@memoarchitect/ontology 0.8.24 → 0.11.0

package/examples/gpca-pump/model/catalog/gpca_behavior_modes.sysml

@@ -7,6 +7,7 @@ package memo_examples_gpca_pump_gpca_behavior_modes {
     private import memo_examples_gpca_pump_gpca_system::*;
     private import memo_examples_gpca_pump_gpca_architecture::*;
 
+    private import memo_core_common::MemoIdentity;
     // ═════════════════════════════════════════════════════════════
     // GPCA mode machine per CriSys Ch.4 Fig 4.1 mode hierarchy:
     //   OFF, ON { IDLE, THERAPY { PAUSED, ACTIVE { BASAL,
@@ -23,108 +24,108 @@ package memo_examples_gpca_pump_gpca_behavior_modes {
     // outside this compact mode view.
     // ═════════════════════════════════════════════════════════════
     state topLevelModeMachine : StateMachine {
-        attribute :>> id = "BM-001";
+        @MemoIdentity { :>> providedId = "BM-001"; }
         attribute :>> name = "TopLevelModeMachine";
         attribute :>> machineKind = "hierarchical state machine";
         attribute :>> executionSemantics = "single-step synchronous; sub-modes inherit all parent-mode requirements";
         attribute fidelityScope = "Requirements-derived therapy mode hierarchy; partial abstraction of CITE-009, not a state-for-state Stateflow transcription";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1 Fig 4.1; CITE-009: CriSys PCA Pump Software Model";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1 Fig 4.1; CITE-009: CriSys PCA Pump Software Model"; }
 
         // ── Mode states (Fig 4.1) ───────────────────────────
         state modeOFF : MemoState {
-            attribute :>> id = "MODE-000";
+            @MemoIdentity { :>> providedId = "MODE-000"; }
             attribute :>> stateKind = StateKind::mode;
         attribute :>> name = "OFF";
             attribute :>> modeKind = "top (default)";
             attribute :>> description = "No functionality; the GPCA is turned off. FlowRate_output = 0 (REQ 6).";
             attribute :>> entryCondition = "System_stop_prog commanded while ON (REQ 5); default mode";
             attribute :>> exitCondition = "System_start_prog commanded (REQ 4)";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.2";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.2"; }
         }
 
         state modeON : MemoState {
-            attribute :>> id = "MODE-001";
+            @MemoIdentity { :>> providedId = "MODE-001"; }
             attribute :>> stateKind = StateKind::mode;
         attribute :>> name = "ON";
             attribute :>> modeKind = "operational parent";
             attribute :>> description = "Topmost operational mode: prescription configuration (REQ 8), infusion initiation gating (REQ 7, 9), notification (REQ 10) and logging (REQ 11) are available.";
             attribute :>> entryCondition = "System_start_prog from OFF; A.4 variables set to defaults (REQ 4)";
             attribute :>> exitCondition = "System_stop_prog: stop infusion, cancel all notifications (REQ 5)";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.3";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.3"; }
 
             state modeIDLE : MemoState {
-                attribute :>> id = "MODE-002";
+                @MemoIdentity { :>> providedId = "MODE-002"; }
                 attribute :>> stateKind = StateKind::mode;
                 attribute :>> name = "ON.IDLE";
                 attribute :>> modeKind = "idle";
                 attribute :>> description = "Default sub-mode on entry to ON; no infusion, FlowRate_output = 0 (REQ 14); prescription set-up happens here. 'IDLE Time' actions after Max_IDLE_Duration_const (REQ 15).";
                 attribute :>> entryCondition = "OFF -> ON transition (REQ 4); infusion complete (REQ 28); PAUSED inhibit (REQ 47)";
                 attribute :>> exitCondition = "confirmed second Infusion_initiate_prog (REQ 12/13)";
-                attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.4";
+                @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.4"; }
             }
 
             state modeTHERAPY : MemoState {
-                attribute :>> id = "MODE-003";
+                @MemoIdentity { :>> providedId = "MODE-003"; }
                 attribute :>> stateKind = StateKind::mode;
                 attribute :>> name = "ON.THERAPY";
                 attribute :>> modeKind = "therapy parent";
                 attribute :>> description = "Parent of all drug-delivering sub-modes. Delivers FlowRate_Mode_macro within Tolerance_Max_const (REQ 16); monitors under-infusion (REQ 17), low reservoir (REQ 18), over-infusion, VTBI, air, reverse delivery, empty reservoir (REQ 19-23).";
                 attribute :>> entryCondition = "infusion initiated (REQ 12/13)";
                 attribute :>> exitCondition = "infusion complete to IDLE (REQ 28); manual stop from PAUSED (REQ 47); system stop (REQ 5)";
-                attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.5";
+                @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.5"; }
 
                 state modePAUSED : MemoState {
-                    attribute :>> id = "MODE-004";
+                    @MemoIdentity { :>> providedId = "MODE-004"; }
                     attribute :>> stateKind = StateKind::mode;
                     attribute :>> name = "ON.THERAPY.PAUSED";
                     attribute :>> modeKind = "paused (KVO delivery)";
                     attribute :>> description = "Infusion paused by notification actions or manual inhibit. FlowRate_Mode_macro = FlowRate_kvo_hd — keep-vein-open flow within Tolerance_Max_const, NOT zero (REQ 43). 'PAUSED Time' actions after Max_PAUSED_Duration_const (REQ 44). Infusion_initiate_prog while Inhibited_Infusion_macro = TRUE causes no transition (REQ 45).";
                     attribute :>> entryCondition = "REQ 19-23 alarm transitions, REQ 29 manual inhibit, REQ 30 all-inhibited, REQ 37-39 sub-mode inhibits, REQ 13 initiate-while-inhibited";
                     attribute :>> exitCondition = "Infusion_initiate_prog with Inhibited_Infusion_macro = FALSE (REQ 46); Infusion_inhibit_prog to IDLE (REQ 47)";
-                    attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.10 (REQ 43-47)";
+                    @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.10 (REQ 43-47)"; }
                 }
 
                 state modeACTIVE : MemoState {
-                    attribute :>> id = "MODE-005";
+                    @MemoIdentity { :>> providedId = "MODE-005"; }
                     attribute :>> stateKind = StateKind::mode;
                     attribute :>> name = "ON.THERAPY.ACTIVE";
                     attribute :>> modeKind = "active parent";
                     attribute :>> description = "Actual infusion through BASAL, SQUARE BOLUS or PATIENT BOLUS. Only mode where a patient bolus may be requested (REQ 25). Square boluses are scheduled automatically every Interval_sbolus_prog for Duration_sbolus_prog (REQ 24). Actual_Infusion_Duration_macro accumulates here.";
                     attribute :>> entryCondition = "infusion initiated (REQ 12) or resumed (REQ 46)";
                     attribute :>> exitCondition = "infusion complete (REQ 28); PAUSED via REQ 29/30/37-39";
-                    attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.6";
+                    @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.6"; }
 
                     state modeBASAL : MemoState {
-                        attribute :>> id = "MODE-006";
+                        @MemoIdentity { :>> providedId = "MODE-006"; }
                         attribute :>> stateKind = StateKind::mode;
                         attribute :>> name = "ON.THERAPY.ACTIVE.BASAL";
                         attribute :>> modeKind = "active-basal";
                         attribute :>> description = "Constant-rate delivery at FlowRate_basal_prog within Tolerance_Max_const (REQ 40). FlowRate_Mode_macro = FlowRate_basal_prog.";
                         attribute :>> entryCondition = "infusion initiated/resumed (REQ 12/46); square bolus ended (REQ 34); patient bolus ended (REQ 35)";
                         attribute :>> exitCondition = "scheduled square bolus (REQ 31); patient bolus granted (REQ 32); Inhibited_Infusion_macro (REQ 37)";
-                        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.7";
+                        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.7"; }
                     }
 
                     state modeSQUARE : MemoState {
-                        attribute :>> id = "MODE-007";
+                        @MemoIdentity { :>> providedId = "MODE-007"; }
                         attribute :>> stateKind = StateKind::mode;
                         attribute :>> name = "ON.THERAPY.ACTIVE.SQUARE_BOLUS";
                         attribute :>> modeKind = "active-square-bolus (auto-scheduled)";
                         attribute :>> description = "Prescribed extra delivery at FlowRate_sbolus_prog within Tolerance_Max_const (REQ 41). Auto-initiates at the prescribed frequency and ends after the prescribed duration — no external trigger (§4.1.8, REQ 24). FlowRate_Mode_macro = FlowRate_sbolus_prog.";
                         attribute :>> entryCondition = "scheduled start per REQ 24 with REQ 31 guards; patient bolus end with square scheduled (REQ 36)";
                         attribute :>> exitCondition = "scheduled end or Inhibited_Bolus_macro (REQ 34); patient bolus granted (REQ 33); inhibits (REQ 39)";
-                        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.8";
+                        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.8"; }
                     }
 
                     state modePBOLUS : MemoState {
-                        attribute :>> id = "MODE-008";
+                        @MemoIdentity { :>> providedId = "MODE-008"; }
                         attribute :>> stateKind = StateKind::mode;
                         attribute :>> name = "ON.THERAPY.ACTIVE.PATIENT_BOLUS";
                         attribute :>> modeKind = "active-patient-bolus";
                         attribute :>> description = "Patient-requested delivery at FlowRate_pbolus_prog within Tolerance_Max_const (REQ 42). Granted only when no REQ 25 ignore condition holds. FlowRate_Mode_macro = FlowRate_pbolus_prog.";
                         attribute :>> entryCondition = "BolusRequest_prog with no REQ 25 ignore condition (REQ 32/33)";
                         attribute :>> exitCondition = "Inhibited_PatientBolus_macro or duration >= Duration_pbolus_prog (REQ 35/36); inhibits (REQ 38)";
-                        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.9";
+                        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.9"; }
                     }
                 }
             }
@@ -330,22 +331,22 @@ package memo_examples_gpca_pump_gpca_behavior_modes {
     // The individual configurations remain ordinary model elements, so their
     // active mode is navigable as well as visible in the choice-point edge.
     part basalConfiguration : ModeConfiguration {
-        attribute :>> id = "CFG-001";
+        @MemoIdentity { :>> providedId = "CFG-001"; }
         attribute :>> name = "BasalTherapyConfiguration";
         ref :>> activeMode = topLevelModeMachine.modeON.modeTHERAPY.modeACTIVE.modeBASAL;
     }
     part squareBolusConfiguration : ModeConfiguration {
-        attribute :>> id = "CFG-002";
+        @MemoIdentity { :>> providedId = "CFG-002"; }
         attribute :>> name = "SquareBolusConfiguration";
         ref :>> activeMode = topLevelModeMachine.modeON.modeTHERAPY.modeACTIVE.modeSQUARE;
     }
     part patientBolusConfiguration : ModeConfiguration {
-        attribute :>> id = "CFG-003";
+        @MemoIdentity { :>> providedId = "CFG-003"; }
         attribute :>> name = "PatientBolusConfiguration";
         ref :>> activeMode = topLevelModeMachine.modeON.modeTHERAPY.modeACTIVE.modePBOLUS;
     }
     part pausedConfiguration : ModeConfiguration {
-        attribute :>> id = "CFG-004";
+        @MemoIdentity { :>> providedId = "CFG-004"; }
         attribute :>> name = "PausedKvoConfiguration";
         ref :>> activeMode = topLevelModeMachine.modeON.modeTHERAPY.modePAUSED;
     }
@@ -358,59 +359,59 @@ package memo_examples_gpca_pump_gpca_behavior_modes {
 
     // ── Behavior properties and timing constraints ──────────────
     part propAlarmStopsSameStep : BehaviorProperty {
-        attribute :>> id = "BP-002";
+        @MemoIdentity { :>> providedId = "BP-002"; }
         attribute :>> name = "AlarmResponseSameStepKvo";
         attribute :>> propertyKind = BehaviorPropertyKind::safetyProperty;
         attribute :>> languageKind = PropertyLanguageKind::pseudoFormal;
         attribute :>> formalExpression = "ALARM.ALARM_OUT -> IM.ALARM_IN is an AADL immediate connection: when an infusion-inhibiting notification asserts, Infusion_Manager limits Commanded_Flow_Rate <= FlowRate_kvo_hd in the same execution step";
-        attribute :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl (ALARM_to_IM immediate) and AGREE flow <= KVO guarantees";
+        @MemoIdentity { :>> sourceReference = "CITE-002: CriSys GPCA AADL v2.0, GPCA_SW.aadl (ALARM_to_IM immediate) and AGREE flow <= KVO guarantees"; }
     }
     part propPausedNoResumeWhileInhibited : BehaviorProperty {
-        attribute :>> id = "BP-004";
+        @MemoIdentity { :>> providedId = "BP-004"; }
         attribute :>> name = "PausedNoTransitionWhileInhibited";
         attribute :>> propertyKind = BehaviorPropertyKind::stateInvariant;
         attribute :>> languageKind = PropertyLanguageKind::pseudoFormal;
         attribute :>> formalExpression = "in PAUSED: Infusion_initiate_prog AND Inhibited_Infusion_macro = TRUE => mode unchanged";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.10.1 (REQ 45)";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.10.1 (REQ 45)"; }
     }
     part propModeTimeoutActions : BehaviorProperty {
-        attribute :>> id = "BP-005";
+        @MemoIdentity { :>> providedId = "BP-005"; }
         attribute :>> name = "IdleAndPausedTimeoutActions";
         attribute :>> propertyKind = BehaviorPropertyKind::transitionRule;
         attribute :>> languageKind = PropertyLanguageKind::pseudoFormal;
         attribute :>> formalExpression = "time in IDLE > Max_IDLE_Duration_const => REQ 59 'IDLE Time' actions; time in PAUSED > Max_PAUSED_Duration_const => REQ 59 'PAUSED Time' actions (notification actions, not mode transitions)";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.4.1 (REQ 15) and §4.1.10.1 (REQ 44)";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §4.1.4.1 (REQ 15) and §4.1.10.1 (REQ 44)"; }
     }
     part propLockoutTimerMonotonic : BehaviorProperty {
-        attribute :>> id = "BP-003";
+        @MemoIdentity { :>> providedId = "BP-003"; }
         attribute :>> name = "LockoutTimerNeverShortened";
         attribute :>> propertyKind = BehaviorPropertyKind::stateInvariant;
         attribute :>> languageKind = PropertyLanguageKind::pseudoFormal;
         attribute :>> formalExpression = "lockout_remaining decreases only with elapsed time; no input path resets it early";
-        attribute :>> sourceReference = "MEMO extension — supports the REQ 25.3 lockout ignore condition; invariant not stated by the source";
+        @MemoIdentity { :>> sourceReference = "MEMO extension — supports the REQ 25.3 lockout ignore condition; invariant not stated by the source"; }
     }
     part tcAlarmLatency : TimingConstraint {
-        attribute :>> id = "TC-001";
+        @MemoIdentity { :>> providedId = "TC-001"; }
         attribute :>> name = "AlarmToSafeStateLatency";
         attribute :>> constraintKind = TimingConstraintKind::latency;
         attribute :>> minMs = "0";
         attribute :>> maxMs = "20";
         ref :>> referenceElement = fcAlarmStop;
-        attribute :>> verificationMethod = VerificationMethodKind::modelChecking;
-        attribute :>> sourceReference = "MEMO extension — illustrative wall-clock budget; the source specifies synchronous same-step (immediate) semantics with no timing figures";
+        attribute :>> verificationMethod = MemoVerificationMethodKind::modelChecking;
+        @MemoIdentity { :>> sourceReference = "MEMO extension — illustrative wall-clock budget; the source specifies synchronous same-step (immediate) semantics with no timing figures"; }
     }
     part tcBolusResponse : TimingConstraint {
-        attribute :>> id = "TC-002";
+        @MemoIdentity { :>> providedId = "TC-002"; }
         attribute :>> name = "BolusRequestResponseLatency";
         attribute :>> constraintKind = TimingConstraintKind::latency;
         attribute :>> minMs = "0";
         attribute :>> maxMs = "100";
         ref :>> referenceElement = fcPatientBolus;
-        attribute :>> verificationMethod = VerificationMethodKind::test;
-        attribute :>> sourceReference = "MEMO extension — illustrative wall-clock budget; not specified by the source";
+        attribute :>> verificationMethod = MemoVerificationMethodKind::test;
+        @MemoIdentity { :>> sourceReference = "MEMO extension — illustrative wall-clock budget; not specified by the source"; }
     }
     part tcWatchdogTimeout : TimingConstraint {
-        attribute :>> id = "TC-003";
+        @MemoIdentity { :>> providedId = "TC-003"; }
         attribute :>> name = "WatchdogTimeout";
         attribute :>> constraintKind = TimingConstraintKind::deadline;
         attribute :>> minMs = "40";
@@ -420,7 +421,7 @@ package memo_examples_gpca_pump_gpca_behavior_modes {
         // `referenceElement` is a MemoPart; a requirement is a requirement def
         // and does not conform to it — that link is REQ-X-08's own trace.
         ref :>> referenceElement = gpcaDevice.gpcaSoftware.systemMonitor;
-        attribute :>> verificationMethod = VerificationMethodKind::test;
-        attribute :>> sourceReference = "MEMO extension — supports extension requirement REQ-X-08; watchdog not specified by the source";
+        attribute :>> verificationMethod = MemoVerificationMethodKind::test;
+        @MemoIdentity { :>> sourceReference = "MEMO extension — supports extension requirement REQ-X-08; watchdog not specified by the source"; }
     }
 }

package/examples/gpca-pump/model/catalog/gpca_behavior_subsystems.sysml

@@ -8,9 +8,10 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
     private import memo_assurance_requirements::*;
     private import memo_core_common::*;
 
+    private import memo_core_common::MemoIdentity;
     // ── Logical functions ───────────────────────────────────────
     action fnAcquireSensors : SystemFunction {
-        attribute :>> id = "FUNC-001";
+        @MemoIdentity { :>> providedId = "FUNC-001"; }
         attribute :>> name = "AcquireSensorData";
         attribute :>> functionCategory = "sensing";
         attribute :>> trigger = "every 20 ms execution step";
@@ -27,7 +28,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
         // requires — a component function allocated nowhere is a
         // responsibility nobody has accepted.
         action cfnMeasureFlowRate : ComponentFunction {
-            attribute :>> id = "CFUN-001";
+            @MemoIdentity { :>> providedId = "CFUN-001"; }
             attribute :>> name = "MeasureFlowRate";
             attribute :>> functionCategory = "sensing";
             attribute :>> actionKind = ActionKind::sense;
@@ -37,7 +38,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
             attribute :>> criticality = CriticalityKind::catastrophic;
         }
         action cfnDetectAirInLine : ComponentFunction {
-            attribute :>> id = "CFUN-002";
+            @MemoIdentity { :>> providedId = "CFUN-002"; }
             attribute :>> name = "DetectAirInLine";
             attribute :>> functionCategory = "protection";
             attribute :>> actionKind = ActionKind::sense;
@@ -48,7 +49,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
         }
         // The subassembly case: a component function need not sit on a leaf part.
         action cfnAggregateSensorStatus : ComponentFunction {
-            attribute :>> id = "CFUN-003";
+            @MemoIdentity { :>> providedId = "CFUN-003"; }
             attribute :>> name = "AggregateSensorStatus";
             attribute :>> functionCategory = "sensing";
             attribute :>> actionKind = ActionKind::transform;
@@ -60,7 +61,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
     }
 
     action fnValidatePrescription : SystemFunction {
-        attribute :>> id = "FUNC-002";
+        @MemoIdentity { :>> providedId = "FUNC-002"; }
         attribute :>> name = "ValidatePrescription";
         attribute :>> functionCategory = "configuration";
         attribute :>> trigger = "prescription entry or edit";
@@ -69,7 +70,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
         attribute :>> criticality = CriticalityKind::catastrophic;
     }
     action fnMonitorAlarm : SystemFunction {
-        attribute :>> id = "FUNC-003";
+        @MemoIdentity { :>> providedId = "FUNC-003"; }
         attribute :>> name = "MonitorExceptionalConditions";
         attribute :>> functionCategory = "alarm";
         attribute :>> trigger = "every 20 ms execution step";
@@ -78,7 +79,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
         attribute :>> criticality = CriticalityKind::catastrophic;
     }
     action fnAnnunciate : SystemFunction {
-        attribute :>> id = "FUNC-004";
+        @MemoIdentity { :>> providedId = "FUNC-004"; }
         attribute :>> name = "AnnunciateAlarms";
         attribute :>> functionCategory = "alarm";
         attribute :>> trigger = "alarm raised, escalated, or cleared";
@@ -87,7 +88,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
         attribute :>> criticality = CriticalityKind::high;
     }
     action fnManageInfusion : SystemFunction {
-        attribute :>> id = "FUNC-005";
+        @MemoIdentity { :>> providedId = "FUNC-005"; }
         attribute :>> name = "ManageInfusion";
         attribute :>> functionCategory = "infusion";
         attribute :>> trigger = "mode transitions and each execution step while therapy active";
@@ -96,7 +97,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
         attribute :>> criticality = CriticalityKind::catastrophic;
     }
     action fnEnforceLimits : SystemFunction {
-        attribute :>> id = "FUNC-006";
+        @MemoIdentity { :>> providedId = "FUNC-006"; }
         attribute :>> name = "EnforceDoseLimits";
         attribute :>> functionCategory = "infusion";
         attribute :>> trigger = "patient bolus request or clinician square bolus command";
@@ -105,7 +106,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
         attribute :>> criticality = CriticalityKind::catastrophic;
     }
     action fnCommandPump : SystemFunction {
-        attribute :>> id = "FUNC-007";
+        @MemoIdentity { :>> providedId = "FUNC-007"; }
         attribute :>> name = "CommandPumpMotor";
         attribute :>> functionCategory = "actuation";
         attribute :>> trigger = "flow command update";
@@ -114,7 +115,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
         attribute :>> criticality = CriticalityKind::catastrophic;
     }
     action fnLogEvents : SystemFunction {
-        attribute :>> id = "FUNC-008";
+        @MemoIdentity { :>> providedId = "FUNC-008"; }
         attribute :>> name = "LogTherapyEvents";
         attribute :>> functionCategory = "logging";
         attribute :>> trigger = "dose delivered, mode change, alarm, or configuration change";
@@ -123,7 +124,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
         attribute :>> criticality = CriticalityKind::medium;
     }
     action fnManagePower : SystemFunction {
-        attribute :>> id = "FUNC-009";
+        @MemoIdentity { :>> providedId = "FUNC-009"; }
         attribute :>> name = "ManagePower";
         attribute :>> functionCategory = "platform";
         attribute :>> trigger = "mains-loss signal or battery level change";
@@ -132,7 +133,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
         attribute :>> criticality = CriticalityKind::high;
     }
     action fnPresentStatus : SystemFunction {
-        attribute :>> id = "FUNC-010";
+        @MemoIdentity { :>> providedId = "FUNC-010"; }
         attribute :>> name = "PresentStatus";
         attribute :>> functionCategory = "user-interface";
         attribute :>> trigger = "state or prescription change";
@@ -141,7 +142,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
         attribute :>> criticality = CriticalityKind::high;
     }
     action fnSelfTest : SystemFunction {
-        attribute :>> id = "FUNC-011";
+        @MemoIdentity { :>> providedId = "FUNC-011"; }
         attribute :>> name = "ExecuteSelfTest";
         attribute :>> functionCategory = "platform";
         attribute :>> trigger = "power-on and periodic in-service checks";
@@ -152,7 +153,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
 
     // ── Logical flows ───────────────────────────────────────────
     part lfSensorAcquisition : FunctionalExchange {
-        attribute :>> id = "LF-001";
+        @MemoIdentity { :>> providedId = "LF-001"; }
         attribute :>> name = "SensorAcquisitionFlow";
         attribute :>> flowKind = FlowKind::measurement;
         attribute :>> latencyBudgetMs = 20.0;
@@ -162,7 +163,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
         ref :>> targetFunction = fnMonitorAlarm;
     }
     part lfFlowCommand : FunctionalExchange {
-        attribute :>> id = "LF-002";
+        @MemoIdentity { :>> providedId = "LF-002"; }
         attribute :>> name = "FlowCommandFlow";
         attribute :>> flowKind = FlowKind::command;
         attribute :>> latencyBudgetMs = 20.0;
@@ -172,7 +173,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
         ref :>> targetFunction = fnCommandPump;
     }
     part lfAlarmSignal : FunctionalExchange {
-        attribute :>> id = "LF-003";
+        @MemoIdentity { :>> providedId = "LF-003"; }
         attribute :>> name = "AlarmSignalFlow";
         attribute :>> flowKind = FlowKind::alarm;
         attribute :>> latencyBudgetMs = 20.0;
@@ -182,7 +183,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
         ref :>> targetFunction = fnAnnunciate;
     }
     part lfPrescriptionEntry : FunctionalExchange {
-        attribute :>> id = "LF-004";
+        @MemoIdentity { :>> providedId = "LF-004"; }
         attribute :>> name = "PrescriptionEntryFlow";
         attribute :>> flowKind = FlowKind::configuration;
         attribute :>> latencyBudgetMs = 500.0;
@@ -194,7 +195,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
     // ── Exchange item definitions ───────────────────────────────
     item ddPrescription : InterfaceItem {
         attribute :>> itemKind = InterfaceItemKind::data;
-        attribute :>> id = "DD-001";
+        @MemoIdentity { :>> providedId = "DD-001"; }
         attribute :>> name = "PrescriptionRecord";
         attribute :>> semantics = "patient id, drug name, concentration, VTBI total, duration total, basal flow rate, square bolus rate/duration/interval, patient bolus rate/duration/lockout period, max boluses per hour (DD-005..DD-017)";
         attribute :>> unit = "ml/hr, ml, minutes, mg/ml, per hour";
@@ -205,11 +206,11 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
         attribute :>> integrityClass = "class C";
         attribute :>> confidentialityClass = "clinical";
         attribute :>> availabilityClass = "must survive power loss";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §3.1.1 Prescription Data";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §3.1.1 Prescription Data"; }
     }
     item ddBolusRequest : InterfaceItem {
         attribute :>> itemKind = InterfaceItemKind::data;
-        attribute :>> id = "DD-002";
+        @MemoIdentity { :>> providedId = "DD-002"; }
         attribute :>> name = "BolusRequestSignal";
         attribute :>> semantics = "debounced patient pendant press event";
         attribute :>> encoding = "edge event with 50 ms debounce";
@@ -220,7 +221,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
     }
     item ddSensorVector : InterfaceItem {
         attribute :>> itemKind = InterfaceItemKind::data;
-        attribute :>> id = "DD-003";
+        @MemoIdentity { :>> providedId = "DD-003"; }
         attribute :>> name = "SensorStatusVector";
         attribute :>> semantics = "air-in-line, occlusion pressure, reservoir volume, door state, flow measurement, battery level, CPU/memory status";
         attribute :>> encoding = "fixed-layout status word per 20 ms step";
@@ -231,7 +232,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
     }
     item ddEventRecord : InterfaceItem {
         attribute :>> itemKind = InterfaceItemKind::data;
-        attribute :>> id = "DD-004";
+        @MemoIdentity { :>> providedId = "DD-004"; }
         attribute :>> name = "TherapyEventRecord";
         attribute :>> semantics = "timestamped dose, alarm, mode, and configuration events";
         attribute :>> encoding = "append-only sequenced records";
@@ -242,7 +243,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
     }
     item cdFlowCommand : InterfaceItem {
         attribute :>> itemKind = InterfaceItemKind::command;
-        attribute :>> id = "CD-001";
+        @MemoIdentity { :>> providedId = "CD-001"; }
         attribute :>> name = "FlowCommand";
         attribute :>> controlType = "commanded flow rate with enable interlock";
         attribute :>> timeoutMs = 40.0;
@@ -250,7 +251,7 @@ package memo_examples_gpca_pump_gpca_behavior_subsystems {
     }
     item cdAlarmSignal : InterfaceItem {
         attribute :>> itemKind = InterfaceItemKind::command;
-        attribute :>> id = "CD-002";
+        @MemoIdentity { :>> providedId = "CD-002"; }
         attribute :>> name = "AlarmSignal";
         attribute :>> controlType = "priority-coded alarm assertion (level 1 stops infusion, level 2 warns)";
         attribute :>> timeoutMs = 20.0;

package/examples/gpca-pump/model/catalog/gpca_context.sysml

@@ -10,11 +10,13 @@ package memo_examples_gpca_pump_gpca_context {
     private import memo_core_enumerations::*;
     private import memo_examples_gpca_pump_gpca_operational::*;
 
+    private import memo_core_common::*;
+    private import memo_core_common::MemoIdentity;
     // ── Intended use (ISO 14971 §5.2, IEC 62366-1) ──────────────
     part gpcaIntendedUse : IntendedUse {
-        attribute :>> id = "IU-001";
+        @MemoIdentity { :>> providedId = "IU-001"; }
         attribute :>> name = "GPCA_IntendedUse";
-        attribute :>> shortDescription = "Patient-controlled analgesia infusion of prescribed opioid analgesics.";
+        @MemoIdentity { :>> shortDescription = "Patient-controlled analgesia infusion of prescribed opioid analgesics."; }
         attribute :>> description = "The GPCA pump delivers a prescribed analgesic drug intravenously at a programmed basal rate, supplemented by square boluses delivered automatically at programmed intervals and by patient-requested bolus doses, subject to lockout intervals and maximum-dose limits.";
         attribute :>> indication = "Management of acute post-operative or chronic pain requiring titrated intravenous opioid analgesia.";
         attribute :>> contraindication = "Patients unable to comprehend or operate the bolus request mechanism; drugs without safe-value records in the hospital pharmacy database.";
@@ -24,22 +26,22 @@ package memo_examples_gpca_pump_gpca_context {
         attribute :>> missionKind = "therapeutic device mission";
         attribute :>> successCriteria = "Drug delivered per prescription; no overdose or undetected under-infusion; every hazardous condition annunciated within its alarm latency budget.";
         attribute :>> operationalContext = "Acute-care hospital ward, fixed (non-ambulatory) location (UC-001).";
-        attribute :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §2.1-2.3 (GPCA overview, system functions, user characteristics)";
+        @MemoIdentity { :>> sourceReference = "CITE-001: CriSys GPCA System Requirements (2013), §2.1-2.3 (GPCA overview, system functions, user characteristics)"; }
     }
     part bolusByProxyMisuse : ReasonablyForeseeableMisuse {
-        attribute :>> id = "RFM-001";
+        @MemoIdentity { :>> providedId = "RFM-001"; }
         attribute :>> name = "BolusRequestBySomeoneOtherThanPatient";
-        attribute :>> shortDescription = "A caregiver or visitor presses the patient bolus control.";
+        @MemoIdentity { :>> shortDescription = "A caregiver or visitor presses the patient bolus control."; }
         attribute :>> description = "A person other than the patient activates the bolus request control, bypassing the intended patient self-limiting behavior.";
         attribute :>> misuseContext = "Patient-controlled analgesia in a supervised hospital setting.";
         attribute :>> foreseeableBasis = "Known PCA use pattern represented in the GPCA hazard analysis.";
         attribute :>> affectedUseContext = "UC-001";
-        attribute :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.4.8; CITE-005: Open PCA ISO 14971 risk analysis, bolus-by-proxy event";
+        @MemoIdentity { :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.4.8; CITE-005: Open PCA ISO 14971 risk analysis, bolus-by-proxy event"; }
     }
 
     // ── Use contexts ────────────────────────────────────────────
     part hospitalWardContext : UseContext {
-        attribute :>> id = "UC-001";
+        @MemoIdentity { :>> providedId = "UC-001"; }
         attribute :>> name = "HospitalWardUseContext";
         attribute :>> careSetting = "acute-care hospital ward and post-anesthesia care unit";
         attribute :>> environment = "indoor clinical environment, mains power with battery backup, pole or bed-rail mounted";
@@ -52,7 +54,7 @@ package memo_examples_gpca_pump_gpca_context {
     // ── Actors ──────────────────────────────────────────────────
     part actorPatient : User {
         attribute :>> actorKind = ActorKind::patient;
-        attribute :>> id = "ACT-001";
+        @MemoIdentity { :>> providedId = "ACT-001"; }
         attribute :>> name = "Patient";
         attribute :>> trainingLevel = "instructed by clinician on bolus request button only";
         attribute :>> description = "Receives the infusion and requests bolus doses via the patient pendant.";
@@ -60,7 +62,7 @@ package memo_examples_gpca_pump_gpca_context {
     }
     part actorNurse : User {
         attribute :>> actorKind = ActorKind::clinician;
-        attribute :>> id = "ACT-002";
+        @MemoIdentity { :>> providedId = "ACT-002"; }
         attribute :>> name = "ClinicianNurse";
         attribute :>> trainingLevel = "trained clinical user; programs prescriptions and responds to alarms";
         attribute :>> description = "Loads the drug reservoir, programs and confirms the prescription, starts/stops therapy, and responds to alarms.";
@@ -71,7 +73,7 @@ package memo_examples_gpca_pump_gpca_context {
     }
     part actorPrescriber : User {
         attribute :>> actorKind = ActorKind::clinician;
-        attribute :>> id = "ACT-003";
+        @MemoIdentity { :>> providedId = "ACT-003"; }
         attribute :>> name = "PrescribingPhysician";
         attribute :>> trainingLevel = "licensed prescriber";
         attribute :>> description = "Prescribes drug, concentration, basal rate, bolus volume, lockout interval, and maximum dose limits.";
@@ -79,7 +81,7 @@ package memo_examples_gpca_pump_gpca_context {
     }
     part actorPharmacist : User {
         attribute :>> actorKind = ActorKind::clinician;
-        attribute :>> id = "ACT-004";
+        @MemoIdentity { :>> providedId = "ACT-004"; }
         attribute :>> name = "Pharmacist";
         attribute :>> trainingLevel = "licensed pharmacist";
         attribute :>> description = "Prepares the drug reservoir and verifies drug and concentration against the prescription.";
@@ -87,7 +89,7 @@ package memo_examples_gpca_pump_gpca_context {
     }
     part actorTechnician : User {
         attribute :>> actorKind = ActorKind::technician;
-        attribute :>> id = "ACT-005";
+        @MemoIdentity { :>> providedId = "ACT-005"; }
         attribute :>> name = "BiomedicalTechnician";
         attribute :>> trainingLevel = "service-trained; authenticated service access";
         attribute :>> description = "Performs maintenance, battery replacement, and calibration through the service interface.";
@@ -96,43 +98,46 @@ package memo_examples_gpca_pump_gpca_context {
 
     // ── Foreseeable use errors (IEC 62366-1, AAMI TIR PCA) ──────
     part ueMisprogrammedRate : UseError {
-        attribute :>> id = "UE-001";
+        @MemoIdentity { :>> providedId = "UE-001"; }
         attribute :>> name = "MisprogrammedInfusionParameters";
         attribute :>> errorCategory = UseErrorCategoryKind::actionCategory;
-        attribute :>> taskReference = "OA-003: Program prescription";
         attribute :>> severity = SeverityKind::catastrophic;
         attribute :>> rootCauseType = "decimal-point / unit entry slip during prescription programming";
         attribute :>> description = "Clinician enters a basal rate or bolus volume an order of magnitude off (e.g. mg vs mL, misplaced decimal).";
-        attribute :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.4.8 Use Hazards (incorrect dose settings)";
+        @MemoIdentity { :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.4.8 Use Hazards (incorrect dose settings)"; }
     }
     part ueBolusByProxy : UseError {
-        attribute :>> id = "UE-002";
+        @MemoIdentity { :>> providedId = "UE-002"; }
         attribute :>> name = "PCAByProxy";
         attribute :>> errorCategory = UseErrorCategoryKind::cognition;
-        attribute :>> taskReference = "OA-005: Request patient bolus";
         attribute :>> severity = SeverityKind::catastrophic;
         attribute :>> rootCauseType = "family member or caregiver presses bolus button on behalf of a sedated patient";
         attribute :>> description = "Bolus doses requested by someone other than the patient defeat the inherent safety of patient-limited dosing.";
-        attribute :>> sourceReference = "illustrative — no source";
+        @MemoIdentity { :>> sourceReference = "illustrative — no source"; }
     }
     part ueWrongDrugLoaded : UseError {
-        attribute :>> id = "UE-003";
+        @MemoIdentity { :>> providedId = "UE-003"; }
         attribute :>> name = "WrongDrugOrConcentrationLoaded";
         attribute :>> errorCategory = UseErrorCategoryKind::cognition;
-        attribute :>> taskReference = "OA-002: Load drug reservoir";
         attribute :>> severity = SeverityKind::catastrophic;
         attribute :>> rootCauseType = "reservoir containing wrong drug or concentration mounted without verification";
         attribute :>> description = "Loaded drug or concentration differs from the programmed prescription, so delivered dose differs from intended dose.";
-        attribute :>> sourceReference = "illustrative — no source";
+        @MemoIdentity { :>> sourceReference = "illustrative — no source"; }
     }
     part ueAlarmDisregard : UseError {
-        attribute :>> id = "UE-004";
+        @MemoIdentity { :>> providedId = "UE-004"; }
         attribute :>> name = "AlarmSilencedAndForgotten";
         attribute :>> errorCategory = UseErrorCategoryKind::memoryRecall;
-        attribute :>> taskReference = "OA-006: Respond to alarm";
         attribute :>> severity = SeverityKind::serious;
         attribute :>> rootCauseType = "alarm silenced during high workload and the underlying condition never resolved";
         attribute :>> description = "Clinician silences an alarm and does not return to resolve the underlying condition (e.g. occlusion), interrupting therapy.";
-        attribute :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.4.8 Use Hazards (attentional/memory failure)";
+        @MemoIdentity { :>> sourceReference = "CITE-004: GIP Hazard Analysis v1.0 (2009), §2.4.8 Use Hazards (attentional/memory failure)"; }
     }
+    // Which task each use error is committed during (IEC 62366-1). This was
+    // a `taskReference` string naming the task by id and title; nothing could
+    // follow it, and CommitsUseError is what the ontology declares for it.
+    connection : CommitsUseError connect task ::> oaProgram to useError ::> ueMisprogrammedRate;
+    connection : CommitsUseError connect task ::> oaRequestBolus to useError ::> ueBolusByProxy;
+    connection : CommitsUseError connect task ::> oaLoadReservoir to useError ::> ueWrongDrugLoaded;
+    connection : CommitsUseError connect task ::> oaRespondAlarm to useError ::> ueAlarmDisregard;
 }