The Shelf / The Glossary canon v4.0.0 · gate PASS

The Glossary

One name per concept (the law, Part 4, v4.0.0): every concept the canon owns, its one name, its definition in the canon's own words, the Part that defines it, and the synonyms retired. The canon owns the names; a deployment binds only its mechanism, spoken as a qualifier. Rendered from canon/GLOSSARY.yaml on every build.

NameDefinitionPartRetired synonyms
SettledThe epistemic stamp of a law with its receipts cited.header
ProvisionalThe epistemic stamp of a law ratified with no receipts yet, its first receipt's due condition stated inline; taught, drilled and examinable everywhere except the day-60 certification verdict.header
The three layersEvery well-managed domain has the same three layers, ontology, SOP and data, and when work feels messy, unnamed and untrackable, one or more of them is missing.1
OntologyLayer 1, the nouns: what exists, its fields, its legal states, its identity scheme (how instances are named), and the declared places where it lives.1
SOPLayer 2, the verbs: what may be done to the nouns, by whom, on what clock.1
DataLayer 3, today's instances, written in the layer-1 vocabulary.1
NounAn entity the ontology names, with its fields, its legal states and its declared identity scheme; every noun lives in exactly one home concern and is used elsewhere by typed reference, never by copy.1
Identity schemeA noun is not ontologized until its instances carry a declared identity scheme, and two schemes are legal: a minted token, or a natural key where the date or slot already individuates.1
CodeA minted, human-speakable token where instances must be cited across time, people or surfaces: minted at birth, permanent, never reused, never renumbered, the audit trail's spine; bare inside its zone, qualified at egress.1
ZoneOne code namespace per organization or logical entity in an operator's declared zone registry, homed with the operator; a zone may be reserved for the cost of a row while carrying no deployment.1
HomeThe one concern whose spine declares a noun and whose owner stewards it; every other concern uses the noun by typed reference, never by copy, keeping its own facts in its own register keyed by the home identity.1
Re-homingStewardship moves, identity never does: when a noun's true witness turns out to live elsewhere, an induction-class act, on ruling and with no clock, in two shapes, custodial and jurisdictional.1
Custodial re-homingRe-homing that moves stewardship and address; the full six steps bind, and the vacated address becomes a permanent one-hop alias.1
Jurisdictional re-homingRe-homing that changes only the governing spine; slug, codes and custody survive, so the alias and handover steps are satisfied vacuously rather than skipped.1
Meta-concernThe concern whose territory is the concern estate itself: the register of registers, where a ruling spanning concerns lives and the OKG is homed; the last meta level, ever.1meta-domain
The two loopsEnforcement and gardening are not layers but feedback loops, closing at different speeds over the three layers, carried by ceremonies like any other process.1.25
EnforcementThe fast loop: closes the runtime against the design, its machine half authored into layers 1 and 2 as gates and invariants, its human half the Inspect ceremony walking the exception set.1.25
GardeningThe slow loop: closes the design against reality, asking whether the schema and SOPs still fit the drifted world; the only loop allowed to reopen layers 1 and 2.1.25
ReificationIn a platform that implements this model, the definitions themselves are records: layers 1 and 2 live as rows in meta-registers, so the slow loop runs as ordinary register operations.1.25
SpecThe organ that owns intent (names, legal states, contracts, clocks-as-commitments, decisions, and why): a dossier, a charter, the canon; implementations conform to it, and a divergence is a bug or an amendment candidate.1.25
ImplementationThe organs (code, tools, configured platforms) that own mechanism, the exact validation, retry logic and plumbing, which the spec never restates; conformance is checked in the consumer's context.1.25
Config-as-dataWhere one definition must exist in both prose and machine form, both consumers compile from one machine-readable source instead of maintaining the pair by hand.1.25
DeclarationThe authored file: a spine's one authored source, from which every surface renders, its version minted at the write path and never typed.1.25
SpineThe content of a declaration, a concern's governing spec: scope sentence, birth story, jobs, ontology declarations, SOP suite, organ index, decisions and version; the organ-holder, never an organ.2.5
DossierThe rendered page of a spine, generated from its declaration and never hand-edited.1.25
AuthorOne holding a recorded, scoped grant to define layer-1 nouns and layer-2 verbs, minted by the apprenticeship or by the practicum's day-60 certification.1.75
OperatorOne who runs an inherited stack, writing rows, running ceremonies and walking exceptions, which need no license.1.75
Coverage walkA periodic audit ceremony that enumerates the territory, marks which domains are committed, and consciously accepts the unmanaged remainder; nouns are never minted there, and an accepted gap is a decision where a silent one is a risk.1.75
Authority registerWhere an authoring grant lands: who may author, in which concern's scope, granted when, on what receipt.1.75
ApprenticeshipA reviewed first authoring, where the unlicensed author walks the door with a licensed one same-day and the pass mints permanent self-serve, so the license dissolves itself author by author.1.75
The three skillsThe layers are anatomy, the skill is physiology: diagnosis (seeing an incident as a missing noun), design taste (which ontology, not just an ontology), and the two loops.2
JobA question a named hirer brings to a structure on a cadence, whose answer changes a decision, written in the hirer's own words; jobs then structures, never structures then jobs.2
The jobs admission standardA job enters the enumeration only by stating four things: who hires it, on what cadence it fires, which decision its answer changes, and its failure cost when unserved.2
HirerWhoever consumes the answer to change a decision; supply never wears the hirer cell, and condition shape is legal only for a genuine machine consumer.4
The two doorsOntologize has two doors: the pain door, a live domain entered through recurring pain, and the JTBD door, a greenfield domain entered through job enumeration; the doors also bound the loop.2
Pain doorThe catechism's door into Ontologize: a live domain, entered through recurring pain.2incident door
JTBD doorThe greenfield door into Ontologize: enumerate the jobs first, then derive the nouns and fields from them.2survey door
The done-testAny ask, from any hirer, classifies by one question, when would this be done: never means a concern, a date or end-state a project, when the number hits X the goal layer, a misleading shape a project with a recurrence flip.2
DeclareTo declare a domain is to author its declaration through a door: the jobs admitted, the nouns ontologized, the verbs processized, the organs indexed, the past inducted.2
BirthThe day a declaration enters; the spine's birth story records why, and the orphan rule asks at birth.2
CommittedThe state that results from a declaration entering: a domain the estate manages from then on, with a walk, which is to say a concern.2
ConcernA domain committed to management: one owner, a closed noun and verb vocabulary on one spine page, two or more admitted jobs with different hirers, rulable divergences; the deployments' word, adopted at v4.0.0.2committed domain
DomainRaw territory: a domain of work, uncommitted, which the coverage walk lists and only a door admits; a concern is a domain plus the commitment to manage it.2
CategoryToo big to be a concern: no single owner, no closable noun-set; its spine would be an org chart, and that axis belongs to responsibility, not territory.2
OutcomeNot a concern: a KPI axis; you do not walk an outcome, you walk the programs that move it, and outcomes belong to the goal layer.2
The four grain testsOne accountable owner; a closed noun-and-verb vocabulary that fits one spine page; two or more admitted jobs with different named hirers; and a spine divergence that yields a question a human can rule on.2
The capacity loopEvery concern requires a live, drained walk: a conservation invariant matching concerns to judgment capacity, never rationing codification, steered by two receipts-derived meters, debt aging and disposition drain.2capacity guard
The goal layerWhere an outcome refused as a concern lives, above the concerns: objectives as closable battles, linked to concerns only through lead measures whose readings come from the concerns' standing organs.2
ObjectiveA closable battle: from X to Y by when, one accountable owner, ending won, missed or abandoned, where a concern is never done.2
Lead measureA predictive, influenceable, one-owner bar linking an objective to a concern, whose readings come from that concern's standing organs, never from fresh bookkeeping.2
The three speciesThe done-test's answers name three species of managed thing, each with its own anatomy: a concern (an engine, never done), a project (bounded work with a pre-registered definition of done), and an objective (a number by when).2
ProjectBounded work with a pre-registered definition of done: a noun of the work-management concern, with identity, a scope sentence, one owner, a clock, what it serves, its work on a board, and a close in exactly one of done, abandoned or converted.2
Work-management concernThe concern that owns the work noun and its register, every project's lifecycle and never a project's substance; a project's one home.2work-management domain
Definition of doneThe pre-registered end state that separates a project from a concern; done means it was met, never the calendar, and it is frozen once the project closes.2
ServesThe question asked of a project at declaration, never at capture, with two answers: a concern (the project builds or amends one of its organs, or is its induction) or loose, declared; only silence is forbidden.2
Loose, declaredPersonal or exploratory work, said out loud; its home is the work-management concern by construction, its board that concern's own, its walk that concern's ceremony.2
WorkstreamThe grain that says 'for X to do Y': one owner, one purpose, the unit of delegation, where ownership is fixed for a stream of work.2
TaskThe grain that says 'the next move is': one ball, who, what, since when.2
Hard clockA project clock the world set and enforces, a filing, an expiry: it moves only when the world's date moves, and missing it is a miss; deadline-grade.2
Target clockA project clock of self-set pacing, the appetite: it moves by a recorded shift, and every move is a counted slip; walk-grade.2
ShiftThe only way a project's baseline (its definition of done, its clock and its kind) moves: a recorded change carrying old, new and a reason, never silent.2
RestA project hidden until a date or a condition, then returning, neither open nor terminal to the walk; a rest never outruns a hard clock.2
The five verbsThe layers projected into what an author-operator does to a concern: ontologize and processize are authoring acts, log, inspect and garden are runtime functions the deployment is audited on.2.5
OntologizeName the nouns: entities, fields, legal states, declared places (layer 1, authoring).2.5
ProcessizeDefine the verbs: SOPs, ceremonies, cadences, owners, including the two meta-ceremonies (layer 2, authoring).2.5
LogEvery event lands as a row, as it happens (layer 3, runtime).2.5
InspectWalk the exception set the machine surfaces and disposition every item; the fast loop's human half, and it means exceptions only.2.5
GardenAmend the ontology and SOPs as reality pushes back; the slow loop, and the only runtime verb allowed to reopen layers 1 and 2.2.5
Concern-owned SOPA process belonging to exactly one concern: authored in that concern's spine, one owner, the ownership invariant strict.2.5domain-owned SOP
CeremonyA cross-concern convenor: it walks segments that several concerns each own, so it is owned at the level that spans what it convenes and never forced into a single concern.2.5
Scope sentenceWhat this concern is and when to open it; one sentence, the standfirst every surface leads with.2.5
Birth storyWhy the concern exists and what forced it into being; the why that pinned decisions cannot carry.2.5
JobsThe spine's reified jobs, the admission-standard table: each row a hirer's question with its cadence, the decision it changes and its failure cost; never finished at birth.2.5
Ontology declarationsThe spine's nouns, legal states, identity schemes and their typed links: the noun graph, never a noun list, because a concern is a pipeline and pipeline-ness is edges.2.5
SOP suiteThe spine's verbs, each named, clocked and owned, with its kind: SOP, ceremony or induction.2.5
Organ indexThe spine's typed pointers to the organs that implement it, mechanism never restated: a free typed entry of name, type, binding and address, never a closed list of engine kinds.2.5
DecisionsThe spine's pinned decisions, rendered by reference per the jurisdiction law: each with its date, its ruling and its status, standing or superseded.2.5
VersionThe spine's version, minted at the write path whenever the declaration changes, never typed.2.5
OrphanAn organ without a spine home; at build time the question which concern this organ serves is mandatory, and only the silent no-answer is forbidden.2.5
WorkshopA build explicitly experimental and uncataloged, earning structure by receipt; the third legal answer to the orphan rule's question.2.5
InductionThe one-time act carrying a concern's unstructured past into the standing process's steady state: an owner and a declared end state, but no clock; a second induction means enforcement failed.2.5
BackfillInduction that enriches the past from retained ground truth, statements and archives, so it becomes rows under the new ontology.2.5
FreezeInduction by a dated legacy line: the past stays readable but unconverted, and the new capability stays quiet behind the line, which is correct, not a gap.2.5
BankruptcyInduction that declares the past handled as a class without item-level processing; legal only when reversible by construction, archived, never deleted, the corpus retained.2.5
ExceptionWhat escapes the gates and reaches a human: overdue, blocked, stale ball, no next action, failed assertion; a register's open rows, and a recurring exception is information about the system, not about the work.2.5
The five dispositionsEvery walked item ends in exactly one recorded disposition: do, delegate, defer, drop or decide.2.5
WalkThe Inspect verb over one exception set, on one clock, by one walker; the register's walk set says what is open, the ladder says who reads it and when.2.5
The walk ladderA concern normally has several walks, nested by altitude, and an exception climbs exactly one level at a time, by aging past the lower walk's clock or by recurring; recurrence routes to Garden.2.5
Floor walkThe walker closest to the work on the fastest clock: it reads the raw open rows and discharges what it can, do and delegate.2.5
Register walkOne level up on a slower clock: it reads only what the floor could not discharge, a row that aged past the floor walk's clock or recurred.2.5
Top walkA line in a ceremony, derived from the registers beneath it and never hand-kept; its exception set is what escalated plus the liveness of the walks below, so the executive walks the walks, never the work.2.5
AltitudeThe clock and the exception set of a walk, never seniority: one person may hold two rungs, and a machine may hold the lowest.2.5
Dead walkA register that has not moved for its walk's clock, itself an exception the walk above reads.2.5
The five presencesA corridor screen, never a gate, for any live register: ontologized, processized, logging, inspected, gardened; five yeses is a screen passed, not a certificate.2.5
OrganA declared place: a standing artifact that one concern declares for exactly one job, that the concern's processes operate on their clocks, and that the spine's organ index names.2.75
TypeThe organ's one job for its concern, its role never its mechanism, from the canon's closed set of nine; derived and foreign are qualifiers, never types.2.75
BindingThe mechanism that implements a type in one deployment, named as a qualifier on the canon's word and recorded in that deployment's own declarations, amended freely on its own clock.2.75
KindA deployment's mechanism word for an organ (a tracker, a dossier-table, a mini-app, a dashboard): a qualifier on the canon's name, never the name; the spelling of a binding.2.75
ChannelSubstrate: a communication container, type-promiscuous by nature, never an organ and never taking a type, though an organ may bind into one.2.75
RegisterThe concern's records: identified rows, mutable cells, exceptions walked.2.75
LedgerAppend-only receipts: proof that events ran, never mutated.2.75
CourtWhere balls sit, visible at a glance.2.75
BoardA bounded body of work in flight: tasks, definition of done, closable.2.75
SurfaceThe screen a human opens; view-only is a qualifier, never a noun.2.75
DoorThe typed write path: Gate-mode enforcement embodied.2.75
IndexDerived views recomputed on events, never kept by hand.2.75
CorpusRetained raw ground truth for recompute and backfill.2.75
ScoreboardThe goal layer's readings with standings, derived from registers, never testimony.2.75
The register's walk setA register declares which of its states are terminal and which are resting; its open rows, neither, are the exceptions its walk exists for, and a register declaring no terminal state shows as a loud gap.2.75
TerminalAn author-declared bit on a state: the row is closed.2.75
RestingAn author-declared bit on a state: settled but not closed, a standing ruling, a recorded receipt.2.75
OpenA row in a state neither terminal nor resting: the exceptions a register's walk exists for.2.75
AddressWhere an organ is, declared in the organ index: a table's slug, a URL, a workflow's name; the index declares where and what, never how the organ is doing.2.75
LivenessHow an organ is doing, the last receipt, the open rows, a clock gone stale: derived by the consumer from the organ at its address, recomputed on read, never declared.2.75
Receipt doorThe declared liveness of an organ the consumer cannot read, another estate's register or a foreign system; the one exception to derived liveness, at the estate boundary.2.75
Knowledge routes by roleKnowledge is a role, never a type, a spine component, or a noun; it routes by one question, what decision does it change and does it have an identity, into the types the canon already has.2.75
DocketWhat a ceremony walks in one sitting, derived and bound as an index, never hand-kept; a docket empty for a quarter merges away.2.75
The catechismThe pain door's six questions, run every time a pain recurs twice; write the answers down, they are the design.3
ClockWhen a verb runs: a cadence with an owner, authored once, in the spine or in the scheduler the spine names, never both; 'sometime' is not a clock.3
The seven fitness testsA proposed structure passes review only if every field changes a decision, every instance has a declared identity, compliance is silent and exceptions loud, pull surfaces die, a good ceremony shrinks, and it passes the instruction and absence tests.4
The instruction testAfter the structure exists, can the manager direct a day's work in one line; if not, layer 1 is too coarse.4
The absence testDoes the structure run correctly for two weeks with the manager on holiday; if not, layer 2 has no real clock or no real owner.4
QualifierA variant is a qualifier on an existing noun, never a new noun, until receipts earn the split.4
Flip conditionThe pre-registered observable event that reopens a rejected or deferred build, with the build then designed for the failing case and sized by its evidence; a deferral without one is a door slammed.4
The speech testA word an agent or a human reads or says while working (a tool name, a declaration key, a sentence, a screen label) is a name and must be the canon's; a word only a developer reads in code is mechanism and may stay.4
SittingA ruling session on the canon or on a spine: an author proposes and the owner rules.4
The four enforcement rolesFour strengths of agents as enforcement, in rising order: observe, notice, gate, scribe; agents enforce shape, humans judge substance.5
ObserveAn agent attends the ceremony or reads the channel and lints outputs against the ontology after the fact; violations still happen but become loud, eventually.5
NoticeAn agent watches the clock and the write path live, a ceremony that did not fire, a row gone illegal, a due date crossed, surfaced the same day, to the owner, once, loudly.5
GateThe agent is the write path: work enters through a typed door that stamps the required fields and cannot produce an illegal row.5
ScribeThe agent produces the artifact natively in the right shape, pre-briefing the standup or filing the register row from the conversation, so compliance becomes moot.5
BallWho owes what, since when, held by whom, verified against ground truth before anyone chases; a decision without a ball is a wish with a witness.5
ReceiptProof that an event ran, cited by row code: 'done' plus the code is a verifiable claim, 'done' alone an assertion; structure and laws are earned by receipt, never by scenario.1
OKGThe Operating Knowledge Graph: a deployment's one derived view of everything it manages, condensed out of the declared spines on every read, never authored, never stored as truth; the meta-concern's index organ.5
OKG MapThe OKG's human window, a surface; the Park is a lens on it.5Map tab, concern map
Lookup doorThe OKG's door: a word in, every citable handle out, with its pulse; what makes a negative about the estate a lookup, never a guess.5
The ten-word mantraName it, clock it, write it, guard it, garden it: name, clock and write are the three layers, guard and garden the two loops.6