@oimlsmart/primmel-packages 0.1.0

package/oiml-smart-core/package.primmel

@@ -0,0 +1,10 @@
+package {
+  id oiml-smart-core
+  kind core
+  title "OIML SMART core layer package"
+  description "Primmel OIML SMART Core — the content every Recommendation shares verbatim: the subject-chain entity classes (ModelFamily/Group/Model/ Sample), party and workflow entities, the evaluation workflow skeleton, roles, and the certificate lifecycle. Composed into each Recommendation via `uses: [core]`, after the oiml-cs reference package whose /req/cs/* provisions Core's processes validate against."
+  uses { oiml-cs }
+  requires { oiml-cs }
+  provides { core subject-chain-entities party-entities workflow-entities evaluation-skeleton }
+  default_spelling eng-Latn
+}

package/oiml-smart-core/specification/competence-kinds.prl

@@ -0,0 +1,64 @@
+competence_kind force_measurement {
+  label "Force measurement"
+  definition "Application and measurement of test loads over a force range with a force-generating system and a suitable indicating instrument (R 60-2, 2.7.2); the mass standards generating the force are traceable to national or international standards of mass (R 60-2, 2.7.3.2). The kind spans the deadweight machine / force standard machine and the load-application train — declared as a capability, never as named equipment (labs declare capabilities, not equipment)."
+  source { doc "ISO/IEC 17025:2017, 6.4" clause "" }
+}
+
+competence_kind temperature_control {
+  label "Temperature control"
+  definition "Temperature conditioning of the instrument under test in a climatic chamber over the instrument's temperature range, held stable during a test within one fifth of that range and never more than 2 degC (R 60-2, 2.7.3.1)."
+  source { doc "ISO/IEC 17025:2017, 6.4" clause "" }
+}
+
+competence_kind humidity_testing {
+  label "Humidity testing"
+  definition "Damp-heat exposure of the instrument under test: cyclic damp heat for CH-marked instruments (R 60-2, 2.10.5, applying IEC 60068-2-30 variant 2) or steady-state damp heat for SH-marked instruments (R 60-2, 2.10.6, applying IEC 60068-2-78)."
+  source { doc "ISO/IEC 17025:2017, 6.4" clause "" }
+  method_standard iec-60068-2-30 "Environmental testing — Part 2-30: Tests — Test Db: Damp heat, cyclic (12 h + 12 h cycle)"
+  method_standard iec-60068-2-78 "Environmental testing — Part 2-78: Tests — Test Cab: Damp heat, steady state"
+}
+
+competence_kind pressure_control {
+  label "Pressure control"
+  definition "Barometric pressure variation for the determination of atmospheric pressure effects on the instrument's output (R 60-2, 2.10.4, verifying R 60-1, 5.6.2)."
+  source { doc "ISO/IEC 17025:2017, 6.4" clause "" }
+}
+
+competence_kind emc_testing {
+  label "EMC testing"
+  definition "Electromagnetic disturbance immunity testing of electronic instruments: electrical fast transients/bursts, surges, electrostatic discharge, conducted and radiated radio-frequency electromagnetic disturbances (R 60-2, 2.10.7.6–2.10.7.10), each at the severity level the Recommendation's tables prescribe."
+  source { doc "ISO/IEC 17025:2017, 6.4" clause "" }
+  method_standard iec-61000-4-2 "Electromagnetic compatibility (EMC) — Part 4-2: Testing and measurement techniques — Electrostatic discharge immunity test"
+  method_standard iec-61000-4-3 "Electromagnetic compatibility (EMC) — Part 4-3: Testing and measurement techniques — Radiated, radio-frequency, electromagnetic field immunity test"
+  method_standard iec-61000-4-4 "Electromagnetic compatibility (EMC) — Part 4-4: Testing and measurement techniques — Electrical fast transient/burst immunity test"
+  method_standard iec-61000-4-5 "Electromagnetic compatibility (EMC) — Part 4-5: Testing and measurement techniques — Surge immunity test"
+  method_standard iec-61000-4-6 "Electromagnetic compatibility (EMC) — Part 4-6: Testing and measurement techniques — Immunity to conducted disturbances, induced by radio-frequency fields"
+}
+
+competence_kind power_supply_variation {
+  label "Power supply variation"
+  definition "Mains power supply variation and short-time power reduction testing of electronic instruments, AC and DC (R 60-2, 2.10.7.4–2.10.7.5), including the designed warm-up behaviour at power-on (R 60-2, 2.10.7.3)."
+  source { doc "ISO/IEC 17025:2017, 6.4" clause "" }
+  method_standard iec-61000-4-11 "Electromagnetic compatibility (EMC) — Part 4-11: Testing and measurement techniques — Voltage dips, short interruptions and voltage variations immunity tests"
+  method_standard iec-61000-4-29 "Electromagnetic compatibility (EMC) — Part 4-29: Testing and measurement techniques — Voltage dips, short interruptions and voltage variations on d.c. input power port immunity tests"
+}
+
+competence_kind indication_readout {
+  label "Indication readout"
+  definition "Reading and recording of the instrument's output indication with a suitable indicating instrument of sufficient resolution over the measurement chain under test (R 60-2, 2.7.2)."
+  source { doc "ISO/IEC 17025:2017, 6.4" clause "" }
+}
+
+competence_kind documentation_review {
+  label "Documentation review"
+  definition "Documentary examination of the type: the documentation supplied by the applicant, the suitability of the instrument's construction for its intended use, and its inscriptions and marking (R 60-2, 2.3–2.6) — a personnel review competence, not an equipment competence."
+  source { doc "ISO/IEC 17025:2017, 6.2" clause "" }
+}
+
+competence_kind software_examination {
+  label "Software examination"
+  definition "Examination of the instrument's software and its documentation against the general requirements for software-controlled measuring instruments (R 60-2, 2.6, applying OIML D 31)."
+  source { doc "ISO/IEC 17025:2017, 6.2" clause "" }
+  method_standard oiml-d-31 "OIML D 31 General requirements for software-controlled measuring instruments"
+}
+

package/oiml-smart-core/specification/constraints.prl

@@ -0,0 +1,40 @@
+constraint completion_fees_settled {
+  stereotype inv
+  name "Completion — the fees settled"
+  check "ocl{fees->forAll(f | f.status = 'MARKED_PAID')}"
+  violation_meaning "An unpaid fee stands against the project: a payment record (the certificate's registration fee, PD-05 §6.2, or an IA-TL arrangement record, TODO.adoption/09) is not MARKED_PAID. The payer owes the settlement and its recording before the project can complete."
+  on_violation invalid
+}
+
+constraint completion_custody_closed {
+  stereotype inv
+  name "Completion — the samples' custody closed"
+  check "ocl{samples->forAll(s | s.status = 'RETURNED' or s.status = 'RETAINED' or s.status = 'DESTROYED' or s.status = 'DISPOSED')}"
+  violation_meaning "A sample's custody is still open: every sample of the project must reach a terminal custody state (RETURNED to the manufacturer, RETAINED, DESTROYED or DISPOSED — the measuring_instrument_sample machine's terminal marks) before the project can complete. The IA owes the custody-closing act."
+  on_violation invalid
+}
+
+constraint completion_threads_resolved {
+  stereotype inv
+  name "Completion — the review threads resolved"
+  check "ocl{threads->forAll(t | t.status = 'RESOLVED')}"
+  violation_meaning "A review thread is still OPEN on one of the project's reports: the review period's threads (entities/comments.prl) resolve before the finalization completes — the same consultation_resolved doctrine the report machines' decision hops declare. The thread's parties owe the resolution."
+  on_violation invalid
+}
+
+constraint completion_reports_finalized {
+  stereotype inv
+  name "Completion — the reports finalized"
+  check "ocl{evaluation_reports->exists(r | r.status = 'APPROVED' or r.status = 'REJECTED' or r.status = 'CONDITIONALLY_APPROVED')}"
+  violation_meaning "The project's evaluation report is not finalized: the evaluation_report machine has reached no terminal decision (APPROVED, REJECTED or CONDITIONALLY_APPROVED). The IA's evaluator owes the decision."
+  on_violation invalid
+}
+
+constraint completion_certificate_registered {
+  stereotype inv
+  name "Completion — the certificate issued and registered"
+  check "ocl{certificates->exists(c | c.status = 'ACTIVE')}"
+  violation_meaning "No certificate stands issued and registered for the project: the certificate machine's ACTIVE state — the registration published (PD-05 §6; the register's auto-publish doctrine) — is the completion's certificate leg. The IA owes the issuance and the register the publication."
+  on_violation invalid
+}
+

package/oiml-smart-core/specification/invariants.prl

@@ -0,0 +1,90 @@
+invariant INV-1 {
+  name "No bare numbers"
+  statement "every physical quantity is a QuantityValue (value + unit [+ uncertainty])."
+  severity error
+  applies_to { QuantityValue }
+  source "docs/oiml-core/09-invariants.md#9.2"
+  enforcement { kernel:C32 kernel:C33 linker:quantity-coherence linker:pair-list-components gate:schema-quantity-value }
+}
+
+invariant INV-2 {
+  name "Schema/instance split"
+  statement "an attribute is DEFINED once (AttributeDefinition: symbol, clause, IRDI) and VALUED per Model or Sample (Parameter)."
+  severity error
+  applies_to { AttributeDefinition Parameter }
+  source "docs/oiml-core/09-invariants.md#9.3"
+  enforcement { kernel:C1 linker:requirement-binding-targets linker:bind-paths gate:codegen-entity-types }
+}
+
+invariant INV-3 {
+  name "Binding, never restating"
+  statement "every D1 element references attribute paths into instrument-description; nothing physical is defined in conformity-specification."
+  severity error
+  applies_to { Requirement ConformanceTest FormSchema }
+  source "docs/oiml-core/09-invariants.md#9.4"
+  enforcement { linker:ocl-identifiers linker:requirement-targeting linker:bind-paths linker:requirement-binding-targets }
+}
+
+invariant INV-4 {
+  name "Reports contain no verdicts"
+  statement "D2 contains no verdicts. If a TestReport says 'pass', the schema is broken."
+  severity error
+  applies_to { TestReport }
+  source "docs/oiml-core/09-invariants.md#9.5"
+  enforcement { gate:testreport-no-outcome gate:verdict-chain }
+}
+
+invariant INV-5 {
+  name "Re-evaluation without re-testing"
+  statement "D3 consumes only definitions and reports; re-evaluation (new class limits, surveillance) requires no re-testing."
+  severity error
+  applies_to { Verdict }
+  source "docs/oiml-core/09-invariants.md#9.6"
+  enforcement { gate:verdict-reexecution }
+}
+
+invariant INV-6 {
+  name "One sample, one report, one evaluation"
+  statement "one Sample = one TestReport = one SampleEvaluation. Type conformity is established ONLY by TypeEvaluation across Samples."
+  severity error
+  applies_to { TestRun MeasuringInstrumentSample EvaluationReport }
+  source "docs/oiml-core/09-invariants.md#9.7"
+  enforcement { gate:testrun-sample-cardinality gate:evaluation-aggregator }
+}
+
+invariant INV-7 {
+  name "Values, facts, judgments"
+  statement "formula outputs are VALUES (instrument-description), Constraint results are FACTS (test-execution), Verdicts are JUDGMENTS (evaluation)."
+  severity error
+  applies_to { Calculation Constraint Verdict }
+  source "docs/oiml-core/09-invariants.md#9.8"
+  enforcement { kernel:C84 linker:constraint-references linker:verdict-no-shadow gate:codegen-entity-types }
+}
+
+invariant INV-8 {
+  name "Version pinning"
+  statement "every definition executed in D2 is version-pinned in the TestReport."
+  severity error
+  applies_to { TestRun TestReport Instance }
+  source "docs/oiml-core/09-invariants.md#9.9"
+  enforcement { kernel:C18 kernel:C80 gate:testrun-method-version gate:testreport-definition-versions }
+}
+
+invariant INV-9 {
+  name "OCL only"
+  statement "all derivations and rules are expressed in OCL (OMG Object Constraint Language, formal/2014-02-03)… The same statement executes identically in D2 (fact checks) and D3 (re-validation)."
+  severity error
+  applies_to { Expression }
+  source "docs/oiml-core/09-invariants.md#9.10"
+  enforcement { linker:ocl-identifiers gate:ocl-single-engine gate:verdict-registry-cache }
+}
+
+invariant INV-10 {
+  name "Delegation never copies down"
+  statement "encapsulation by delegation: a Sample resolves attributes through its Model, a Model through its Family; a value set at a lower level overrides the inherited one. Attribute values are never copied downward."
+  severity error
+  applies_to { MeasuringInstrumentFamily MeasuringInstrumentGroup MeasuringInstrumentModel MeasuringInstrumentSample }
+  source "docs/oiml-core/09-invariants.md#9.11"
+  enforcement { kernel:C1 kernel:C17 gate:instance-delegation }
+}
+

package/oiml-smart-core/specification/predicates.prl

@@ -0,0 +1,116 @@
+predicate requirement {
+  kind citation
+  description "This form or test provides evidence for the target requirement clause."
+  subject_kinds { form field conformance_test }
+  target_kinds { document-anchor }
+  resolution must-resolve
+}
+
+predicate test-procedure {
+  kind citation
+  description "The test procedure the element follows (R 60-2's 2.x procedures)."
+  subject_kinds { form conformance_test }
+  target_kinds { document-anchor }
+  resolution must-resolve
+}
+
+predicate calculation {
+  kind citation
+  description "The computation procedure the element realizes (R 60-3's 2.1.x procedures)."
+  subject_kinds { form calculation }
+  target_kinds { document-anchor }
+  resolution must-resolve
+}
+
+predicate report-format {
+  kind citation
+  description "The report-format clause/table this form renders (R 60-3's clause 4-6 tables)."
+  subject_kinds { form field }
+  target_kinds { document-anchor }
+  resolution must-resolve
+}
+
+predicate derives-from {
+  kind citation
+  description "The clause this element is the model's interpretation of (provenance; the legacy source { doc clause } pair computed to one anchor)."
+  subject_kinds { requirement conformance_test form field calculation symbol term package }
+  target_kinds { document-anchor }
+  resolution must-resolve
+  inverse interpreted-by
+}
+
+predicate interpreted-by {
+  kind citation
+  description "The inverse of derives-from: the model element that interprets this clause."
+  subject_kinds { package }
+  target_kinds { document-anchor }
+  inverse derives-from
+}
+
+predicate cites {
+  kind citation
+  description "An informative citation (the legacy reference / specification_reference facets)."
+  subject_kinds { form field requirement conformance_test calculation symbol term package }
+  target_kinds { document-anchor }
+}
+
+predicate definition {
+  kind citation
+  description "The clause that DEFINES the quantity or notion this element records (distinct from derives-from — the clause the element interprets — and from the evidence roles)."
+  subject_kinds { form field }
+  target_kinds { document-anchor }
+  resolution must-resolve
+}
+
+predicate implements {
+  kind semantic
+  description "This (implementation-side) element fulfils that (reference-side) element — the reference/implementation mapping edge."
+  subject_kinds { package requirement conformance_test form field process data_class }
+  target_kinds { model-element }
+  inverse implemented-by
+}
+
+predicate implemented-by {
+  kind semantic
+  description "The inverse of implements."
+  subject_kinds { package requirement conformance_test form field process data_class }
+  target_kinds { model-element }
+  inverse implements
+}
+
+predicate equivalent {
+  kind semantic
+  description "The two elements state the same constraint (cross-standard equivalence; symmetric)."
+  subject_kinds { requirement conformance_test form field calculation symbol term }
+  target_kinds { model-element }
+  symmetric true
+}
+
+predicate supersedes {
+  kind semantic
+  description "This edition or element replaces the target (edition lineage, lifecycle)."
+  subject_kinds { package requirement conformance_test form }
+  target_kinds { model-element document-anchor }
+}
+
+predicate restates {
+  kind semantic
+  description "A normative restatement of the target without change (the layer-overlay vocabulary)."
+  subject_kinds { requirement conformance_test form field }
+  target_kinds { model-element }
+}
+
+predicate specializes {
+  kind semantic
+  description "A narrowing of the target (see the specialization facet for the structured class-instance mechanism — this predicate is the citation-grade variant)."
+  subject_kinds { requirement conformance_test }
+  target_kinds { model-element }
+}
+
+predicate cdd-concept {
+  kind semantic
+  description "The IEC CDD concept this term binds to (TODO.interop/06): the target is a full CDD concept IRDI (ISO/IEC 11179-6) resolvable through the OpenCDD network. Expert-authored, one per term; AAS semanticIds and DPP attribute alignments read this binding, never a per-item re-derivation."
+  subject_kinds { term }
+  target_kinds { external-iri }
+}
+

package/oiml-smart-module-emc-disturbances/package.primmel

@@ -0,0 +1,10 @@
+package {
+  id oiml-smart-module-emc-disturbances
+  kind module
+  title "OIML SMART module-emc-disturbances layer package"
+  description "Disturbance test skeletons (esd, bursts, surge, rf-emf, conducted-rf, power-voltage-variation, short-time-power-reduction, low-battery) with parameterized form skeletons and verdict variants. Recs bind their own attribute ids, severities, acceptance expressions and clause URNs."
+  uses { oiml-smart-core }
+  requires { oiml-smart-core }
+  provides { disturbance-test-skeletons disturbance-form-skeletons disturbance-verdict-variants }
+  default_spelling eng-Latn
+}

package/oiml-smart-module-env-iec60068/package.primmel

@@ -0,0 +1,10 @@
+package {
+  id oiml-smart-module-env-iec60068
+  kind module
+  title "OIML SMART module-env-iec60068 layer package"
+  description "IEC 60068 environmental method skeletons: dry-heat, cold, damp-heat (cyclic | steady), vibration, shock, ambient-pressure, with form skeletons. Recs bind their own attribute ids, severities, acceptance expressions and clause URNs."
+  uses { oiml-smart-core }
+  requires { oiml-smart-core }
+  provides { env-method-skeletons env-form-skeletons }
+  default_spelling eng-Latn
+}

package/oiml-smart-module-examination-docs/package.primmel

@@ -0,0 +1,10 @@
+package {
+  id oiml-smart-module-examination-docs
+  kind module
+  title "OIML SMART module-examination-docs layer package"
+  description "Documentation/marking examination checklist skeleton. Recs bind their documentation requirements, marking rules and clause URNs."
+  uses { oiml-smart-core }
+  requires { oiml-smart-core }
+  provides { examination-docs-skeleton }
+  default_spelling eng-Latn
+}

package/oiml-smart-module-reference-materials/package.primmel

@@ -0,0 +1,10 @@
+package {
+  id oiml-smart-module-reference-materials
+  kind module
+  title "OIML SMART module-reference-materials layer package"
+  description "Reference-material record pattern (certified value + uncertainty), the test-point subform skeleton (cgm-point shape), and the U:MPE validity hook (acceptance decision rules, L7). Recs declare their concrete materials in specification/reference-materials.yaml and bind the test-point subform id + units + calculation ids + clause URNs."
+  uses { oiml-smart-core }
+  requires { oiml-smart-core }
+  provides { reference-material-pattern test-point-subform umpe-validity-hook }
+  default_spelling eng-Latn
+}

package/oiml-smart-module-report-headers/package.primmel

@@ -0,0 +1,10 @@
+package {
+  id oiml-smart-module-report-headers
+  kind module
+  title "OIML SMART module-report-headers layer package"
+  description "Bind-driven test-report header skeletons (identification + conditions blocks) and the PD-05 18-element checklist binding rules. Recs bind their header fields into the entity graph."
+  uses { oiml-smart-core }
+  requires { oiml-smart-core }
+  provides { report-header-skeletons checklist-binding-rules }
+  default_spelling eng-Latn
+}

package/oiml-smart-module-software-d31/package.primmel

@@ -0,0 +1,10 @@
+package {
+  id oiml-smart-module-software-d31
+  kind module
+  title "OIML SMART module-software-d31 layer package"
+  description "OIML D 31 software examination checklist skeleton + form. Recs bind their software-identification attributes, examination levels and clause URNs."
+  uses { oiml-smart-core }
+  requires { oiml-smart-core }
+  provides { software-examination-skeleton }
+  default_spelling eng-Latn
+}

package/oiml-smart-module-specimen-governance/entities/test-execution.prl

@@ -0,0 +1,228 @@
+class TestRunEquipment#data {
+  description { "One piece of test equipment used in a run (metamodel D2 TestRun.equipment entry { id, calCert? }). Identity only — equipment is modelled as conditions (data/r60/model/conditions.yaml), not as an entity hierarchy." }
+  helper { true }
+  id: string {
+    modality SHALL
+    definition "Lab-local equipment identifier (e.g. force machine, chamber)"
+  }
+  cal_cert: string [0..1] {
+    modality MAY
+    definition "Calibration certificate reference (traceability)"
+  }
+}
+
+class ConditionsLogEntry#data {
+  description { "One logged influence-quantity value captured alongside a measurement (metamodel D2 EvidenceRecord.conditionsLog entry { quantityKind, value, unit }); quantity kinds per data/r60/model/conditions.yaml." }
+  helper { true }
+  quantity_kind: string {
+    modality SHALL
+    definition "Influence quantity kind (temperature, relative_humidity, barometric_pressure, ...)"
+  }
+  value: any {
+    modality SHALL
+  }
+  unit: string [0..1] {
+    modality MAY
+  }
+}
+
+class EvidenceRecord#data {
+  description { "A filled data-input slot of the run — mandatory evidence, typed by the form field it satisfies (metamodel D2 EvidenceRecord, embedded on TestRun.evidence). Per-measurement sign-off lives HERE (signed_by/signed_at), not on the FormInstance." }
+  helper { true }
+  field: string {
+    modality SHALL
+    definition "Form field name (data-input slot) this record fills, e.g. 'dmax', 'test_loads'"
+  }
+  value: reference(QuantityValue) {
+    modality SHALL
+    definition "Recorded value — QuantityValue { value, unit? }, never a bare number (INV-1)"
+  }
+  repetition: integer [0..1] {
+    modality MAY
+    definition "Repetition index (1-based) when the same slot is measured repeatedly"
+  }
+  conditions_log: reference(ConditionsLogEntry) [0..*] {
+    modality MAY
+    definition "Influence-quantity values logged at capture time (embedded)"
+    on_delete cascade
+  }
+  timestamp: datetime {
+    modality SHALL
+  }
+  signed_by: string [0..1] {
+    modality MAY
+    definition "Lab evaluator/supervisor name who signed this measurement off"
+  }
+  signed_by_account: string [0..1] {
+    modality MAY
+    definition "Account id of the signing operator (per-entry attribution for multi-operator runs, TODO.deploying/05); signed_by stays the display name"
+  }
+  signed_at: datetime [0..1] {
+    modality MAY
+  }
+}
+
+class RunOperator#data {
+  description { "One lab operator of a multi-operator test run (TODO.deploying/05 — loads need two people: one moves masses, one reads the instrument). Embedded on TestRun.operators; every evidence entry's sign-off attributes to one of these accounts. Provenance is per-entry and per-run — never just 'the lab'." }
+  helper { true }
+  account_id: string {
+    modality SHALL
+    definition "The operator's account id (the auth account's id; provenance key)"
+  }
+  name: string {
+    modality SHALL
+    definition "Display name"
+  }
+  role_note: string [0..1] {
+    modality MAY
+    definition "What this operator did on the run (lead, load handling, readings, …)"
+  }
+  signed_off_at: datetime [0..1] {
+    modality MAY
+    definition "When this operator signed off their part of the run's evidence"
+  }
+}
+
+class ConstraintCheckResult#data {
+  description { "Execution of one instrument-description.Constraint (R 60 profile DL.5, e.g. constr:r60:fig3-2b) against the run's bound values (metamodel D2 ConstraintCheck, embedded on TestRun.constraint_checks). A violated test-setup constraint invalidates the run AS A TEST, regardless of results." }
+  helper { true }
+  constraint: string {
+    modality SHALL
+    definition "Constraint id from the Recommendation profile (e.g. 'constr:r60:fig3-2b')"
+  }
+  evaluated_values: object {
+    modality SHALL
+    definition "Input name -> numeric value the OCL invariant was evaluated with"
+  }
+  result: enum {
+    modality SHALL
+    enum_values { satisfied violated }
+  }
+  effect_on_admissibility: string {
+    modality SHALL
+    definition "'invalidates_run' when a violated test-setup constraint voids the run; 'none' otherwise"
+  }
+}
+
+class RunAdmissibility#data {
+  description { "The admissibility gate of a run (metamodel D2 TestRunResult.admissibility map). Computed by the test-run service from evidence coverage, evidence units, and constraint-check outcomes." }
+  helper { true }
+  all_required_slots_filled: boolean {
+    modality SHALL
+  }
+  units_valid: boolean {
+    modality SHALL
+  }
+  conditions_within_envelope: boolean {
+    modality SHALL
+  }
+  status: enum {
+    modality SHALL
+    enum_values { admissible inadmissible }
+  }
+}
+
+class TestRun#data {
+  store { testRuns }
+  description { "One execution of one conformance test on one MeasuringInstrumentSample (metamodel D2 TestRun). Created per TestAssignment by the test-run service (one run per assignment, idempotent); bridged 1:1 to the FormInstance that acts as the run's evidence template. FACTS ONLY — verdicts belong to evaluation (Module D3)." }
+  indexes { test_assignment_id test_request_id sample_id laboratory_id standard_id status form_instance_id }
+  id: string {
+    modality SHALL
+  }
+  standard_id: string {
+    modality SHALL
+  }
+  conformance_test: string {
+    modality SHALL
+    definition "Conformance test id this run executes (form's conformance_test URN when declared, else the R 60-3 form id)"
+  }
+  test_assignment_id: reference(TestAssignment) {
+    modality SHALL
+    definition "The assignment (form × sample tuple) this run executes — one run per assignment"
+    on_delete cascade
+    required true
+  }
+  test_request_id: reference(TestRequest) [0..1] {
+    modality MAY
+    definition "Denormalized from the assignment for query efficiency"
+    on_delete nullify
+    required false
+  }
+  sample_id: reference(MeasuringInstrumentSample) {
+    modality SHALL
+    definition "The physical sample under test"
+    on_delete restrict
+    required true
+  }
+  laboratory_id: reference(TestLaboratory) {
+    modality SHALL
+    definition "Lab performing the run (denormalized from the assignment)"
+    on_delete restrict
+    required true
+  }
+  method_version: string [0..1] {
+    modality MAY
+    definition "Version pin of the test method/form schema (metamodel D2 methodVersion)"
+  }
+  operator: string [0..1] {
+    modality MAY
+    definition "Lab evaluator performing the run — the derived LEAD (operators[0].name) for compatibility; the full team lives in operators"
+  }
+  operators: reference(RunOperator) [0..*] {
+    modality MAY
+    definition "The lab operators who ran this run (multi-operator runs, TODO.deploying/05 — e.g. load handling needs two people); each entry signs off its own part of the evidence. operators[0] is the lead (the singular `operator` mirrors its name)"
+    on_delete cascade
+  }
+  started: datetime {
+    modality SHALL
+  }
+  ended: datetime [0..1] {
+    modality MAY
+  }
+  status: enum {
+    modality SHALL
+    definition "Lifecycle: PLANNED (created, no evidence yet) → IN_PROGRESS (evidence being recorded) → COMPLETED (admissible, form submitted) | INVALIDATED (a test-setup constraint was violated or the evidence is inadmissible — the run is void AS A TEST)."
+    enum_values { PLANNED IN_PROGRESS COMPLETED INVALIDATED }
+  }
+  equipment: reference(TestRunEquipment) [0..*] {
+    modality SHALL
+    definition "Equipment used, with calibration references (embedded)"
+    on_delete cascade
+  }
+  evidence: reference(EvidenceRecord) [0..*] {
+    modality SHALL
+    definition "Recorded data-input values with per-measurement sign-off (embedded)"
+    on_delete cascade
+  }
+  superseded_evidence: reference(EvidenceRecord) [0..*] {
+    modality MAY
+    definition "Evidence archive of a redone run (embedded): when an INVALIDATED run is redone (redoRun), its current evidence moves here verbatim — history is kept but no longer participates in admissibility."
+    on_delete cascade
+  }
+  redo_count: integer [0..1] {
+    modality MAY
+    definition "Number of times this run was redone from INVALIDATED (redoRun)"
+  }
+  constraint_checks: reference(ConstraintCheckResult) [0..*] {
+    modality SHALL
+    definition "Executed test-setup constraint checks (embedded; fig3-1/2a/2b, interval-consistency)"
+    on_delete cascade
+  }
+  form_instance_id: reference(FormInstance) [0..1] {
+    modality MAY
+    definition "1:1 link to the FormInstance that is the run's evidence template"
+    on_delete nullify
+    required false
+  }
+  admissibility: reference(RunAdmissibility) [0..1] {
+    modality MAY
+    definition "Computed admissibility gate (embedded helper); refreshed by computeAdmissibility"
+  }
+  created: datetime {
+    modality SHALL
+  }
+  modified: datetime {
+    modality SHALL
+  }
+}
+

package/oiml-smart-module-specimen-governance/package.primmel

@@ -0,0 +1,10 @@
+package {
+  id oiml-smart-module-specimen-governance
+  kind module
+  title "OIML SMART module-specimen-governance layer package"
+  description "Sample-selection rules schema and the EUT-continuity contract (specimens: continuity same_eut | same_eut_with_additional, governance rules), plus the test-execution entity layer (TestRun and helpers) the run-level specimen linkage builds on. Recs bind their sample-selection clauses and unit-continuity rules."
+  uses { oiml-smart-core }
+  requires { oiml-smart-core }
+  provides { sample-selection-rules eut-continuity-contract test-execution-entities }
+  default_spelling eng-Latn
+}