REMIT — v1 Data Model

Who decided, under what authority, when. Stamped on every committing act — this is universal rule 2 (DEC-15, NF2).

The source and trust of a datum or entity (DEC-19). Trivial defaults in v1.

Hash-link back to the version this one supersedes (universal rule 1).

A single grid location.

A single H3 hex location — the hex-grid successor to Waypoint (ADR-0014). Identified by its H3 index, with an optional lat/lng centre for rendering.

A commitment's ownership and waiver authority (B3).

The command's narrative intent, owned as a versioned immutable object (DEC-5/18). Amend it and you get a new version with lineage — the original stands. Content-addressed: its id is the hash of its canonical form.

One thing the plan must achieve (DEC-16/17/22). Either hard (must hold) or soft with a priority. Carries the negotiated contract text and any unresolved ambiguities, and walks a lifecycle of states.

The negotiation record behind a commitment — answers, the canonical contract text, open ambiguities (DEC-17).

The verb of a commitment — visit, loiter, avoid, transit, maintain (DEC-16/21). `where` is a Waypoint or a boolean predicate over map cells (DEC-33); `when` is a window, before/after, or recurring. Always inlined in its Commitment (no independent identity).

A boolean tree over map cells (DEC-33): an atom, or and/or/not of sub-predicates. Atoms are a pluggable registry (land-cover, elevation, slope, static-LOS, near(feature, dist)). Conceptual — the skeleton uses Waypoints only.

When an activity must happen — exactly one form is used (DEC-16).

The world as known truth (DEC-7/20/28): a medium (land/sea/air grid) carrying channels and per-cell attributes, plus a single fact layer that observations append to. Immutable and versioned; the kernel always evaluates baseline ⊕ excursion ⊕ plan-effects-to-date (DEC-19).

A forecast time at which a channel is expected to shift (e.g. a tidal ford opening) (DEC-21).

The domain, grid and cell-attribute schema of a baseline (DEC-20/28).

One grid cell's attributes (skeleton mobility raster).

A field over space and time — tide, cloud, risk, mobility (DEC-19/21). Its values are conceptually `f(cell, t)`, however realised; that function is resolved across the seam (DEC-49) and is *not* a data slot here. For parametric/periodic channels the realising parameters (`params`) *are* data and are modelled.

Parameters of a parametric/periodic channel — e.g. the skeleton's tidal ford (ADR-0006).

The single truth layer; observations append here (E5). Collapses excursions and forecast entities over time.

Per-domain cost of travel, and anisotropic — a property of the edge between cells, not the cell (DEC-49/34): slope-along-direction on land, current/wind vectors at sea and in air. Its cost function `cost_speed = f(cell→cell, t, profile)` is behaviour, resolved across the seam — only `domain` and `realisation` are data here. Not yet implemented in the v1 skeleton.

A named, versioned set of deltas layered on a baseline — "what if the weather turns?" — without disturbing the underlying truth (DEC-7). Not yet implemented in the v1 skeleton.

How the world is edited (DEC-34): a parametric delta (time-shift, scale, mask) from a pluggable registry, or a raw cell patch (the escape hatch). Not yet implemented in the v1 skeleton.

A delta a plan's activity applies from a point in time (DEC-19/34) — a ChannelDelta or a self-state delta. Referenced from Activity.effects; always empty in the v1 skeleton.

Everything provisioned for an Area of Operations, packaged ready to plan against (DEC-11/12/52). Not yet assembled as one object in the v1 skeleton.

What a platform can do — the fixed capabilities a sensitivity sweep varies (DEC-19/20, F5). Immutable and versioned, content-addressed.

Speed per medium (skeleton: land only).

The platform right now — the live condition the kernel re-anchors to during execution (DEC-19). It is the privileged self-entity (DEC-52): its fields are the dynamic aspects of the `self` Entity (position → map/distance; endurance/availability → state curves).

Anything located with an identity — yourself, an actor, a feature, a phenomenon (DEC-52). Where a Channel is a field, an Entity is a thing, projected across synchronised views. To affect the plan it is *cast* to a Channel or Commitment (actor → moving risk channel; window → timing commitment); in v1 entities are display-only. Skeleton note: aspects are keyed by name in an object (phase/fuel/height/pass); modelled here as a list of named Aspects.

One facet of an entity, over time (DEC-52/53) — its position, an altitude, a timing window, an up/down status — rendered onto a shared axis by a view. Its value `f(t)` is behaviour, evaluated across the seam, and is not a data slot; the render-type, unit and bounds *are* data.

Every input that determines a plan, bundled into one identity (DEC-23/24/29): which requirement, which world, which config core, what appetites and steering, which kernel and seed. A plan's id IS the hash of its Stamp, so two plans are comparable only when their stamps share a basis (the comparability guard). Skeleton additions (DEC-47): `profile_version` and `start` are part of identity because the plan depends on the platform and the starting state.

The starting position (H3 hex) and clock baked into a Stamp (skeleton, DEC-47; hex per ADR-0016).

One risk-appetite dial setting (DEC-6) — e.g. tempo = rapid, exposure = cautious. Keyed by axis, so a Stamp's appetites serialise as an axis→setting map.

One interpreted operator steering gesture (DEC-24) — e.g. a no-go region.

One candidate strategy in the plan handful (skeleton).

A candidate solution whose id IS the hash of its Stamp (DEC-5/22/29). Its materialisation (schedule, trajectory, state curves) is cached and regenerable; its scores and first-class conflicts make it comparable. The skeleton also carries the chosen `strategy` and the `tide_decision` weighing.

The cached, regenerable working-out of a plan; absent when the plan is infeasible.

One leg of a plan's schedule. Exfil legs may carry a tide hold (ADR-0006).

One sampled point on the platform's path (H3 hex per ADR-0016); time/fuel rounded to 1 dp for IEEE stability.

The end-state of the platform's curves over the plan (v1 carries fuel only).

A plan's comparable scores, read under the comparability guard (A2/C2/C6, NF10).

One commitment's verdict and slack within a plan.

The result of the tidal-ford wait-vs-detour weighing (ADR-0006): the kernel materialises the exfil both ways — wait at the bank vs a ford-free detour — and commits to the earlier RV arrival, publishing the choice here.

A first-class, named clash when commitments cannot all be kept (C1) — not a silent failure.

The record of a choice (DEC-23): which plan won, which it beat, on which axis, with the after-mitigation bands, and who decided. Content-addressed.

The append-only live history of a mission (DEC-23/25/26): alerts when a band is crossed, observations that update truth, waivers, and replans — never overwritten. Together with rationales and stamps it gives a complete after-action record with perfect replay (F1).

Base of the append-only execution log; the store stamps each with a `seq`.

A band crossing or hard-infeasibility raised during execution (E3).

A fact delta appended to the baseline's fact layer (E5).

A relaxed commitment, attributed (B3). Not yet logged in the v1 skeleton.

A move from one committed plan to another, with rationale (DEC-36). Not yet logged in the v1 skeleton.

A stamped cross-role write to the shared store (DEC-61): a role's contribution is an attributed delta — the same write path that serialises over `/sync` later (DEC-25), so going multi-node is transport, not re-architecture. Base of the concrete delta kinds; v1 emits SteeringDelta. Write-scope *enforcement* is designed-for — the delta is attributed (NF2) but not yet scope-checked.

The first DEC-61 write built in v1: an operator's *applied intel* — denied (no-go) cells — shared to the store as steering constraints, where every surface (e.g. the Data Analysis monitor, including a popped-out one) sees it land. Risk appetites, by contrast, stay local (a ranking lens). Identity is content (DEC-35): the store keys it by the hash of its canonical form.

An in-flight operator perturbation during Execute (issue #7): an obstruction (a +N min hold at the vehicle's current cell) or a blocked cell forcing a re-route. Previously these survived only as a prose Observation note; capturing them as a typed, content-addressed store object preserves their structured inputs for inspection (the Data Analysis monitor) and replay (NF3), and re-uses the DEC-61 attributed-delta write path. Identity is content (DEC-35).