTherapyConfigurationHazard";
         attribute :>> hazardType = HazardTypeKind::drugDeliveryError;
         attribute :>> foreseeable = true;
@@ -101,7 +102,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     part configurationTamperingRisk : CyberRisk {
-        attribute :>> id = "CRISK-001";
+        @MemoIdentity { :>> providedId = "CRISK-001"; }
         attribute :>> name = "ConfigurationTamperingRisk";
         attribute :>> driverKind = "cyber risk";
         attribute :>> probabilityEstimate = ProbabilityKind::occasional;
@@ -115,7 +116,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     part strongServiceAuthentication : CyberMitigation {
-        attribute :>> id = "CMIT-001";
+        @MemoIdentity { :>> providedId = "CMIT-001"; }
         attribute :>> name = "StrongServiceAuthenticationAndAudit";
         attribute :>> controlKind = RiskControlKind::protectiveMeasure;
         attribute :>> implementationKind = RiskControlImplementationKind::softwareDesign;
@@ -126,7 +127,7 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     requirement reqAuthenticatedServiceAccess : SecurityRequirement {
-        attribute :>> id = "SREQ-001";
+        @MemoIdentity { :>> providedId = "SREQ-001"; }
         attribute :>> name = "AuthenticatedServiceAccess";
         attribute :>> statement = "The system shall require authenticated and authorized service access before any therapy configuration parameter can be modified.";
         attribute :>> sourceKind = RequirementSourceKind::risk;
@@ -144,9 +145,9 @@ package memo_examples_gpca_pump_gpca_cybersecurity {
     }
 
     verification vcAuthenticatedServiceAccess : VerificationCase {
-        attribute :>> id = "CVER-001";
+        @MemoIdentity { :>> providedId = "CVER-001"; }
         attribute :>> name = "VerifyAuthenticatedServiceAccess";
-        attribute :>> methodKind = VerificationMethodKind::test;
+        attribute :>> methodKind = MemoVerificationMethodKind::test;
         attribute :>> acceptanceCriteria = "Only authenticated and authorized service sessions may modify therapy configuration; all attempts are logged.";
         attribute :>> status = ElementStatusKind::approved;
 

package/examples/gpca-pump/model/catalog/gpca_formal_behavior.sysml

@@ -4,6 +4,8 @@ package memo_examples_gpca_pump_gpca_formal_behavior {
     private import memo_architecture_functional_behavior::*;
     private import memo_core_enumerations::*;
 
+    private import memo_core_common::*;
+    private import memo_core_common::MemoIdentity;
     // ═════════════════════════════════════════════════════════════
     // Formal assume/guarantee properties translated 1:1 from the
     // CriSys AADL AGREE annexes (GPCA_SW.aadl composite contract;
@@ -13,161 +15,161 @@ package memo_examples_gpca_pump_gpca_formal_behavior {
     // guarantees zero flow.
     // ═════════════════════════════════════════════════════════════
     part gpcaSwContract : Contract {
-        attribute :>> id = "CTR-000";
+        @MemoIdentity { :>> providedId = "CTR-000"; }
         attribute :>> name = "GpcaSwCompositeContract";
         attribute :>> contractScope = "GPCA_SW (composite, verified compositionally over the 8 subcomponents)";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex"; }
     }
     part topLevelContract : Contract {
-        attribute :>> id = "CTR-001";
+        @MemoIdentity { :>> providedId = "CTR-001"; }
         attribute :>> name = "TopLevelModeContract";
         attribute :>> contractScope = "Top_Level_Mode";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, Top_Level_Mode.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, Top_Level_Mode.aadl AGREE annex"; }
     }
     part infusionManagerContract : Contract {
-        attribute :>> id = "CTR-002";
+        @MemoIdentity { :>> providedId = "CTR-002"; }
         attribute :>> name = "InfusionManagerContract";
         attribute :>> contractScope = "Infusion_Manager";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, Infusion_Manager.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, Infusion_Manager.aadl AGREE annex"; }
     }
     part alarmContract : Contract {
-        attribute :>> id = "CTR-003";
+        @MemoIdentity { :>> providedId = "CTR-003"; }
         attribute :>> name = "AlarmContract";
         attribute :>> contractScope = "Alarm";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, Alarm.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, Alarm.aadl AGREE annex"; }
     }
 
     // ── Assumptions (GPCA_SW.aadl) ──────────────────────────────
     part assumeVtbiHighPositive : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::assumption;
-        attribute :>> id = "AP-002";
+        @MemoIdentity { :>> providedId = "AP-002"; }
         attribute :>> name = "VtbiHighPositive";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "assume DB_IN.VTBI_High > 0";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex"; }
     }
     part assumeEmptyReservoirPositive : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::assumption;
-        attribute :>> id = "AP-003";
+        @MemoIdentity { :>> providedId = "AP-003"; }
         attribute :>> name = "EmptyReservoirConstPositive";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "assume CONST_IN.Empty_Reservoir > 0";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex"; }
     }
     part assumeValidPrescriptionSaved : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::assumption;
-        attribute :>> id = "AP-001";
+        @MemoIdentity { :>> providedId = "AP-001"; }
         attribute :>> name = "ValidPrescriptionSavedBeforeTherapy";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "assume a saved prescription is available before infusion initiation";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.3.1 (REQ 7)";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.3.1 (REQ 7)"; }
     }
 
     // ── Guarantees (GPCA_SW.aadl AGREE annex, 1:1) ──────────────
     part guaranteeExclusiveMode : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-001";
+        @MemoIdentity { :>> providedId = "GP-001"; }
         attribute :>> name = "ModeRange";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee mode_range: GPCA_SW_OUT.Current_System_Mode in {0, 1, 2, 3, 4, 6, 7, 8} (source enumeration omits 5)";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 1)";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 1)"; }
     }
     part guaranteeOffMode : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-004";
+        @MemoIdentity { :>> providedId = "GP-004"; }
         attribute :>> name = "NotStartImpliesModeZero";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee not(OP_CMD_IN.System_Start) => GPCA_SW_OUT.Current_System_Mode = 0";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex"; }
     }
     part guaranteeInitialStart : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-005";
+        @MemoIdentity { :>> providedId = "GP-005"; }
         attribute :>> name = "InitialSystemStartImpliesModeOne";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee sys_initial and OP_CMD_IN.System_Start => GPCA_SW_OUT.Current_System_Mode = 1";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 4 allocation: TLM System_Start -> System_On; IM System_On -> mode 1)";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 4 allocation: TLM System_Start -> System_On; IM System_On -> mode 1)"; }
     }
     part guaranteeOffToOn : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-006";
+        @MemoIdentity { :>> providedId = "GP-006"; }
         attribute :>> name = "OffToOnImpliesModeOne";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee not(sys_initial) and pre(GPCA_SW_OUT.Current_System_Mode) = 0 and OP_CMD_IN.System_Start => GPCA_SW_OUT.Current_System_Mode = 1";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 4)";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 4)"; }
     }
     part guaranteeEmptyReservoirNoFlow : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-007";
+        @MemoIdentity { :>> providedId = "GP-007"; }
         attribute :>> name = "EmptyReservoirImpliesNoFlow";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee (OP_CMD_IN.System_Start and pre(Current_System_Mode) > 1 and GPCA_SW_OUT.Reservoir_Volume < CONST_IN.Empty_Reservoir) => GPCA_SW_OUT.Commanded_Flow_Rate = 0";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 59 'Empty Reservoir')";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 59 'Empty Reservoir')"; }
     }
     part guaranteeVtbiKvo : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-008";
+        @MemoIdentity { :>> providedId = "GP-008"; }
         attribute :>> name = "OverVtbiImpliesFlowAtMostKvo";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee (OP_CMD_IN.System_Start and pre(Current_System_Mode) > 1 and GPCA_SW_OUT.Volume_Infused > DB_IN.VTBI_High) => GPCA_SW_OUT.Commanded_Flow_Rate <= GPCA_SW_OUT.Flow_Rate_KVO";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (over-infusion => keep-vein-open, not zero)";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (over-infusion => keep-vein-open, not zero)"; }
     }
     part guaranteeAirInLineKvo : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-009";
+        @MemoIdentity { :>> providedId = "GP-009"; }
         attribute :>> name = "AirInLineImpliesFlowAtMostKvo";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee (OP_CMD_IN.System_Start and SENSOR_IN.Air_In_Line) => GPCA_SW_OUT.Commanded_Flow_Rate <= GPCA_SW_OUT.Flow_Rate_KVO";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 21 'Air embolism')";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex (REQ 21 'Air embolism')"; }
     }
     part guaranteeOcclusionKvo : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-010";
+        @MemoIdentity { :>> providedId = "GP-010"; }
         attribute :>> name = "OcclusionImpliesFlowAtMostKvo";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee (OP_CMD_IN.System_Start and SENSOR_IN.Occlusion) => GPCA_SW_OUT.Commanded_Flow_Rate <= GPCA_SW_OUT.Flow_Rate_KVO";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex"; }
     }
     part guaranteeDoorOpenKvo : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-011";
+        @MemoIdentity { :>> providedId = "GP-011"; }
         attribute :>> name = "DoorOpenImpliesFlowAtMostKvo";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee (OP_CMD_IN.System_Start and SENSOR_IN.Door_Open) => GPCA_SW_OUT.Commanded_Flow_Rate <= GPCA_SW_OUT.Flow_Rate_KVO";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl AGREE annex"; }
     }
     part guaranteeAlarmStopsSameStep : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-003";
+        @MemoIdentity { :>> providedId = "GP-003"; }
         attribute :>> name = "SameStepAlarmKvoGuarantee";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee an infusion-inhibiting notification in a step implies Commanded_Flow_Rate <= Flow_Rate_KVO in the same step (ALARM_OUT -> IM.ALARM_IN is an immediate connection)";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl (ALARM_to_IM immediate) with the flow <= KVO guarantees above";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl (ALARM_to_IM immediate) with the flow <= KVO guarantees above"; }
     }
     part guaranteeLockoutPreventsBolus : BehaviorProperty {
         attribute :>> propertyKind = BehaviorPropertyKind::guarantee;
-        attribute :>> id = "GP-002";
+        @MemoIdentity { :>> providedId = "GP-002"; }
         attribute :>> name = "LockoutGuarantee";
         attribute :>> languageKind = PropertyLanguageKind::agreeLike;
         attribute :>> formalExpression = "guarantee a BolusRequest_prog inside the LockOutPeriod_pbolus_prog window is ignored and no PATIENT BOLUS is initiated";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.6.1 (REQ 25.3, REQ 26)";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.6.1 (REQ 25.3, REQ 26)"; }
     }
 
     // ── Temporal properties over the mode machine ───────────────
     part temporalNoInvalidTransition : BehaviorProperty {
-        attribute :>> id = "BP-010";
+        @MemoIdentity { :>> providedId = "BP-010"; }
         attribute :>> name = "NoInvalidTransition";
         attribute :>> propertyKind = BehaviorPropertyKind::temporalProperty;
         attribute :>> languageKind = PropertyLanguageKind::ltlLike;
         attribute :>> formalExpression = "G(mode transitions follow only the edges of the Fig 4.1 hierarchy as constrained by REQ 4-5, 12-13, 19-23, 28-39, 46-47)";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1 Fig 4.1";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1 Fig 4.1"; }
     }
     part temporalPauseOnCriticalAlarm : BehaviorProperty {
-        attribute :>> id = "BP-011";
+        @MemoIdentity { :>> providedId = "BP-011"; }
         attribute :>> name = "PauseAtKvoOnInhibitingNotification";
         attribute :>> propertyKind = BehaviorPropertyKind::safetyProperty;
         attribute :>> languageKind = PropertyLanguageKind::ltlLike;
         attribute :>> formalExpression = "G(infusion_inhibiting_notification -> X (mode = PAUSED and Commanded_Flow_Rate <= Flow_Rate_KVO))";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.5.2 (REQ 19-23) and §4.1.10.1 (REQ 43)";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.5.2 (REQ 19-23) and §4.1.10.1 (REQ 43)"; }
     }
 }