Evidence Graph Referring (C-4)

About this pattern

This is a generated FPF pattern page projected from the published FPF source. It is canonical FPF content for this ID; it is not a FPF Reference product feature page.

How to use this pattern

Read the ID, status, type, and normativity first. Use the content for exact wording, the relations for adjacent concepts, and citations to keep active work grounded without pasting the whole specification.

Type: Kernel pattern Status: Stable Normativity: Normative

Use this pattern when a source, carrier, result episteme, credential, dashboard, provenance label, generated explanation, model card, or review note is being relied on for a named claim or bounded action and the source-to-use account is still implicit.

Keywords

  • relied-on claim
  • bounded use
  • claim/result episteme
  • source publication
  • carrier
  • dated work
  • direct relation
  • evidence-provenance path
  • currentness
  • rival explanation
  • RelianceDisposition
  • unsupported overread
  • actual-use relation.

Relations

A.10coordinates withMathematical Lens Use
A.10coordinates withDecision Theory (Decsn-CAL)
A.10explicit referenceMathematical Lens Use
A.10explicit referenceDecision Theory (Decsn-CAL)
A.10explicit referenceMulti‑View Publication Kit
A.10explicit referenceControlled Semantic Coarsening
A.10explicit referenceTransformation Flow Structure
A.10explicit referenceQuantum-Like Modeling Lens

Content

Problem frame

Use this pattern when a source, carrier, result episteme, credential, dashboard, provenance label, generated explanation, model card, or review note is being relied on for a named claim or bounded action and the source-to-use account is still implicit.

Primary EntityOfConcern. The live object is the exact relied-on claim and bounded use. A.10 builds a descriptive evidence-provenance path that represents the already governed sources, carriers, work, result epistemes, provenance relations, currentness, and later-use relations needed to judge that use. The path is not a new world-side relation and its edges establish none of the facts they cite.

First useful move. Write: “Work W_use relies on claim episteme E as a premise for use U; E states local result R; the cited source publications, carriers, work, and direct relations are S; currentness is T; the bounded A.10 disposition is D.” If a field lacks a direct governor, mark that exact gap.

What goes wrong if missed. Carrier presence becomes truth, provenance becomes approval, a result record becomes performed work, MethodDescription becomes a run trace, a graph edge becomes an obtaining relation, and a currentness or assurance decision is inferred from display styling.

What this buys. A source-to-use account that can be replayed, contested, refreshed, narrowed, or handed to a neighboring governor while keeping the claim, carrier, performed work, local result, result episteme, provenance, currentness, reliance, assurance, and action distinct.

Not this pattern when. A.10 does not own measurement, formal, causal, diagnostic, conformance, comparison, selection, acceptance, gate, permission, commitment, work, or decision results. It does not establish representation correspondences. Use each direct pattern for its result, A.15.1/A.6.1 for performed work and actual bindings, C.2.1 for the result episteme, G.11 for currentness, C.29 for representation, and B.3 when an assurance claim or material-reliance threshold is current.

Use A.2.4 first when only the first evidence-use or status-use classification of an episteme is at issue. Enter A.10 when carrier identity, source recovery, provenance, currentness, rival explanations, or bounded reliance must remain replayable.

Here path means a path in a descriptive evidence/provenance graph, never a route of action or a universal evidence relation.

Problem

Source-backed reasoning fails in recurring ways:

  1. the relied-on claim is not named;
  2. a carrier or publication face is substituted for the claim it represents;
  3. a method description, plan, signature, or stored reference is substituted for actual work and bindings;
  4. a local domain result is replaced by a generic evidence or result field;
  5. provenance, currentness, reliance, assurance, and authorization are collapsed; or
  6. a graph edge is asserted before the direct source, work, production, representation, participation, or use relation is known to obtain.

The practical effect is false authority and unreplayable decisions: a badge looks like permission, a dashboard looks like a gate decision, or a model output looks like an accepted conclusion.

Forces

  • Minimality vs consequence. Orientation needs a small path; material reliance needs the exact fields that change the decision.
  • Carrier identity vs claim content. The same content can appear in several carriers and editions; a carrier can be authentic while the claim is false or stale.
  • Reusable method vs performed work. A method describes a repeatable way; actual use requires dated work and exact bindings.
  • Provenance vs result ownership. A.10 must make a result traceable without becoming the result's governor.
  • Graph convenience vs ontic discipline. A graph can represent many relations compactly but cannot make them obtain.
  • Contestability vs confidentiality. Reliance must be challengeable while sensitive carriers may require scoped, redacted, hashed, or role-mediated access.

Solution — recover exact objects before drawing the path

Start with the relied-on claim and direct owner

Name the exact C.2.1 episteme whose content is being relied on. Its ClaimGraph states one local result or proposition, subject, interpretation basis, polarity or status when current, and uncertainty or qualification when relevant. The local result remains with its direct governor: C.16 for measurement, C.28 for causal support, A.19 for comparison or selection, G.4 for an acceptance-clause application, A.21 for a gate decision, C.11 for a decision, and the exact formal, diagnostic, conformance, identity, permission, commitment, or role pattern for those results.

A carrier, citation, provenance entry, or A.10 classification does not constitute the result episteme or the domain result. When their identity or inception is live, use C.2.1 and A.15.PROD respectively.

Ground source, carrier, publication, and representation

Recover the exact source episteme or source publication, the carrier or publication face that exposes it, edition/version, bounded claim content, and any copy, extraction, transformation, or publication occurrence between source and use. E.17 governs publication; C.29 governs representation correspondences. The descriptive graph points outward to those independently governed objects and relations.

Carrier authenticity, integrity, or provenance may support only its named origin, history, build, or transformation claim. It does not imply truth, safety, approval, release, permission, assurance, or work occurrence.

Separate method, work, participants, and local result

U.MethodDescription is an episteme about one exact U.Method. It may state generic participants, parameters, effects, and operating conditions. It has no actual-participant slots and no intrinsic design-time intention, proof criterion, test criterion, or claim that work occurred.

Performed source production, measurement, verification, interpretation, transformation, query, review, publication, or later reliance is one or more dated U.Work occurrences. Each occurrence has an occurrence designator, temporal extent, performer through U.RoleAssignment, enactsMethod, affected or evaluated referent, resources, and actual participants through direct subject relations or A.6.1 operation-application bindings. A compatible signature, plan, description, log schema, or graph node establishes none of those bindings.

For every cited result, name its direct governor and its C.2.1 result episteme separately. The provenance path may represent the exact work, participants, produced entities, subject results, result epistemes, and outcomes only after their direct relations are established.

Build a descriptive evidence-provenance path

The minimum A.10 path records only what the bounded use needs:

FieldRequired content
Relied-on claimExact C.2.1 episteme and the local result or proposition it states
Bounded useExact later work/action and its premise, reference, decision-use, operation-argument, or other direct use relation
Sources and carriersSource epistemes/publications, carrier identities, editions, transformations, and direct provenance/citation relations
Work and bindingsDated producing/interpreting/transforming work, performers, methods, resources, and actual direct/A.6.1 bindings
Result ownershipEach local result's direct governor and its distinct result episteme
Time/currentnessSource and result windows plus G.11 currentness when currentness affects use
ChallengePrincipal rival explanation, unsupported attempted use, contest/redress path, and reopen trigger

Graph nodes retain their admitted kinds. Each edge cites one independently established direct relation; no generic evidences, verifiedBy, validatedBy, measuredBy, producedByWork, or criterion-participant relation is minted as a fallback. A project may label display edges for navigation, but the label has no ontic force.

Classify bounded reliance

The canonical local RelianceDisposition member set is exactly: pass, degrade, abstain, reopen, evidence-needed, safety-case-required, and blocked-current-use. For ordinary reliance below B.3's material-reliance threshold, use one of the first five or blocked-current-use for one named use. pass supports only the exact bounded use; degrade supports only the named narrower or reversible use. safety-case-required only records that the B.3 material-reliance threshold was crossed and routes the user to B.3; it is not an A.10 assurance result. No disposition is claim truth, CV.Status, gate decision, selector outcome, approval, permission, release, assurance, or work authorization.

When an assurance claim is made or the material-reliance threshold is met, enter B.3 with the minimum reliance safety assurance record. A.10 continues to supply the exact source and provenance paths but does not issue the assurance result.

Currentness, actual use, and graph limits

Source availability and source currentness are distinct. Record issue/effective windows, supersession, revocation, source-order rules, and the G.11 currentness result when a use depends on them.

Actual use requires another dated work occurrence and one exact premise, reference, decision-use, operation-argument, or other direct relation to the result episteme. Storage, indexing, citation, graph membership, visibility, or co-location does not establish performed use.

Part-whole, temporal, production, publication, representation, provenance, participation, and reliance relations remain independently governed. The A.10 graph may cite them together for replay but never substitutes one for another.

Authority-reliance use of ordinary A.10 evidence-provenance paths

Use this subsection when an authority-looking carrier is being relied on. The A.10 path represents one named claim, its exact sources and direct relations, and one bounded use; it is not an authority relation. If the work occurrence, gate decision, speech act, commitment, permission, role assignment, status assertion, or other governing relation already exists in a project-side source, recover that object by value and let the graph cite it.

A10-lite is enough for source-finding, orientation, learning, and bounded reversible probes:

FieldRequired content
claim or effectThe claim, effect, or source-backed reliance use the evidence carrier is being asked to evidence for the named work occurrence or reliance use.
evidence carrierThe display, badge, credential, attestation, dashboard tile, copied text, generated text, log, trace, source file, report, or other SymbolCarrier/publication carrier.
producer, issuer, verifier, or source-maintenance role assignmentThe role assignment or system that issued, performed, attested, measured, copied, generated, verified, or displayed the carrier or source-backed content.
method enactment or work occurrenceThe work act, measurement, verification, review, build, attestation, copy, extraction, generation, dashboard query, API query, trace, log, or method enactment that produced the carrier.
time windowIssue time, effective window, decay, supersession, revocation, policy or gate version, and reopen condition.

Minimum evidence-provenance path for routine reliance:

FieldRequired content
evidenced claim or effectApproval, permission, gate passage, role or status currentness, work occurrence, evidence relation, assurance input, or other claim named by value or effect being attempted.
evidence carrierThe visible or recovered carrier, with enough identity to reopen it.
issuer, performer, trust root, status register, or source-maintenance role assignmentThe role assignment, system, or governing register accountable for producing, updating, or verifying the carrier or source-backed content in this context.
affected entity and relying contextThe release, service, model, person, role-assigned system or acting holon, policy subject, work target, claim, audience, tenant, environment, or other entity for which reliance is attempted.
time window and freshnessIssue time, effective window, decay, supersession, revocation, policy or gate version, and reopen condition.
evidence-producing work occurrence or method traceThe production, verification, query, generation, review, or other work that made the carrier, plus the method trace when the method matters for the claim.
evidence relation and rival explanationWhich claim the carrier evidences, how it evidences it, and the principal rival explanation that remains plausible, such as stale display, spoofed badge, copied wording, generated paraphrase, context shift, carrier-only provenance, or local-only transform relation.

Expanded fields are collected only insofar as they decide the current reliance question. Evidence depth follows consequence severity, reuse, contestability, cross-context movement, and the evidence relation required for the attempted claim. Do not expand a source-finding note into a full evidence dossier, and do not collect every expanded field merely because a carrier is copied, generated, credential-like, provenance-like, or cross-context.

Adversarial misuse guard. Do not let carrier authenticity, provenance, copied approval, generated summary, stale screenshot, credential status view, or dashboard export convert into claim truth or currentness. Treat each as a rival explanation to test against issuer or source-maintenance role assignment, method trace or work trace, time window, and relying context.

Data-minimization and privacy boundary. Preserve the minimum source, provenance, and direct-relation account sufficient for the intended use. Use redacted, hashed, scoped, or role-mediated carrier refs when raw material would expose personal identity, access tokens, cryptographic proof payloads, tenant identifiers, security logs, incident details, internal release metadata, audit trails, privileged review-role names, sensitive model provenance, or sensitive data provenance. Redaction creates no source relation; it must preserve enough recoverability for the relying context.

Expanded fieldWhen it is needed
method trace or work traceProvenance, attestation, generated source relation, copied source relation, dashboard source relation, rollback source relation, or work occurrence is being used.
evidence-carrier integrityThe carrier may be spoofed, stale, copied, transformed, rendered, redacted, or context-shifted.
identity or holder bindingThe claim depends on a credential holder, role-assigned system or acting holon, issuer, performer, delegate, revoker, verifier, or relying party.
verifier context, relying-party context, and acceptance ruleThe evidence relation is accepted only for a verifier, audience, tenant, environment, release line, policy subject, operational mode, or consumer-side policy or gate rule that accepts the evidence for this use.
proof, cryptographic-signature, or status verification resultCredential, provenance, attestation, authenticity, revocation, or currentness relation is claimed.
policy version, gate version, and decision sourcePermission, gate passage, release, rollback authority, policy authorization, or another bounded use boundary is attempted.
source-chain transform notesEvidence relation passed through extraction, copy, rewrite, representation shift, explanation rendering, summary, export, redaction, or another transform step before reliance.
source order and supersession ruleMultiple source candidates disagree or freshness or priority may defeat the visible publication face, publication carrier, rendering, or cue. Include the governing register or status-source-order relation when a register entry is the source of role assignment, status assertion, permission, duty, or gate state.
minimum disclosure boundaryRaw evidence would expose secrets, personal data, tenant identifiers, privileged logs, tokens, security-sensitive traces, or unnecessary identities.

Case repairs:

CaseEvidence repair
Stale credential badge or status displayShow issuer or trust root, governing status register when one exists, holder or subject binding, verifier and relying-party context, proof result or status result, revocation and freshness, effective window, status-source entry version, and evidence-carrier integrity. Display presence is not current role assignment, status assertion, or permission.
Verifiable credential, credential view, or register excerptTreat as an A.10 carrier with issuer or trust root, governing status register when one exists, status-register entry id or source U.EpistemePublication ref and version, holder or subject binding, verifier, proof result, status result, currentness, relying context, effective window, revocation window, and acceptance rule. When those checks pass, it may evidence credential-currentness for that holder and relying context. A strong grant, exercise, weak non-prohibition/non-violation finding, or conflict requires A.2.8.PER; an actual commitment requires A.2.8; an issuing act, role assignment or status assertion, entry predicate, or gate passage requires A.2.9, A.2.1, A.6.B, or A.21 respectively, named by value for the bounded context. Display presence creates none of them.
Copied approval or review summaryShow the original A.2.9 SpeechActRef or issuing act when approval or authorization is claimed, or the original reviewed source when only review-content currentness is claimed. Add copy relation, currentness, scope, window, evidence-producing work occurrence, and whether a separate A.2.8.PER grant/finding/exercise/conflict result, A.2.8 duty/recommendation/prohibition commitment, or work relation is being claimed. Copy evidence is not approval by itself.
Provenance, authenticity, or attestation labelShow the bounded origin, history, build, or process claim; source U.Episteme, source U.EpistemePublication, or evidence carrier; method trace or work trace; source-specific proof; evidence-carrier integrity; verifier or relying policy that accepts it for this claim or effect; and rival explanation. Provenance does not show truth, safety, approval, release, gate passage, permission, or assurance unless another governing FPF relation named by value carries that additional claim or effect.
Dashboard status tileFor gate-passage or release reliance, show dashboard query, the source relation used by the dashboard query or the source-bearing record used by that query, time, window, currentness, source-order relation, freshness policy, rival explanation, and the current A.21 GateDecision or DecisionLogRef with gate profile, gate version, release target, and work target; the A.10 evidence-provenance path evidences that source-to-use path. A status display is not gate passage or work occurrence by itself.
Rollback command-like cueShow command record or issuing speech act, authorization relation, actor, affected work target or claim target, scope, window, and whether the cue is only an A.6.A action invitation. A command cue is not performed-work evidence.
Rollback performed-work resultShow A.15.1 U.Work occurrence, method trace or work trace, logs, outcome evidence, and time window. Performed-work evidence is not approval, assurance, or gate passage by itself.
Generated explanationUse E.17.EFP to classify the explanation relation and source-finding use. For reliance, show claim-bound attribution alignment: every operative claim relied on maps to a source passage, carrier, or governingPatternRef or authoritySourceRef named by value that evidences that claim in the relying context. When that mapping is complete, A.10 may evidence those operative claims as source-backed evidence; the explanation itself still does not issue, approve, authorize, pass a gate, evidence performed work, or raise assurance.
Model card or datasheet used as evidenceShow documented bounded-use statement or external intended-use field, version, window, evaluation condition, limitations, evidence carriers, and whether a B.3 assurance claim is being made. Documentation does not become readiness or assurance by presence.
Extracted source-to-use path to gate or release claimName the source U.EpistemePublication ref, source-bearing relation, or governing-pattern ref that carries the claim; the first lossy or non-commutative transform step; the FPF relation or pattern governing that transform (A.6.3.CR, A.6.3.RT, A.6.3.CSC, E.17.EFP, E.17.ID.CR, or E.18 where applicable); the bounded inference relation after the step; the governingPatternRef or authoritySourceRef named by value that carries the claim being made; the reopen trigger naming the source publication, source-bearing relation, transform record, evidence relation, or governing pattern position that must be rechecked; and the gate claim or release claim blocked until those source-to-use and governing relations are recoverable.
Conflicting source relationsWhen display, source publication carrier, decision log, recency signal, freshness signal, copied summary, generated summary, credential status, provenance label, or assurance evidence disagree, name the visible source relation, rival source relation, source-order rule, decision-source relation, freshness policy, and supersession rule. Do not choose by color, visual salience, confidence wording, copied wording, or apparent recency; the work claim or reliance claim is contested until the source-order question is resolved.
Sensitive evidence-provenance pathUse redacted, hashed, scoped, or role-mediated carrier refs when raw carriers expose secrets, personal data, security-sensitive traces, security-sensitive data, privileged logs, tenant identifiers, or unnecessary identities. Redaction does not create source relation; it must preserve enough recoverability for the relying context.
Pointer or proof-status evidence-provenance pathUse a hash, proof verification result, status verification result, source U.EpistemePublication ref, source relation ref, source-currentness relation ref, scoped pointer, disclosure receipt, or role-mediated view instead of copying raw sensitive carriers or payloads when that pointer preserves enough recoverability for the relied-on claim or effect. Do not copy raw secrets, tokens, privileged logs, personal identities, or tenant details merely to make the evidence-provenance path look fuller.

If the evidence-provenance path is incomplete, A.10 reports the exact missing source, carrier, work, result-owner, direct relation, or G.11 currentness fact and narrows or blocks only the attempted use. Possible dispositions include source-finding only, reopen original carrier, request issuer or status verification, refresh the source query, mark stale or contested, narrow the attempted P2W class or reliance claim, proceed only with a reversible local probe under an explicit work plan, or block the unsupported use.

Missing source-relation repair assignment. If the relying actor cannot recover or verify the source relation, assign the repair to the accountable project-side responsibility assignment: issuer or performer, verifier assignment, status-source relation, evidence-producing work assignment or evidence-producing system, gate-decision source relation, role-assignment source relation, status register entry, boundary claim relation, or source-currentness relation. The A.10 result should name the missing source relation or missing source-bearing record and blocked use rather than making the relying actor reconstruct a relation they cannot issue or verify.

ViewpointPrompt
Relying actorWhich claim named by value or effect needs an evidence relation, and what is the minimum carrier, source-bearing record or relation, time, and evidence-provenance relation for that claim or effect?
Issuer, verifier, or status relation maintainerWhich issuer, holder, verifier, proof result, status result, currentness relation, revocation relation, or acceptance-rule relation must be exposed or repaired?
Audit role or technical-review roleWhich carrier, source-maintenance role assignment, method trace or work trace, time window, evidence relation, and rival explanation must be recoverable?
Security reviewer or compliance reviewerWhich source-order relation, supersession relation, proof result, status result, revocation relation, and minimum-disclosure boundary decide this reliance question?
LLM user or tool userWhich generated or copied operative claims map to source passages or carriers, and which claims remain only source-finding?
Model documentation or data documentationWhich intended-use, evaluation-condition, version, window, limitation, and evidence carriers bound the model documentation or data documentation?

Repeated missing-source-relation indicator. If the same visible carrier family repeatedly returns stale, contested, missing-source-relation, or no-currentness A.10 results, record a source-relation repair action: instrument the source relation, expose the carrier field that carries the source-bearing relation, expose decision-log refs, add currentness checks and status checks, preserve claim-bound source relations for generated or copied outputs, require credential views to show status windows and currentness windows, require model documentation and data documentation to expose intended-use and evaluation-condition fields, or require provenance labels and attestation labels to name their bounded claim type. Repetition is an indicator that the source relation or display needs repair; it is not a reason to make each acting user rebuild the evidence-provenance path manually.

Display guidance for evidence and currentness: an evidence or status display should show the claim or effect, evidence carrier, source-maintenance role assignment, reference or link named by value, time window, freshness, relying context, and unsupported work use, reliance use, claim, or effect. A display that can only show source-availability relation should say so; it must not imply approval, permission, gate passage, work occurrence, or assurance.

Incident-learning fields for evidence and currentness overread: visible carrier or publication face, intended claim or effect, missing evidence-provenance field, evidence carrier named by value, source-maintenance role assignment, method trace, work trace, and time relation needed, rival explanation that made the overread plausible, current safe disposition, and upstream repair action for instrumentation, source U.EpistemePublication refs, source relation refs, status, currentness, claim-bound source relations, credential view, model documentation, data documentation, or provenance and attestation label.

Contestability and redress relation: when an evidence-provenance path or source-currentness relation affects person or team status, access, responsibility, a compliance relation, or a release decision, the A.10 result should name the disputed claim, evidence carrier, source-maintenance role assignment, verifier assignment, status relation maintainer, freshness relation, revocation relation, privacy-minimized evidence ref, safe interim disposition, and review or redress relation. A disputed display remains contested until the source-order relation or currentness relation is resolved.

Positive repaired evidence-use statement. When the source account is complete, write the smallest bounded statement: named relied-on claim, carrier/source and accountable role assignment, producing or interpreting dated work, method and actual bindings when relevant, direct provenance/citation/currentness relations, exact later work and use relation, RelianceDisposition, unsupported attempted use, and reopen condition.

What this does not authorize: A.10 does not approve, authorize, pass a gate, release, create permission or commitment, assign a role, record work, establish a domain result, assert a representation correspondence, or raise assurance. It supplies source recovery, provenance, and bounded reliance for the exact neighboring objects named by value.

Local evidence-use classifier and RelianceDisposition for source-bearing carrier or display reliance

Use this subsection when a visible carrier, publication face, source U.EpistemePublication ref, source relation ref, or display is being relied on for a named claim or act. First recover the claim kind, its direct governor, the source/provenance path, and the bounded use. Broad words such as source, metric, confidence, conformant, safe, ready, certified, approval, or permission are recovery prompts, not relation names.

This is a local reliance-use classifier, not a Core evidence-kind ontology. Use only the row that decides the attempted use. The path represents exact direct relations and the RelianceDisposition records one bounded A.10 judgment; neither becomes a general evidence or authority relation. Affordability card: orientation or source-finding remains a cue and stops here; bounded reliance states one bounded evidence use, unsupported attempted use, window, and reopen condition; threshold reliance applies the minimum governing pattern only when the B.3 material-reliance threshold is met: behavior, safety, release, compliance, public or protocol behavior, access, resource allocation, people status, team status, operational action, or controlled-object regulation would materially change. Plain wording remains ordinary unless it changes bounded use, source relation, evidence, gate, assurance, work, decision, or neighboring governing-pattern claim.

Cheap stop: if a bounded claim, current carrier, evidence-provenance path, window, bounded evidence use, unsupported attempted use, and reopen trigger are present, and there is no assurance claim, gate relation, work relation, control-bearing relation, release relation, or met B.3 material-reliance threshold, stay in A.10. Do not open B.3, A.21, B.2.5, or a broad evidence pack merely because the carrier or display looks official, quantitative, generated, credentialed, or safety-related.

Common wrong first classification: a visible carrier, source U.EpistemePublication ref, source relation ref, or display is approval, permission, safety, or readiness. First honest entry: recover the A.10 evidence-provenance path for one bounded claim or use; approval, permission, safety, readiness, gate passage, and work authority stay with their governing patterns when those relations are being claimed.

Plain disposition palette: RelianceDisposition=pass means proceed only inside the bounded evidence use; RelianceDisposition=degrade means use only a narrower or reversible version; RelianceDisposition=abstain means do not decide yet; RelianceDisposition=reopen means changed or contested evidence relation defeated the previous evidence-use classification; RelianceDisposition=evidence-needed means ask for the named missing evidence at the named decision point; RelianceDisposition=safety-case-required means apply B.3 because the B.3 material-reliance threshold is met; RelianceDisposition=blocked-current-use means block the current attempted use until the evidence-provenance path or governing source relation changes.

Source-looking evidence use or attempted useFirst A.10 actionEscalation triggerForbidden overread
Ordinary source-backed report, record, citation, observation, model card, datasheet, data card, or publication excerptName the claim, evidence carrier, producer or method trace, evidence-provenance path, currentness window, bounded evidence use, unsupported attempted use, and reopen trigger.Open B.3 only when an assurance claim is being made or the B.3 material-reliance threshold is met; open A.21 for a gate decision currently being relied on, A.15 or A.15.1 for work, or another governing neighboring pattern only when that relation is being claimed; open B.2.5 only when a controlled object is regulated through a feedback channel, evidence channel, cadence, window, supervisory relation, or control relation.Evidence presence as approval, gate passage, assurance, release permission, work authority, control authority, or safety acceptance.
Confidence, calibration, prediction interval, abstention reason, or selective-action cueName the act, context, window, calibration population, exchangeability condition, shift condition, applicability condition, and stop condition for the bounded evidence use. Use RelianceDisposition=pass or RelianceDisposition=degrade only for that bounded use, and state the unsupported attempted use beside it.Open C.27 or G.11 when timing, expiry, refresh, distribution shift, monitoring, or applicability change alters the bounded act; open B.3 when an assurance claim is being made or the B.3 material-reliance threshold is met.Confidence as global permission, trust, readiness, safety, release reliance, or engineering justification.
Generated explanation, generated summary, or didactic reconstructionKeep the rendering in E.17.EFP as explanation or source-finding unless each relied-on operative claim has an A.10 evidence-provenance path or another source relation that carries or exposes the source basis for the operative claim.Apply A.10, B.3, A.21, A.15, or another governing pattern only for the operative claim being relied on.Explanation wording as evidence, assurance, approval, gate passage, work occurrence, or permission.
Conformance label, CV.Status, benchmark result, score, semantic-fidelity marker, or CV-looking publication near releaseRecover the declared relation: measurement or marker relation, A.20 step-local CV status, A.21 gate check, E.19 pattern-quality result, C.16 characterization, or external-rule source named by value.Open A.21 only when an OperationalGate(profile) consumes effective gate-check refs and emits a GateDecision; open B.3 only when an assurance claim is being made.Conformance or score as value, adequacy, release confidence, work occurrence, safety, trust, or gate passage outside the declared relation.
Provenance, authenticity, C2PA-like credential, SLSA-like attestation, build record, or status-register displayState the bounded origin, history, build method or production trace, holder, status, verifier rule, relying context, and currentness claim it evidences.Open the governing record or relation that carries truth, permission, safety, release, gate passage, work occurrence, or assurance only when that relation is being claimed by value.Provenance, authenticity, or status-currentness as truth, safety, approval, permission, release, gate passage, or assurance.
Contest, redress request, challenge, appeal, or conflicting source relationName the contested claim, evidence carrier, source-order relation issue, freshness or currentness issue, affected use, accountable review role, allowed challenge evidence, possible disposition change, outcome record, and reopen trigger.Open neighboring role, status, commitment, gate, control, assurance, work, or representation patterns only when those effects are claimed by value.Appeal-channel presence, challenge form, or redress workflow presence as truth, compliance proof, social-effect acceptance, completed redress, gate passage, or work authorization.

For A.10 use, RelianceDisposition is a local disposition over the evidence-provenance path and the bounded reliance use. Outside a table column already headed RelianceDisposition, write the qualified form RelianceDisposition=... and bind it to the named attempted use, currentness and window when relevant, bounded evidence use, unsupported attempted use, and reopen or stop condition; it is not CV.Status, GateDecision, selector result, or ProblemCard@Context state.

Observed-effect or consequence evidence may be used only for what happened or is credibly recorded. If the attempted use says the source caused, prevented, would have changed, or is responsible for that effect, leave ordinary A.10 reliance and open C.28 plus any relevant evidence, work, or assurance relation.

If a proxy marker, benchmark, confidence value, dashboard metric, or score becomes the primary driver for action, release, resource allocation, people status, team status, or P2W priority, check whether the claim being made also raises an E.13 proxy-to-objective question. Do not open E.13 for every metric; open it only when the proxy is being used as the target or decision driver.

If publication or observation of a cue changes the represented situation or represented source condition, recover the probe-coupled boundary before treating the cue as passive evidence. This sentence does not import quantum-like vocabulary; it only prevents passive-evidence overread for dashboards, warnings, labels, and public status displays.

RelianceDispositionA.10 classificationMinimum A.10 statement
RelianceDisposition=passThe evidence relation named by value is present and current for the named use, the evidence kind is present, the source relation is current enough for that use, and the evidenced use is bounded.State the evidenced claim, act, work occurrence, review claim, or P2W carry-through use, the unsupported attempted use, the evidence-provenance path, and the window.
RelianceDisposition=degradeThe source relation carries only a narrower claim, smaller audience, reversible local act, lower assurance input, or shorter window.State the narrowed bounded evidence use, the unsupported attempted use, and the stop condition.
RelianceDisposition=abstainEvidence is insufficient, stale, out-of-context, uncalibrated, conflicted, or not tied to the claimed relation, while immediate rejection is not justified.State the claim not decided and the missing evidence or relation needed before use.
RelianceDisposition=reopenA contest, changed representation, changed selected entity, stale source, expired window, changed profile, conflicting source, retargeting, or new evidence defeats the previous evidence-provenance path.State the source or relation to reopen and the previous use that is no longer evidenced.
RelianceDisposition=evidence-neededThe visible carrier, source U.EpistemePublication ref, source relation ref, or display may matter, but the required evidence kind or source-currentness relation is absent.State the missing evidence kind, governing pattern, and decision point so delay does not become indefinite.
RelianceDisposition=safety-case-requiredThe B.3 material-reliance threshold is met: reliance on the visible carrier, source U.EpistemePublication ref, source relation ref, or display may materially change behavior, safety, release, compliance, public or protocol behavior, access, resource allocation, people status, team status, operational action, or controlled-object regulation.State the threshold trigger and apply B.3 for the minimum reliance safety assurance record, with A.10 evidence-provenance paths for the source claims.
RelianceDisposition=blocked-current-useNo current evidence-provenance path carries the evidence relation needed for the attempted act, work, claim, gate, release, assurance, review, control-bearing feedback, or P2W use.State the blocked use and the neighboring pattern or project record required before a new attempt.

Minimum contest relation with possible redress: a contest relation exists only when the affected party or accountable review role can identify the disputed claim or source, affected use or harm, accountable review role, evidence or argument allowed in challenge, possible disposition change, outcome record, and reopen trigger. A feedback channel, complaint form, or appeal label without those recoverable values is not enough to change the disposition.

Affected-party contestable minimum: even when raw evidence stays review-role-mediated, the contesting party must be able to see enough of the claim, source class, disposition, affected use, accountable role, and allowed challenge evidence to challenge the result. Privacy, security, or privilege can narrow disclosure; they cannot erase the challengeable minimum while still claiming contest or redress.

False-negative reliance guard: a blocked, abstained, or evidence-needed use is not final if challenge evidence, missing affected-party evidence, changed source relation, changed source U.EpistemePublication, changed evidence carrier, changed representation, or redress can materially change the disposition. If refusal is based on missing evidence, name the missing evidence kind and decision point rather than closing the dispute by vagueness.

Sensitive evidence boundary: use scoped, hashed, redacted, or role-mediated evidence refs when raw carriers would expose personal data, secrets, tokens, privileged logs, tenant identifiers, incident details, security-sensitive traces, or unnecessary identities. A redacted path must still preserve enough recoverability for the relied-on claim, disposition, and contest relation.

Worked source-overread slices:

SliceA.10 usable classificationUnsupported lift
Software supply-chain attestation is cited near a release conversation.The attestation may evidence bounded origin, build method or production trace, verifier-rule, holder, and currentness claims.Runtime safety, release approval, gate passage, or assurance unless B.3, A.21, or another relation governing the asserted use is asserted for that use.
A verified provenance credential, watermark, or authenticity mark appears on a publication face.The mark may evidence where the carrier, signature, assertion, or manifest came from under the verifier regime.Truth of the represented world-state, safety, permission, or adequacy by provenance alone.
A confidence interval or calibration result is used for one reversible act.State the act, context, calibration condition, window, bounded evidence use, unsupported attempted use, and stop condition.Global readiness, trust, safety, release reliance, or engineering justification.
A generated explanation or summary says a result is reliable.Treat the rendering as source-finding or explanation until the operative claim has an A.10 evidence-provenance path or another source relation that carries or exposes the source basis for the operative claim.Evidence, approval, gate passage, work occurrence, or assurance by fluent wording.
Contest or redress is claimed after a source relation, source U.EpistemePublication, or evidence carrier is challenged.State the disputed claim, affected use, accountable review role, allowed challenge evidence, possible disposition change, outcome record, and reopen trigger.Claim truth, compliance proof, completed redress, or social-effect acceptance by appeal-channel presence.
A harmed party gives challenge evidence that could change the disposition, but the accountable party answers "evidence insufficient" without naming the missing evidence kind or decision point.Treat the refusal as RelianceDisposition=reopen or invalid RelianceDisposition=evidence-needed; name the missing evidence kind, decision point, accountable role, and possible disposition change.Closed refusal, completed redress, or RelianceDisposition=blocked-current-use by vague insufficiency.

Causal evidence relation values in evidence-provenance paths

Evidence graph paths used for causal-use claims must carry the C.28-governed CausalEvidenceSupportBasis value without redefining causal estimands or causal-use authority. In this subsection, SupportBasis is a C.28 field-value name; it is not the loose FPF prose word "support".

The C.28 values that A.10 may carry in an evidence-provenance path are:

observationalAssociationSupportBasis
interventionalActionSupportBasis
realizedCounterfactualSampleSupportBasis
identifiedCounterfactualEstimateSupportBasis
simulationOnlyCounterfactualOutputBasis

[A.10](/generated/patterns/A.10) consumes this value set from [C.28](/generated/patterns/C.28); it does not add causalAssumptionOnlySupport or noCausalEvidenceSupport as causal-evidence values. Assumption-only and no-evidence-use cases are represented by causal assumptions, a [C.28](/generated/patterns/C.28) causal-use verdict, bounded use, unsupported attempted use, or abstain in [C.28](/generated/patterns/C.28)/[B.3](/generated/patterns/B.3), not by a second causal-evidence vocabulary.

No unsupported causal-use shift:

observational-association evidence -> interventional-action claim requires CausalIdentificationProfile.
interventional-action evidence -> counterfactual-comparison claim requires CausalIdentificationProfile for
  identifiedCounterfactualEstimateSupportBasis, CounterfactualSamplingRealizabilityProfile for
  realizedCounterfactualSampleSupportBasis, or bounded-use treatment.
Simulation-only counterfactual output may be used only for the bounded claim stated for that simulator output when model assumptions, validation, bounded use, and unsupported attempted use are declared. It does not become interventional evidence or realized counterfactual sample evidence by vocabulary, validation, or evidence-role relabeling alone.

Evidence-provenance path micro-examples:

CausalEvidenceSupportBasisEPV-style evidence cue
observationalAssociationSupportBasisobserved cohort table -> PathSlice to measurement work -> association-use statement; unsupported use = intervention-effect wording.
interventionalActionSupportBasisrandomized or governed action assignment record -> work trace -> declared bounded intervention-effect use inside assignment, follow-up, and outcome window.
realizedCounterfactualSampleSupportBasiscounterfactual-comparison sampling work plan -> run trace -> evidence carrier -> samples from declared target counterfactual distribution under physical, ethical, and operational constraints.
identifiedCounterfactualEstimateSupportBasiscausal assumptions, graph proof, calculus proof, available-data regime set, and bound refs -> CausalIdentificationProfile -> estimated or bounded counterfactual use with bounded use and unsupported attempted use.
simulationOnlyCounterfactualOutputBasissimulator output -> counterfactual model assumptions -> simulation validation ref -> bounded simulator-output use; validation remains validation and does not convert the path into direct sample evidence or intervention-effect evidence.

What changes in practice: an A.10 path may cite a C.28 causal-support result and its sources, but C.28 still owns the causal-use question, estimand, identification, realizability, and verdict. The path does not create a causal evidence relation by carrying the reference.

What this does not authorize: A.10 does not identify causal effects, create an estimand, certify target-trial emulation, or decide counterfactual sampling realizability. It makes the C.28 result episteme, cited sources, provenance, currentness, bounded reliance, and later-use relation recoverable.

Archetypal Grounding

Runtime acceptance from a measurement result. C.16 dated measurement work obtains a pressure measurement result with uncertainty under a named model and calibration; a distinct C.2.1 episteme states it. If inception of that episteme through work is current, A.15.PROD governs the exact production relation. Separate evaluation work applies the declared G.4 pressure clause through A.6.1 bindings and obtains unknown; another C.2.1 episteme states that verdict. A.10 records the source publications, calibration and measurement work, result episteme, evaluation work, clause declaration, exact bindings, provenance, currentness, and rival explanation. Later C.11 decision work uses the verdict episteme as a premise and defers. No ledger edge establishes measurement, verdict, decision, or use.

Meta-analysis. Source study publications, datasets, analysis code, inclusion work, statistical method, and synthesis work are recovered by their direct relations. The pooled estimate and uncertainty remain with their statistical governor; its C.2.1 episteme is the relied-on claim. A.10 records source identity, transformations, coverage, provenance, currentness, and the bounded clinical or policy use, not a generic validatedBy relation.

Credential display. The current pre-existing case repair remains decisive: a credential view can support credential-currentness only under its issuer/trust root, holder binding, verifier, status source, revocation and window. Permission, commitment, role assignment, status assertion, entry predicate, and gate passage remain with A.2.8.PER, A.2.8, A.2.9, A.2.1, A.6.B, and A.21 as applicable. Display presence creates none of them.

Bias-Annotation

A.10 corrects carrier-authority bias and graph-authority bias. A polished badge, attestation, dashboard, generated explanation, or provenance mark can make an unsupported claim look settled; a tidy graph can make an ungrounded edge look like an obtaining relation. The repair is to recover the exact claim, source, carrier, work, local result and owner, result episteme, direct relations, currentness, bounded use, rival explanation, and disposition. More impressive paperwork is not a substitute.

Conformance Checklist

  1. Claim: the exact relied-on C.2.1 episteme and proposition/local result are named.
  2. Direct owner: every measurement, formal, causal, diagnostic, conformance, comparison, selection, acceptance, gate, permission, commitment, role, or decision result points to its own governor.
  3. Carrier/source: source episteme/publication, carrier, edition, publication/copy/transform chain, and direct provenance or citation relations are recoverable.
  4. Work: each producing, interpreting, transforming, evaluating, or relying occurrence is dated U.Work with role assignment, method, actual direct/A.6.1 bindings, and resources.
  5. MethodDescription boundary: the description contains only generic method claims; it supplies no actual participants, occurrence, use, proof/test event, or result.
  6. Result boundary: domain result, result episteme, carrier, provenance entry, outcome, and later action remain distinct.
  7. Graph boundary: every asserted edge names an independently governed direct relation; no edge establishes work, participation, production, result, currentness, reliance, or representation by graph membership.
  8. Time/currentness: edition, window, supersession, revocation, source order, and G.11 result are explicit when they affect use.
  9. Reliance: bounded use, unsupported attempted use, local RelianceDisposition, rival explanation, and reopen trigger are present; B.3 opens only at its own threshold.
  10. Contest/privacy: the affected party can challenge the claim and disposition, while sensitive carrier access is minimized without erasing recoverability.

Common Anti-Patterns and How to Avoid Them

  • Carrier as truth. Recover the claim and direct source relation; authenticity or availability is not truth.
  • MethodDescription as intent or trace. Recover generic method claims separately from the dated work and actual bindings.
  • Generic result field. Name the domain result, direct governor, and distinct C.2.1 episteme.
  • Edge as fact. Establish the direct relation first; then let the graph represent or cite it.
  • Provenance as assurance or permission. Enter B.3, A.2.8.PER, A.21, or another exact governor only when that claim is live.
  • Citation as actual use. Ground the later work and exact premise/reference/argument relation.
  • Full dossier by default. Collect only fields that decide the bounded use, consequence, contestability, and reopen condition.

Consequences

Benefits. Reliance becomes replayable without turning A.10 into an authority over the results it cites. The same path can expose stale sources, hidden transformations, ungrounded work, incompatible currentness, or an unsupported lift from provenance to action.

Trade-offs. Direct-owner recovery takes more effort than a single evidence edge. The gain is that later users can challenge exactly the claim, work fact, source relation, currentness result, or reliance boundary that failed.

Failure containment. Missing source, work, direct binding, result owner, currentness, or use relation blocks or narrows only the affected reliance use. It does not authorize a universal evidence or result relation.

Rationale

Evidence use is a relation-specific claim about why one later use may rely on one episteme. Provenance records make the source history recoverable; they do not create the source facts, local result, truth, work, or use. Keeping the descriptive graph outward-facing preserves direct ownership while still making complex source chains inspectable.

SoTA-Echoing

Source qualification was checked against the publishers' current surfaces on 2026-07-30. It remains qualified through 2027-07-30 unless a latest specification, Recommendation, tagged framework release, status mechanism, or adopted documentation baseline changes earlier. Each source changes only the bounded A.10 locus named below; lineage and popular comparators not listed here are non-governing.

Exact source and source-use decisionVisible A.10 mutationRejected overreadSmallest source-change replay
W3C PROV-O, Recommendation 30 April 2013adapt qualified provenance descriptions and stable source/activity/agent references to A.10's exact FPF objects and direct relations.§4.4 requires each path edge to cite an independently governed relation; checklist items 3 and 7 require source/copy/transform identity and reject graph membership as fact creation.A PROV-shaped graph, wasGeneratedBy label, or qualified relation does not establish FPF work, participation, result, truth, currentness, or later use.Reopen only §4.4's edge rule, the affected path in one worked case, and checklist items 3 and 7 if PROV-O's qualified-relation contract changes.
W3C Verifiable Credentials Data Model v2.0, Recommendation 15 May 2025adapt issuer, subject/holder, verifier, validity/status, proof, and relying-context separation.§4.6b's credential/status row, the credential-display case, and checklist items 8–9 require the exact verifier rule, status source, window/currentness, bounded use, and local disposition.A conforming or cryptographically verifiable credential does not by itself create transitive trust, permission, role assignment, gate passage, assurance, or truth of every represented claim.Reopen only the credential/status classifier row, the credential-display case, and checklist items 8–9 when the VC data model or its adopted status contract changes.
SLSA specification v1.2 together with in-toto Attestation Framework v1.2, Statement/v1adapt artifact subject, predicate type, producing context, inputs, authenticated envelope, verifier expectation, and versioned attestation separation.The §4.6b supply-chain row and software-attestation slice require a bounded build/source claim, producing work or system, verifier rule, source inputs, holder, window, and unsupported attempted use; checklist items 3 and 9 retain provenance and reliance separately.A signed attestation, SLSA level, or verification summary is not runtime safety, release approval, gate passage, assurance, or proof that an uncited work/result relation obtains.Reopen only that classifier row, the software-attestation slice, and checklist items 3 and 9 when SLSA's adopted provenance/verification contract or in-toto Statement/v1 semantics change.
C2PA Content Credentials Technical Specification 2.4, April 2026adapt asset/manifest identity, claim generator, assertions, ingredients/actions, signature validation, trust policy, and specification version for claim-bound content attribution.§4.6b's provenance/authenticity row, generated-content boundary, credential-display case, and checklist items 3 and 8 require the exact carrier, manifest/assertion, transformation, verifier/trust regime, edition, and currentness window.A valid manifest, repository receipt, authenticity mark, or visible Content Credential does not establish truth of the represented world state, authorship beyond its exact assertion, permission, safety, or adequacy.Reopen only the content-provenance classifier row, the credential-display case, and checklist items 3 and 8 when C2PA changes manifest/assertion identity, validation, trust, or versioning rules.
Mitchell et al., Model Cards for Model Reporting, FAT* 2019, and Gebru et al., Datasheets for Datasets, CACM 64(12), 2021adapt intended use, evaluation conditions, performance/limitation, motivation, composition, collection, and maintenance disclosures as source-finding inputs.§4.6b's generated-explanation/documentation row and checklist items 1, 3, and 6 require every relied-on operative claim to return to its exact source, work, local result, carrier, and bounded use rather than relying on the document's presence.A model card, datasheet, polished summary, or disclosed limitation is not evidence for an unstated claim, performed evaluation, assurance, approval, or deployment permission.Reopen only the documentation classifier row, the one model/data-document path that uses it, and checklist items 1, 3, and 6 when the adopted disclosure fields or their claim boundary change.

The current source decisions deliberately do not import a credential, attestation, documentation, or provenance ontology as A.10 authority. Source refresh replays the named rule, case, and checklist rows first and widens only if that local replay exposes a direct contradiction.

Relations

  • Builds on: C.2.1 for claim/result epistemes; E.17 for publication and carriers; A.15.1 and A.6.1 for work, roles, declarations, and actual bindings; A.15.PROD when episteme inception is live.
  • Coordinates with: A.2.4 for first-use evidence/status classification; G.11 for currentness; C.29 for representation; B.3 for assurance; C.16 for measurement; C.28 for causal use; A.19 for comparison/selection; G.4 for acceptance declarations and applications; C.11 and A.21 for decision/gate results.
  • Constrains: provenance and reliance descriptions only. A.10 does not create another pattern's result, occurrence, participation, representation, currentness, assurance, permission, commitment, gate, or decision.

Older source text interpretation and neighboring-pattern notes

Treat legacy names such as manifest, creator, observer, symbol register, SCR, RSCR, MIC, verifiedBy, validatedBy, or evidence path as recovery prompts, not current relation names.

  • A manifest or source register is a carrier/publication or provenance description; recover the exact source, edition, claim, and direct relations it represents.
  • A creator, observer, producer, verifier, or maintainer participates only through dated work, U.RoleAssignment, and exact direct/A.6.1 bindings.
  • A method-instantiation note is not work. Recover the exact U.Method, generic MethodDescription claims, dated occurrence, enactment, ordering, participants, and result separately.
  • A work result, measurement result, validation result, or verification result label routes to the exact domain result and C.2.1 episteme; the legacy field name establishes neither.
  • Resource rosters remain separate from carriers and provenance records.

When older text also claims approval, permission, gate passage, assurance, causality, comparability, representation, publication effect, or decision, apply the neighboring direct governor and let A.10 retain only source recovery, provenance, bounded reliance, and contestability.

Evidence carriers for quantum-like statements

Use A.10 when a quantum-like statement is being relied on. Name the minimal claim, source episteme/publication, carrier, producing or interpreting dated work, method, actual bindings, time/currentness, rival explanation, bounded use, unsupported attempted use, and RelianceDisposition. Route ordinary measurement to C.16, probe/frame effects to the relevant C.26 pattern, Bridge loss to F.9, representation to C.29, and material assurance to B.3.

The quantum-like label has no evidence weight. A descriptive graph may represent the exact source and use relations only after their direct governors establish them.

C.29 mathematical-lens use relation

When a mathematical lens is used in the evidence account, C.29 governs the representation correspondence and lens-use admissibility claim. A.10 may cite that C.29 episteme and record its provenance, currentness, bounded reliance, and later use; an A.10 graph edge does not establish the correspondence. Measurement construction stays with C.16 and assurance with B.3.

A.10:End


Last Updated: 2026-08-04 — upstream FPF commit 7ba40a95 (github.com/ailev/FPF)