Generated reference · LinkML (DEC-57)
The serialisable object core of REMIT's v1 mission-planning model — the shapes mission planning is built from. This LinkML schema is the Doc-owned source of truth (DEC-57): one schema generates JSON Schema, TypeScript types, and this hyperlinked reference + ER diagrams. `docs/remit-data-model.md` is the prose spine; the field names and structures here are reconciled against the objects the walking-skeleton app actually constructs (`app/js/**`), so the schema agrees with the running code.
-The serialisable object core, split into 7 modules.
Shared value objects and the enum vocabulary used across the REMIT data model. Imported by every other module.
4 classes · 20 enumsThe requirement and the promises in it: Requirement -> Commitment -> Activity (DEC-5/16/17/18).
12 classesThe world the plan moves through: baseline, channels, movement, excursions, effects (DEC-7/19/20/21).
14 classesOwn force: the platform fixed capabilities (Profile) and live condition (State) (DEC-19/20/52).
4 classesLocated things with identity, projected across views: Entity and its time-varying Aspects (DEC-52/53).
2 classesPlan identity and plans: Stamp, Plan and its materialisation, scores and conflicts (DEC-23/29).
14 classesThe decision and execution record: SelectionRationale and the append-only ExecutionLog (DEC-23/25/26).
12 classesEvery typed association across the modules, drawn in your browser (Mermaid). Scroll to zoom, drag to pan, click a box to jump to its class.
erDiagram +7 modules64 classes +21 enumsJSON Schema & TypeScript generated alongside
The serialisable object core, split into 7 modules.
Shared value objects and the enum vocabulary used across the REMIT data model. Imported by every other module.
5 classes · 20 enumsThe requirement and the promises in it: Requirement -> Commitment -> Activity (DEC-5/16/17/18).
12 classesThe world the plan moves through: baseline, channels, movement, excursions, effects (DEC-7/19/20/21).
14 classesOwn force: the platform fixed capabilities (Profile) and live condition (State) (DEC-19/20/52).
4 classesLocated things with identity, projected across views: Entity and its time-varying Aspects (DEC-52/53).
2 classesPlan identity and plans: Stamp, Plan and its materialisation, scores and conflicts (DEC-23/29).
14 classesThe decision and execution record: SelectionRationale and the append-only ExecutionLog (DEC-23/25/26).
13 classesEvery typed association across the modules, drawn in your browser (Mermaid). Scroll to zoom, drag to pan, click a box to jump to its class.
erDiagram
Attribution {
}
DataProvenance {
@@ -102,6 +102,8 @@ REMIT — v1 Data Model
The serialisable object core of
}
Waypoint {
}
+ HexCell {
+ }
CommitmentProvenance {
}
Requirement {
@@ -218,6 +220,8 @@
REMIT — v1 Data Model
The serialisable object core of
}
SteeringDelta {
}
+ ExecutionDelta {
+ }
Requirement ||--o| Attribution : "provenance"
Requirement ||--o{ Commitment : "commitments"
Requirement ||--o| Lineage : "lineage"
@@ -293,7 +297,8 @@
REMIT — v1 Data Model
The serialisable object core of
Replan ||..o| Plan : "from"
Replan ||..o| Plan : "to"
Replan ||..o| SelectionRationale : "rationale_ref"
- SteeringDelta ||--o{ Constraint : "constraints"
— contains (inlined) · ┈ references (by id) · o{ many || one o| optional. Boxes outside the module are classes defined elsewhere.
Shared value objects and the enum vocabulary used across the REMIT data model. Imported by every other module.
erDiagram
+ SteeringDelta ||--o{ Constraint : "constraints"
+ ExecutionDelta ||--o| HexCell : "cell"— contains (inlined) · ┈ references (by id) · o{ many || one o| optional. Boxes outside the module are classes defined elsewhere.
Shared value objects and the enum vocabulary used across the REMIT data model. Imported by every other module.
erDiagram
Attribution {
}
DataProvenance {
@@ -301,7 +306,9 @@ REMIT — v1 Data Model
The serialisable object core of
Lineage {
}
Waypoint {
- }
— contains (inlined) · ┈ references (by id) · o{ many || one o| optional. Boxes outside the module are classes defined elsewhere.
Who decided, under what authority, when. Stamped on every committing act — this is universal rule 2 (DEC-15, NF2).
| field | type | card | description |
|---|---|---|---|
| issuing_role | string | 0..1 | the role-hat the author wore |
| authority | string | 0..1 | the authority the act was taken under |
| by | string | 0..1 | the author |
| at | datetime | 0..1 | ISO timestamp of the act |
The source and trust of a datum or entity (DEC-19). Trivial defaults in v1.
| field | type | card | description |
|---|---|---|---|
| kind | string | 1 | source-class — one of: self, planned, forecast, observed, provider. The prose model separates entity kind (self/actor/feature/phenomenon) from data provenance (planned/forecast/observed); the skeleton folds them, using self/forecast/provider. A documented string rather than an enum (see the AspectType note). |
| confidence | ConfidenceLevel | 0..1 | |
| freshness | string | 0..1 | how recent — e.g. "provisioned" |
Hash-link back to the version this one supersedes (universal rule 1).
| field | type | card | description |
|---|---|---|---|
| previous_version | string | 0..1 | id of the prior Requirement version |
| amending_order_ref | string | 0..1 | reference to the amending order, if any |
A single grid location.
| field | type | card | description |
|---|---|---|---|
| x | integer | 1 | |
| y | integer | 1 | |
| alias | string | 0..1 | a human-friendly name, e.g. "OP-21,3" |
The requirement and the promises in it: Requirement -> Commitment -> Activity (DEC-5/16/17/18).
erDiagram
+ }
+ HexCell {
+ }— contains (inlined) · ┈ references (by id) · o{ many || one o| optional. Boxes outside the module are classes defined elsewhere.
Who decided, under what authority, when. Stamped on every committing act — this is universal rule 2 (DEC-15, NF2).
| field | type | card | description |
|---|---|---|---|
| issuing_role | string | 0..1 | the role-hat the author wore |
| authority | string | 0..1 | the authority the act was taken under |
| by | string | 0..1 | the author |
| at | datetime | 0..1 | ISO timestamp of the act |
The source and trust of a datum or entity (DEC-19). Trivial defaults in v1.
| field | type | card | description |
|---|---|---|---|
| kind | string | 1 | source-class — one of: self, planned, forecast, observed, provider. The prose model separates entity kind (self/actor/feature/phenomenon) from data provenance (planned/forecast/observed); the skeleton folds them, using self/forecast/provider. A documented string rather than an enum (see the AspectType note). |
| confidence | ConfidenceLevel | 0..1 | |
| freshness | string | 0..1 | how recent — e.g. "provisioned" |
Hash-link back to the version this one supersedes (universal rule 1).
| field | type | card | description |
|---|---|---|---|
| previous_version | string | 0..1 | id of the prior Requirement version |
| amending_order_ref | string | 0..1 | reference to the amending order, if any |
A single grid location.
| field | type | card | description |
|---|---|---|---|
| x | integer | 1 | |
| y | integer | 1 | |
| alias | string | 0..1 | a human-friendly name, e.g. "OP-21,3" |
A single H3 hex location — the hex-grid successor to Waypoint (ADR-0014). Identified by its H3 index, with an optional lat/lng centre for rendering.
| field | type | card | description |
|---|---|---|---|
| h3 | string | 1 | the H3 cell index (res 9) |
| lat | float | 0..1 | cell-centre latitude |
| lng | float | 0..1 | cell-centre longitude |
The requirement and the promises in it: Requirement -> Commitment -> Activity (DEC-5/16/17/18).
erDiagram
CommitmentProvenance {
}
Requirement {
@@ -457,7 +464,7 @@ REMIT — v1 Data Model
The serialisable object core of
ScheduleLeg ||..o| Commitment : "commitment_id"
Scores ||--o{ Satisfaction : "satisfaction"
Satisfaction ||..o| Commitment : "commitment_id"
- Conflict ||..o{ Commitment : "parties"
— contains (inlined) · ┈ references (by id) · o{ many || one o| optional. Boxes outside the module are classes defined elsewhere.
Every input that determines a plan, bundled into one identity (DEC-23/24/29): which requirement, which world, which config core, what appetites and steering, which kernel and seed. A plan's id IS the hash of its Stamp, so two plans are comparable only when their stamps share a basis (the comparability guard). Skeleton additions (DEC-47): `profile_version` and `start` are part of identity because the plan depends on the platform and the starting state.
| field | type | card | description |
|---|---|---|---|
| requirement_version | Requirement | 0..1 | id of the requirement version |
| baseline_version | Baseline | 0..1 | id of the baseline version |
| excursions | Excursion | 0..* | ids of the excursion versions (empty in v1) |
| config_core_hash | string | 0..1 | hash of the world-defining config core — medium/channels/movement-model/providers/vocabulary; the instance shell is excluded (DEC-48) |
| profile_version | Profile | 0..1 | id of the profile version (skeleton addition, DEC-47) |
| start | StartState | 0..1 | the starting state (skeleton addition, DEC-47) |
| appetites | Appetite | 0..* | the implementer's risk dials (DEC-6) |
| steering | Constraint | 0..* | interpreted operator gestures / no-go constraints (DEC-24) |
| kernel_version | string | 0..1 | e.g. "mock-0.1" — part of identity (DEC-29) |
| strategy_seed | integer | 0..1 | RNG seed for strategy ordering — part of identity (DEC-29) |
The starting position and clock baked into a Stamp (skeleton, DEC-47).
| field | type | card | description |
|---|---|---|---|
| x | integer | 0..1 | |
| y | integer | 0..1 | |
| clock_min | integer | 0..1 |
One risk-appetite dial setting (DEC-6) — e.g. tempo = rapid, exposure = cautious.
| field | type | card | description |
|---|---|---|---|
| axis | string | 0..1 | "e.g. tempo, exposure" |
| setting | string | 0..1 | "e.g. deliberate/balanced/rapid, bold/balanced/cautious" |
One interpreted operator steering gesture (DEC-24) — e.g. a no-go region.
| field | type | card | description |
|---|---|---|---|
| type | string | 0..1 | "e.g. no-go" |
| cells | Waypoint | 0..* |
One candidate strategy in the plan handful (skeleton).
| field | type | card | description |
|---|---|---|---|
| key | StrategyKey | 1 | |
| label | string | 0..1 | |
| axis | string | 0..1 | the axis it optimises, e.g. "time/speed" |
| blurb | string | 0..1 | a one-line description |
A candidate solution whose id IS the hash of its Stamp (DEC-5/22/29). Its materialisation (schedule, trajectory, state curves) is cached and regenerable; its scores and first-class conflicts make it comparable. The skeleton also carries the chosen `strategy` and the `tide_decision` weighing.
| field | type | card | description |
|---|---|---|---|
| idid | string | 1 | "= hash(Stamp, strategy)" |
| strategy | Strategy | 0..1 | |
| stamp | Stamp | 0..1 | authoritative — the plan's identity basis |
| materialisation | Materialisation | 0..1 | cached, regenerable; null when infeasible |
| scores | Scores | 0..1 | |
| tide_decision | TideDecision | 0..1 | the exfil wait-vs-detour weighing (ADR-0006); null when no ford |
| conflicts | Conflict | 0..* | first-class, named clashes (C1) |
The cached, regenerable working-out of a plan; absent when the plan is infeasible.
| field | type | card | description |
|---|---|---|---|
| schedule | ScheduleLeg | 0..* | |
| trajectory | TrajectoryPoint | 0..* | |
| state_curves | StateCurves | 0..1 | |
| tide | TideDecision | 0..1 | the tide decision at plan time |
| verified | boolean | 0..1 | |
| kernel_version_verified | string | 0..1 | the kernel version that verified the materialisation |
One leg of a plan's schedule. Exfil legs may carry a tide hold (ADR-0006).
| field | type | card | description |
|---|---|---|---|
| kind | ScheduleLegKind | 1 | |
| label | string | 0..1 | |
| start_min | float | 0..1 | |
| end_min | float | 0..1 | |
| commitment_id | Commitment | 0..1 | the commitment this leg serves (visit/exfil legs) |
One sampled point on the platform's path; coordinates may be fractional, time/fuel rounded to 1 dp for IEEE stability.
| field | type | card | description |
|---|---|---|---|
| x | float | 0..1 | |
| y | float | 0..1 | |
| t | float | 0..1 | mission minutes |
| fuel_pct | float | 0..1 |
The end-state of the platform's curves over the plan (v1 carries fuel only).
| field | type | card | description |
|---|---|---|---|
| fuel_end_pct | float | 0..1 |
A plan's comparable scores, read under the comparability guard (A2/C2/C6, NF10).
| field | type | card | description |
|---|---|---|---|
| satisfaction | Satisfaction | 0..* | |
| cost_band | Band | 0..1 | |
| robustness_band | Band | 0..1 |
One commitment's verdict and slack within a plan.
| field | type | card | description |
|---|---|---|---|
| commitment_id | Commitment | 0..1 | |
| label | string | 0..1 | |
| margin_min | float | 0..1 | slack in minutes; may be negative |
| margin_band | MarginBand | 0..1 | |
| verdict | Verdict | 0..1 |
The result of the tidal-ford wait-vs-detour weighing (ADR-0006): the kernel materialises the exfil both ways — wait at the bank vs a ford-free detour — and commits to the earlier RV arrival, publishing the choice here.
| field | type | card | description |
|---|---|---|---|
| mode | TideMode | 1 | |
| wait_min | float | 0..1 | minutes held at the bank before crossing |
| ford_rv | float | 0..1 | mission minutes the ford route reaches the RV |
| detour_rv | float | 0..1 | mission minutes the detour route reaches the RV; null when no detour exists |
| narrative | string | 0..1 | the choice, in words |
A first-class, named clash when commitments cannot all be kept (C1) — not a silent failure.
| field | type | card | description |
|---|---|---|---|
| idid | string | 1 | |
| kind | ConflictKind | 1 | |
| parties | Commitment | 0..* | the commitments in tension |
| narrative | string | 0..1 | what the clash is, in words |
The decision and execution record: SelectionRationale and the append-only ExecutionLog (DEC-23/25/26).
erDiagram
+ Conflict ||..o{ Commitment : "parties"— contains (inlined) · ┈ references (by id) · o{ many || one o| optional. Boxes outside the module are classes defined elsewhere.
Every input that determines a plan, bundled into one identity (DEC-23/24/29): which requirement, which world, which config core, what appetites and steering, which kernel and seed. A plan's id IS the hash of its Stamp, so two plans are comparable only when their stamps share a basis (the comparability guard). Skeleton additions (DEC-47): `profile_version` and `start` are part of identity because the plan depends on the platform and the starting state.
| field | type | card | description |
|---|---|---|---|
| requirement_version | Requirement | 0..1 | id of the requirement version |
| baseline_version | Baseline | 0..1 | id of the baseline version |
| excursions | Excursion | 0..* | ids of the excursion versions (empty in v1) |
| config_core_hash | string | 0..1 | hash of the world-defining config core — medium/channels/movement-model/providers/vocabulary; the instance shell is excluded (DEC-48) |
| profile_version | Profile | 0..1 | id of the profile version (skeleton addition, DEC-47) |
| start | StartState | 0..1 | the starting state (skeleton addition, DEC-47) |
| appetites | Appetite | 0..* | the implementer's risk dials (DEC-6) |
| steering | Constraint | 0..* | interpreted operator gestures / no-go constraints (DEC-24) |
| kernel_version | string | 0..1 | e.g. "mock-0.1" — part of identity (DEC-29) |
| strategy_seed | integer | 0..1 | RNG seed for strategy ordering — part of identity (DEC-29) |
The starting position and clock baked into a Stamp (skeleton, DEC-47).
| field | type | card | description |
|---|---|---|---|
| x | integer | 0..1 | |
| y | integer | 0..1 | |
| clock_min | integer | 0..1 |
One risk-appetite dial setting (DEC-6) — e.g. tempo = rapid, exposure = cautious.
| field | type | card | description |
|---|---|---|---|
| axis | string | 0..1 | "e.g. tempo, exposure" |
| setting | string | 0..1 | "e.g. deliberate/balanced/rapid, bold/balanced/cautious" |
One interpreted operator steering gesture (DEC-24) — e.g. a no-go region.
| field | type | card | description |
|---|---|---|---|
| type | string | 0..1 | "e.g. no-go" |
| cells | Waypoint | 0..* |
One candidate strategy in the plan handful (skeleton).
| field | type | card | description |
|---|---|---|---|
| key | StrategyKey | 1 | |
| label | string | 0..1 | |
| axis | string | 0..1 | the axis it optimises, e.g. "time/speed" |
| blurb | string | 0..1 | a one-line description |
A candidate solution whose id IS the hash of its Stamp (DEC-5/22/29). Its materialisation (schedule, trajectory, state curves) is cached and regenerable; its scores and first-class conflicts make it comparable. The skeleton also carries the chosen `strategy` and the `tide_decision` weighing.
| field | type | card | description |
|---|---|---|---|
| idid | string | 1 | "= hash(Stamp, strategy)" |
| strategy | Strategy | 0..1 | |
| stamp | Stamp | 0..1 | authoritative — the plan's identity basis |
| materialisation | Materialisation | 0..1 | cached, regenerable; null when infeasible |
| scores | Scores | 0..1 | |
| tide_decision | TideDecision | 0..1 | the exfil wait-vs-detour weighing (ADR-0006); null when no ford |
| conflicts | Conflict | 0..* | first-class, named clashes (C1) |
The cached, regenerable working-out of a plan; absent when the plan is infeasible.
| field | type | card | description |
|---|---|---|---|
| schedule | ScheduleLeg | 0..* | |
| trajectory | TrajectoryPoint | 0..* | |
| state_curves | StateCurves | 0..1 | |
| tide | TideDecision | 0..1 | the tide decision at plan time |
| verified | boolean | 0..1 | |
| kernel_version_verified | string | 0..1 | the kernel version that verified the materialisation |
One leg of a plan's schedule. Exfil legs may carry a tide hold (ADR-0006).
| field | type | card | description |
|---|---|---|---|
| kind | ScheduleLegKind | 1 | |
| label | string | 0..1 | |
| start_min | float | 0..1 | |
| end_min | float | 0..1 | |
| commitment_id | Commitment | 0..1 | the commitment this leg serves (visit/exfil legs) |
One sampled point on the platform's path; coordinates may be fractional, time/fuel rounded to 1 dp for IEEE stability.
| field | type | card | description |
|---|---|---|---|
| x | float | 0..1 | |
| y | float | 0..1 | |
| t | float | 0..1 | mission minutes |
| fuel_pct | float | 0..1 |
The end-state of the platform's curves over the plan (v1 carries fuel only).
| field | type | card | description |
|---|---|---|---|
| fuel_end_pct | float | 0..1 |
A plan's comparable scores, read under the comparability guard (A2/C2/C6, NF10).
| field | type | card | description |
|---|---|---|---|
| satisfaction | Satisfaction | 0..* | |
| cost_band | Band | 0..1 | |
| robustness_band | Band | 0..1 |
One commitment's verdict and slack within a plan.
| field | type | card | description |
|---|---|---|---|
| commitment_id | Commitment | 0..1 | |
| label | string | 0..1 | |
| margin_min | float | 0..1 | slack in minutes; may be negative |
| margin_band | MarginBand | 0..1 | |
| verdict | Verdict | 0..1 |
The result of the tidal-ford wait-vs-detour weighing (ADR-0006): the kernel materialises the exfil both ways — wait at the bank vs a ford-free detour — and commits to the earlier RV arrival, publishing the choice here.
| field | type | card | description |
|---|---|---|---|
| mode | TideMode | 1 | |
| wait_min | float | 0..1 | minutes held at the bank before crossing |
| ford_rv | float | 0..1 | mission minutes the ford route reaches the RV |
| detour_rv | float | 0..1 | mission minutes the detour route reaches the RV; null when no detour exists |
| narrative | string | 0..1 | the choice, in words |
A first-class, named clash when commitments cannot all be kept (C1) — not a silent failure.
| field | type | card | description |
|---|---|---|---|
| idid | string | 1 | |
| kind | ConflictKind | 1 | |
| parties | Commitment | 0..* | the commitments in tension |
| narrative | string | 0..1 | what the clash is, in words |
The decision and execution record: SelectionRationale and the append-only ExecutionLog (DEC-23/25/26).
erDiagram
SelectionRationale {
}
ChosenBands {
@@ -482,6 +489,8 @@ REMIT — v1 Data Model
The serialisable object core of
}
SteeringDelta {
}
+ ExecutionDelta {
+ }
SelectionRationale ||..o| Plan : "chosen"
SelectionRationale ||..o{ Plan : "beaten"
SelectionRationale ||--o{ Appetite : "appetites"
@@ -493,7 +502,8 @@
REMIT — v1 Data Model
The serialisable object core of
Replan ||..o| Plan : "from"
Replan ||..o| Plan : "to"
Replan ||..o| SelectionRationale : "rationale_ref"
- SteeringDelta ||--o{ Constraint : "constraints"
— contains (inlined) · ┈ references (by id) · o{ many || one o| optional. Boxes outside the module are classes defined elsewhere.
The record of a choice (DEC-23): which plan won, which it beat, on which axis, with the after-mitigation bands, and who decided. Content-addressed.
| field | type | card | description |
|---|---|---|---|
| idid | string | 1 | content id of the canonical form (DEC-35) |
| chosen | Plan | 0..1 | the winning plan |
| beaten | Plan | 0..* | the field it beat |
| deciding_axis | string | 0..1 | "what tipped it — e.g. time/speed, exposure, robustness, completeness" |
| note | string | 0..1 | the justification narrative |
| appetites | Appetite | 0..* | the risk-appetite selections at the time |
| mitigations | string | 0..* | "e.g. armed-escort" |
| chosen_bands | ChosenBands | 0..1 | cost/robustness bands after mitigations |
| by | string | 0..1 | |
| role | string | 0..1 | "e.g. implementer" |
| at | datetime | 0..1 |
| field | type | card | description |
|---|---|---|---|
| cost | Band | 0..1 | |
| rob | Band | 0..1 |
The append-only live history of a mission (DEC-23/25/26): alerts when a band is crossed, observations that update truth, waivers, and replans — never overwritten. Together with rationales and stamps it gives a complete after-action record with perfect replay (F1).
| field | type | card | description |
|---|---|---|---|
| entries | LogEntry | 0..* |
Base of the append-only execution log; the store stamps each with a `seq`.
| field | type | card | description |
|---|---|---|---|
| kind | LogEntryKind | 1 | |
| seq | integer | 0..1 | 0-indexed sequence, stamped on append |
| at | integer | 0..1 | mission minutes |
A band crossing or hard-infeasibility raised during execution (E3).
| field | type | card | description |
|---|---|---|---|
| cause | AlertCause | 0..1 | |
| kindinherited | LogEntryKind | 1 | |
| seqinherited | integer | 0..1 | 0-indexed sequence, stamped on append |
| atinherited | integer | 0..1 | mission minutes |
| field | type | card | description |
|---|---|---|---|
| type | AlertCauseType | 1 | |
| commitment | string | 0..1 | the phased commitment being tracked (e.g. "observe", "exfil") |
| from | string | 0..1 | the prior band state |
| to | string | 0..1 | the new band state |
A fact delta appended to the baseline's fact layer (E5).
| field | type | card | description |
|---|---|---|---|
| fact_delta | FactDelta | 0..1 | |
| source | string | 0..1 | "e.g. operator" |
| confidence | string | 0..1 | "e.g. reported" |
| kindinherited | LogEntryKind | 1 | |
| seqinherited | integer | 0..1 | 0-indexed sequence, stamped on append |
| atinherited | integer | 0..1 | mission minutes |
| field | type | card | description |
|---|---|---|---|
| note | string | 0..1 | |
| tag | string | 0..1 | "e.g. track-state, sighting, weather" |
A relaxed commitment, attributed (B3). Not yet logged in the v1 skeleton.
| field | type | card | description |
|---|---|---|---|
| commitment_id | Commitment | 0..1 | |
| by | string | 0..1 | |
| authority | string | 0..1 | |
| rationale | string | 0..1 | |
| kindinherited | LogEntryKind | 1 | |
| seqinherited | integer | 0..1 | 0-indexed sequence, stamped on append |
| atinherited | integer | 0..1 | mission minutes |
A move from one committed plan to another, with rationale (DEC-36). Not yet logged in the v1 skeleton.
| field | type | card | description |
|---|---|---|---|
| from | Plan | 0..1 | |
| to | Plan | 0..1 | |
| rationale_ref | SelectionRationale | 0..1 | |
| kindinherited | LogEntryKind | 1 | |
| seqinherited | integer | 0..1 | 0-indexed sequence, stamped on append |
| atinherited | integer | 0..1 | mission minutes |
A stamped cross-role write to the shared store (DEC-61): a role's contribution is an attributed delta — the same write path that serialises over `/sync` later (DEC-25), so going multi-node is transport, not re-architecture. Base of the concrete delta kinds; v1 emits SteeringDelta. Write-scope *enforcement* is designed-for — the delta is attributed (NF2) but not yet scope-checked.
| field | type | card | description |
|---|---|---|---|
| scope | string | 0..1 | "the write-scope this delta falls under — e.g. steering" |
| by | string | 0..1 | the contributing author |
| role | string | 0..1 | "the contributing role-hat — e.g. duty-officer-plans" |
| at | datetime | 0..1 | when it was contributed (DEC-15, NF2) |
The first DEC-61 write built in v1: an operator's *applied intel* — denied (no-go) cells — shared to the store as steering constraints, where every surface (e.g. the Data Analysis monitor, including a popped-out one) sees it land. Risk appetites, by contrast, stay local (a ranking lens). Identity is content (DEC-35): the store keys it by the hash of its canonical form.
| field | type | card | description |
|---|---|---|---|
| constraints | Constraint | 0..* | the interpreted steering gestures shared (DEC-24) — e.g. no-go regions |
| scopeinherited | string | 0..1 | "the write-scope this delta falls under — e.g. steering" |
| byinherited | string | 0..1 | the contributing author |
| roleinherited | string | 0..1 | "the contributing role-hat — e.g. duty-officer-plans" |
| atinherited | datetime | 0..1 | when it was contributed (DEC-15, NF2) |
The closed value vocabularies (in common) used by the fields above.
Whether a commitment must hold or is best-effort (DEC-22).
hard — must holdsoft — best-effort; carries a priority, with authority from provenanceThe verb of an activity (DEC-16); v1 set, pluggable registry (NF7).
visitloiteravoidtransitmaintainThe lifecycle state of a commitment (B4). `at-risk` is live-only (E2) and not stored.
proposednegotiatedcommittedsatisfiedviolatedwaivedsupersededconfirmed — answered by the operatordefaulted — filled from a stamped defaultopenresolvedThe medium a baseline / profile / movement model operates in (DEC-20).
landseaairPer-cell land-cover class used by the skeleton's mobility raster.
roadtrackopenroughforestmarshfordwaterHow a channel or movement model is realised (DEC-49). `provider` = a computed service behind the seam.
rasteranalyticparametricproviderHow predictable a channel is over time (DEC-21) — drives sampling.
staticperiodicdynamichighmediumlowThe render-class of one time-varying facet of an entity (DEC-52/53).
cell — a position → map glyph / distance-along-trackscalar — a numeric value → a line (altitude, fuel, distance)window — a time interval → a bandstatus — an up/down or phase value → ticksThe skeleton's three candidate strategies (the "handful" of plans).
direct — fastest by time/speedtracked — keeps to tracked/road surfacescovered — favours exposure-reducing coverA coarse three-level qualitative band for cost / robustness (C2/C6, NF10).
robustmarginalfragileThe slack band on a single commitment's satisfaction (A2, NF10). `crossed` = violated.
robustmarginaltightcrossedA commitment's verdict in a plan's scores.
satisfiedviolatedwaivedThe kind of one leg in a plan's schedule.
transithold — a wait — e.g. "await low-tide window" at a tidal fordvisitexfilThe outcome of the tidal-ford wait-vs-detour weighing (ADR-0006).
no-ford — no tidal ford on the routeopen — ford open at the bank — cross nowwait — hold at the bank for the low-tide window, then crossdetour — ford-free detour reaches the RV soonerWhether a clash is built into the request or emerges from the schedule (C1).
structural — e.g. no route existsemergent — e.g. the schedule is infeasibleWhy the wingman raised an execution alert (E3).
hard_infeasibleband_crossingtide_reassessment — a re-plan changed the tide decision's mode (ADR-0007)AlertObservationWaiverReplan— contains (inlined) · ┈ references (by id) · o{ many || one o| optional. Boxes outside the module are classes defined elsewhere.
The record of a choice (DEC-23): which plan won, which it beat, on which axis, with the after-mitigation bands, and who decided. Content-addressed.
| field | type | card | description |
|---|---|---|---|
| idid | string | 1 | content id of the canonical form (DEC-35) |
| chosen | Plan | 0..1 | the winning plan |
| beaten | Plan | 0..* | the field it beat |
| deciding_axis | string | 0..1 | "what tipped it — e.g. time/speed, exposure, robustness, completeness" |
| note | string | 0..1 | the justification narrative |
| appetites | Appetite | 0..* | the risk-appetite selections at the time |
| mitigations | string | 0..* | "e.g. armed-escort" |
| chosen_bands | ChosenBands | 0..1 | cost/robustness bands after mitigations |
| by | string | 0..1 | |
| role | string | 0..1 | "e.g. implementer" |
| at | datetime | 0..1 |
| field | type | card | description |
|---|---|---|---|
| cost | Band | 0..1 | |
| rob | Band | 0..1 |
The append-only live history of a mission (DEC-23/25/26): alerts when a band is crossed, observations that update truth, waivers, and replans — never overwritten. Together with rationales and stamps it gives a complete after-action record with perfect replay (F1).
| field | type | card | description |
|---|---|---|---|
| entries | LogEntry | 0..* |
Base of the append-only execution log; the store stamps each with a `seq`.
| field | type | card | description |
|---|---|---|---|
| kind | LogEntryKind | 1 | |
| seq | integer | 0..1 | 0-indexed sequence, stamped on append |
| at | integer | 0..1 | mission minutes |
A band crossing or hard-infeasibility raised during execution (E3).
| field | type | card | description |
|---|---|---|---|
| cause | AlertCause | 0..1 | |
| kindinherited | LogEntryKind | 1 | |
| seqinherited | integer | 0..1 | 0-indexed sequence, stamped on append |
| atinherited | integer | 0..1 | mission minutes |
| field | type | card | description |
|---|---|---|---|
| type | AlertCauseType | 1 | |
| commitment | string | 0..1 | the phased commitment being tracked (e.g. "observe", "exfil") |
| from | string | 0..1 | the prior band state |
| to | string | 0..1 | the new band state |
A fact delta appended to the baseline's fact layer (E5).
| field | type | card | description |
|---|---|---|---|
| fact_delta | FactDelta | 0..1 | |
| source | string | 0..1 | "e.g. operator" |
| confidence | string | 0..1 | "e.g. reported" |
| kindinherited | LogEntryKind | 1 | |
| seqinherited | integer | 0..1 | 0-indexed sequence, stamped on append |
| atinherited | integer | 0..1 | mission minutes |
| field | type | card | description |
|---|---|---|---|
| note | string | 0..1 | |
| tag | string | 0..1 | "e.g. track-state, sighting, weather" |
A relaxed commitment, attributed (B3). Not yet logged in the v1 skeleton.
| field | type | card | description |
|---|---|---|---|
| commitment_id | Commitment | 0..1 | |
| by | string | 0..1 | |
| authority | string | 0..1 | |
| rationale | string | 0..1 | |
| kindinherited | LogEntryKind | 1 | |
| seqinherited | integer | 0..1 | 0-indexed sequence, stamped on append |
| atinherited | integer | 0..1 | mission minutes |
A move from one committed plan to another, with rationale (DEC-36). Not yet logged in the v1 skeleton.
| field | type | card | description |
|---|---|---|---|
| from | Plan | 0..1 | |
| to | Plan | 0..1 | |
| rationale_ref | SelectionRationale | 0..1 | |
| kindinherited | LogEntryKind | 1 | |
| seqinherited | integer | 0..1 | 0-indexed sequence, stamped on append |
| atinherited | integer | 0..1 | mission minutes |
A stamped cross-role write to the shared store (DEC-61): a role's contribution is an attributed delta — the same write path that serialises over `/sync` later (DEC-25), so going multi-node is transport, not re-architecture. Base of the concrete delta kinds; v1 emits SteeringDelta. Write-scope *enforcement* is designed-for — the delta is attributed (NF2) but not yet scope-checked.
| field | type | card | description |
|---|---|---|---|
| scope | string | 0..1 | "the write-scope this delta falls under — e.g. steering" |
| by | string | 0..1 | the contributing author |
| role | string | 0..1 | "the contributing role-hat — e.g. duty-officer-plans" |
| at | datetime | 0..1 | when it was contributed (DEC-15, NF2) |
The first DEC-61 write built in v1: an operator's *applied intel* — denied (no-go) cells — shared to the store as steering constraints, where every surface (e.g. the Data Analysis monitor, including a popped-out one) sees it land. Risk appetites, by contrast, stay local (a ranking lens). Identity is content (DEC-35): the store keys it by the hash of its canonical form.
| field | type | card | description |
|---|---|---|---|
| constraints | Constraint | 0..* | the interpreted steering gestures shared (DEC-24) — e.g. no-go regions |
| scopeinherited | string | 0..1 | "the write-scope this delta falls under — e.g. steering" |
| byinherited | string | 0..1 | the contributing author |
| roleinherited | string | 0..1 | "the contributing role-hat — e.g. duty-officer-plans" |
| atinherited | datetime | 0..1 | when it was contributed (DEC-15, NF2) |
An in-flight operator perturbation during Execute (issue #7): an obstruction (a +N min hold at the vehicle's current cell) or a blocked cell forcing a re-route. Previously these survived only as a prose Observation note; capturing them as a typed, content-addressed store object preserves their structured inputs for inspection (the Data Analysis monitor) and replay (NF3), and re-uses the DEC-61 attributed-delta write path. Identity is content (DEC-35).
| field | type | card | description |
|---|---|---|---|
| event | ExecutionEventKind | 1 | which perturbation — obstruction or block |
| at_min | integer | 0..1 | mission minutes when applied (sim-time ≡ plan-time, ADR-0007) |
| cell | HexCell | 0..1 | where the perturbation bites — the vehicle's cell for an obstruction, the blocked cell for a block |
| delay_min | float | 0..1 | the hold added by an obstruction (absent for a block) |
| rv_min | float | 0..1 | the re-planned RV / mission-end after the perturbation |
| absorbed_min | float | 0..1 | minutes the downstream holds absorbed, so the RV slipped less than delay_min (ADR-0007) |
| scopeinherited | string | 0..1 | "the write-scope this delta falls under — e.g. steering" |
| byinherited | string | 0..1 | the contributing author |
| roleinherited | string | 0..1 | "the contributing role-hat — e.g. duty-officer-plans" |
| atinherited | datetime | 0..1 | when it was contributed (DEC-15, NF2) |
The closed value vocabularies (in common) used by the fields above.
Whether a commitment must hold or is best-effort (DEC-22).
hard — must holdsoft — best-effort; carries a priority, with authority from provenanceThe verb of an activity (DEC-16); v1 set, pluggable registry (NF7).
visitloiteravoidtransitmaintainThe lifecycle state of a commitment (B4). `at-risk` is live-only (E2) and not stored.
proposednegotiatedcommittedsatisfiedviolatedwaivedsupersededconfirmed — answered by the operatordefaulted — filled from a stamped defaultopenresolvedThe medium a baseline / profile / movement model operates in (DEC-20).
landseaairPer-cell land-cover class used by the skeleton's mobility raster.
roadtrackopenroughforestmarshfordwaterHow a channel or movement model is realised (DEC-49). `provider` = a computed service behind the seam.
rasteranalyticparametricproviderHow predictable a channel is over time (DEC-21) — drives sampling.
staticperiodicdynamichighmediumlowThe render-class of one time-varying facet of an entity (DEC-52/53).
cell — a position → map glyph / distance-along-trackscalar — a numeric value → a line (altitude, fuel, distance)window — a time interval → a bandstatus — an up/down or phase value → ticksThe skeleton's three candidate strategies (the "handful" of plans).
direct — fastest by time/speedtracked — keeps to tracked/road surfacescovered — favours exposure-reducing coverA coarse three-level qualitative band for cost / robustness (C2/C6, NF10).
robustmarginalfragileThe slack band on a single commitment's satisfaction (A2, NF10). `crossed` = violated.
robustmarginaltightcrossedA commitment's verdict in a plan's scores.
satisfiedviolatedwaivedThe kind of one leg in a plan's schedule.
transithold — a wait — e.g. "await low-tide window" at a tidal fordvisitexfilThe outcome of the tidal-ford wait-vs-detour weighing (ADR-0006).
no-ford — no tidal ford on the routeopen — ford open at the bank — cross nowwait — hold at the bank for the low-tide window, then crossdetour — ford-free detour reaches the RV soonerWhether a clash is built into the request or emerges from the schedule (C1).
structural — e.g. no route existsemergent — e.g. the schedule is infeasibleWhy the wingman raised an execution alert (E3).
hard_infeasibleband_crossingtide_reassessment — a re-plan changed the tide decision's mode (ADR-0007)AlertObservationWaiverReplanThe kind of in-flight operator perturbation applied during Execute (issue
obstruction — a +N min hold spliced at the vehicle's current cell, re-timed through the tide-aware chooser (ADR-0006/0007)block — a cell ahead declared impassable, forcing an in-flight re-route around it