Skip to content

Owner-session integration and traceability

Temporary planning document. This page is the traceability hub for Chris's owner session of 4 and 5 October 2026. It reconciles the decision counts, lists every final decision with its source, records the wording the session superseded, and maps every decision and amendment to its specification, contract, acceptance criteria, release, gate and tracker row. It changes no decision. The decision register §1.15 holds the same statuses, and the owner ledger stays the authoritative owner record.

Related documents. Specification overview and the nine specifications; rollout plan; implementation tracker; product-owner guide; design-prototype handoff; G0 dossier; acceptance criteria §9.6 to §9.8; open questions; the archived bundle (owner-session-2026-10-05/README.md).

1. Status and authority

The consolidation wins. The consolidation of 5 October 2026 is the current text of the owner session. It supersedes older conflicting recommendations, including earlier rows of this package. A later explicit owner decision beats an earlier one. The other archived outputs keep the evidence, chronology, examples and changes of mind; their old question wording, historical counts and assistant proposals are not owner approval.

The archive. The archive folder keeps the bundle byte for byte, with SHA-256 checksums: the consolidation, the 74-entry session register, the condensed owner packages, the stage filter and step clarification, the superseded Q-15 explanation, the design handoff addendum, the coordinator's handover, receipt, requests, manifest and verifier, and the repository open-questions file the session started from.

The implementation hold. Chris placed feature implementation on hold on 5 October 2026. Nothing in this package authorises implementation, migrations, production activation, notification delivery, closing unrelated or dormant PRs, messaging the design session or building a new prototype.

Three states stay distinct.

State What it means Status on 5 October 2026
Planning approval An owner decision on product direction, recorded in the session, the register or the ledger Given for the decisions marked Decided, Decided-amended, Replaced, Removed or Deferred below
Brief approval and implementation authorisation Chris approves a brief, or a named part, for a gate; implementation is authorised only when T-HOLD is lifted, T-G0 is approved and the gate has passed (D1-04) None. Every brief row is at most Brief drafted, and implementation authorisation is On hold on every tracker row
Work started, gate passed, production enabled A claimed slice with a PR; a passed gate; a production enablement Chris approved None. No work has started under these decisions, no gate has passed and nothing is enabled in production

G0 is not approved. G0 approval (T-G0) and lifting the hold (T-HOLD) are separate owner decisions. Passing G0 while the hold stands authorises nothing.

Not newly approved. Permanent physical erasure (T-POL-01); a separate identity-erasure process (T-POL-02); automatic acceptance of several agreeing candidates (T-POL-03; Q-11's bulk acceptance needs an explicit reconciler confirmation); and every proposed numeric threshold, including D2-10's pause and operation limits, D4-21's F1 ≥ 0.99 and 80,000 citations in one hour, Unsure thresholds beyond the stated example and capacity-cap defaults. Exact PRISMA box mapping, statistical methods and scientific event definitions need specialist input (T-SI-01 to T-SI-05).

Ambiguities. The specifications state each material ambiguity once, with options and a recommendation, in their §12. This page invents no owner answer; §7 lists the inputs that remain.

Status vocabulary. Decisions: Decided, Decided-amended, Replaced, Removed, Deferred (beyond MVP), Brief item, Specialist input, Engineering contract (no owner question), Open owner decision. Work: Planning approved, Brief drafted, Brief approved, Implementation authorised, In progress, Merged dark, Gate passed, Production enabled.

2. Count reconciliation

Every count on this page states its scope. "89" is the repository universe of owner decisions open before the session. "74" is the session register, which sits inside the 89. The amendments OS-A01 to OS-A30 sit outside both counts.

2.1 The 89 owner decisions open before the session

Batch Open before the session IDs
B 13 Q-20, Q-27, Q-34, Q-15, Q-24, Q-26, Q-28, Q-12, Q-01, Q-02, Q-30, Q-33, Q-37
C 15 Q-29, Q-35, Q-36, Q-04, Q-11, Q-32, Q-05, Q-06b, Q-17, Q-18, Q-19, Q-16, Q-22, Q-23, Q-21
D2 16 D2-01 to D2-16
D3 25 D3-01 to D3-25
D4 20 D4-01 to D4-21 except D4-18, which Chris answered at G0 on 3 October 2026
Total 89 Batch D contributes 61 (16 + 25 + 20)

Batch A, Batch D1 and the G0 inputs (Q-03, D1-06's names, D1-03's date, D4-18) were answered before the session (decision register §1.12 to §1.14) and are not in the 89.

2.2 The 74 entries of the session register

The session register holds 74 of the 89, grouped 3 + 13 + 15 + 23 + 20.

Register batch Entries IDs
Batch 0: publication and recovery 3 D2-10, D2-11, D2-13
Batch B 13 Q-20, Q-27, Q-34, Q-15, Q-24, Q-26, Q-28, Q-12, Q-01, Q-02, Q-30, Q-33, Q-37
Batch C 15 Q-29, Q-35, Q-36, Q-04, Q-11, Q-32, Q-05, Q-06b, Q-17, Q-18, Q-19, Q-16, Q-22, Q-23, Q-21
Batch D3 23 D3-01 to D3-25 except D3-14 and D3-15
Batch D4 20 D4-01 to D4-21 except D4-18
Total 74

After the session the register splits as follows.

Outcome Count IDs
Resolved, replaced, removed or deferred 52 D2-11; all 13 of Batch B (Q-15 replaced by the stage filter and step model); Q-29, Q-35 (removed as inapplicable), Q-36, Q-04, Q-11, Q-32, Q-05, Q-06b, Q-18, Q-19, Q-22, Q-21; D3-03, D3-04, D3-05, D3-06, D3-07, D3-08, D3-12, D3-22, D3-24, D3-25; D4-01, D4-02, D4-03, D4-04, D4-05, D4-07, D4-09, D4-10, D4-11, D4-13, D4-14, D4-15 (deferred beyond MVP), D4-16, D4-17, D4-19, D4-20
Alignment, brief and validation entries (not owner questionnaires) 22 Carry-forward alignments Q-23, D4-08, D3-17, D3-18; brief and specialist entries D4-06, D2-10, D2-13, Q-17, Q-16, D4-12, D4-21, D3-01, D3-02, D3-09, D3-10, D3-11, D3-13, D3-16, D3-19, D3-20, D3-21, D3-23. Treatments: consolidation §7
Total 74 52 + 22

Of the 22, five are specialist inputs (Q-17, Q-16, D4-12, D4-06, D4-21) and seventeen are brief items, four of them carry-forward alignments.

2.3 The 15 open decisions outside the session register

Group Count IDs and outcome Why they were outside the register
Decided or replaced by the owner session 11 D2-01 amended (publication may create attributable generated session versions; reverses the round-2 "publication writes no evidence" proposal); D2-02 amended (compatibility belongs to immutable question versions; SyRF suggests a default, the authorised publisher declares it; corrections use guided rollback and republication, see Q-34); D2-05 amended in part (the standard reviewer target is part of the immutable form version; every other setting is classified in the brief); D2-07 decided (form-owned inactivity timeout and per-reviewer in-progress limit; one shared place across tabs and routes; expiry keeps the draft); D2-08 decided (one shared session and place across tabs and devices; connections tracked separately; base-version checks; take-over presentation a brief detail); D2-12 replaced (one consolidated current Study with immutable history and reversible unmerge; the alias proposal is replaced); D2-14 amended (ordinary account deletion disables access and keeps named attribution; identity erasure not decided); D2-15 amended (one application-wide CAMARADES catalogue; versioned copies with provenance; publication requests); D2-16 replaced (no size-based exclusion; the largest project is an acceptance case); D3-14 decided (add missing staging seeds; prefer preserving staging data; justified staging changes allowed; never production); D3-15 decided (Firefox, WebKit and touch coverage) They were not entries of the session register. The session decided them in the register's "Decisions already fixed for this review" (D2-01, D2-02, D2-08, D2-12, D2-14, D2-15, D2-16, D3-14, D3-15), through Q-28 (D2-07) and through the target amendment (D2-05); the condensed file's "Settled foundations" summarises several of them. The register's Batch 0 ("Finish the current batch") carried only the D2 entries still open, D2-10, D2-11 and D2-13
Engineering contracts with no owner question 3 D2-03, D2-04, D2-06. Their recommendations stand as PROPOSALs consistent with the owner model and are settled in the review-domain brief (T-RD-00; RD-R30 to RD-R32) They settle engineering contracts and pose no product choice, so the session did not put them to Chris
Still an owner decision 1 D2-09 (accepted answers to a question shared by two forms). Recommendation unchanged: the second form's reconciler may revise with a new snapshot (T-OI-01) The session did not take it up; it stays open
Total 15 11 + 3 + 1

2.4 The result across the 89

Batch Open before the session Resolved, replaced, removed or deferred Alignment, brief or validation entries Open owner decision
B 13 13 0 0
C 15 12 3 (Q-23, Q-16, Q-17) 0
D2 16 10 5 (D2-10, D2-13; engineering contracts D2-03, D2-04, D2-06) 1 (D2-09)
D3 25 12 13 (D3-01, D3-02, D3-09, D3-10, D3-11, D3-13, D3-16, D3-17, D3-18, D3-19, D3-20, D3-21, D3-23) 0
D4 20 16 4 (D4-06, D4-08, D4-12, D4-21) 0
Total 89 63 (52 + 11) 25 (22 + 3) 1

63 + 25 + 1 = 89. By status word, the 63 are 34 Decided, 24 Decided-amended, 3 Replaced (Q-15, D2-12, D2-16), 1 Removed (Q-35) and 1 Deferred beyond MVP (D4-15). The 25 are 17 Brief items, 5 Specialist inputs and 3 Engineering contracts. These figures were counted from the decision register §1.15 tables and agree with acceptance criteria §9.6 and implementation tracker §5.1 row by row.

2.5 What sits outside the 89

Item Where it is tracked
G0-D1: confirm the recorded reading of D4-18 ("independent of funders") G0 dossier §2; T-G0
G0-D4 to G0-D10: PR dispositions. No closure is authorised while the hold lasts G0 dossier §2; T-G0
G0 approval itself T-G0
Lifting the implementation hold T-HOLD
Policies not approved: permanent physical erasure, an identity-erasure process, automatic acceptance of several agreeing candidates T-POL-01, T-POL-02, T-POL-03
Every proposed numeric threshold The tracker row that measures it; none has its own row
The session's additional agreed requirements, amendments OS-A01 to OS-A30 (§3.4) Tracker §5.2
The design-prototype handoff (OS-A30, §8) T-DH-00 to T-DH-04

G0-D2, G0-D3 and G0-D11 are answered by D3-14, D3-15 and D3-08, as the G0 dossier records.

2.6 The status page's historical totals

The programme status page lists 91 decision items: these 89 plus Q-03 and D4-18, which Chris answered on the page as G0 inputs on 3 October 2026. The page's recorded answers are kept as they are. The owner-session statuses are added beside them; no answer is reset and no frozen record is rewritten. A total must never say "22 decisions remain" or "89 remain" without this scope.

3. Final decisions by package

One line per entry, with its status and its source in the archive. Source abbreviations: CONS consolidation; REG session register; CDN condensed packages; SFS stage filters and steps; ADD design handoff addendum; ORIG repository open questions as given to the session. "REG Q-20" is the register entry headed Q-20, and "CDN R1" is package R1. Quoted names are section titles; a dash in a title is written here as a colon. The decision text follows the decision register §1.15.

3.1 The 52 resolved session-register entries, by package

Package ID Final decision Status Source
Foundations (Batch 0 and Batch B) D2-11 Many drafts; one publication operation per form; the next publication rechecks the resulting state; collaborative drafts (OS-A01) Decided REG Batch 0, D2-11; CONS §1
Foundations (Batch 0 and Batch B) Q-20 Admin impact preview before publication; alerts to affected reviewers with drafts kept; in-form warnings for a reviewer's own edits; one deduplicated notice per recipient and cause Decided REG Q-20; CONS §1
Foundations (Batch 0 and Batch B) Q-27 Readiness from current evidence; warn the actor before commit; inform affected authors; dependent work never rewritten automatically Decided REG Q-27; CONS §1
Foundations (Batch 0 and Batch B) Q-34 The publisher explicitly declares compatibility and mapping; mapping writes attributable revisions Decided-amended REG Q-34; CONS §1
Foundations (Batch 0 and Batch B) Q-15 The stage study filter defines the pool; no incoming stage gate; dependencies are between steps; exclusion-stop is a separate step setting Replaced REG Q-15; SFS §1 to §3, "Question fifteen"; CONS §3
Foundations (Batch 0 and Batch B) Q-24 Independent annotation stays independent; legacy stages map through the opt-in wizard; new combined steps stop extra screening at sufficiency (Allow available); Apply anyway releases temporary reservations only Decided REG Q-24; CONS §3
Foundations (Batch 0 and Batch B) Q-26 Immutable profile versions; mismatches with existing decisions and outcomes detected and treated before publication Decided REG Q-26; CONS §1
Foundations (Batch 0 and Batch B) Q-28 Form-owned blinding (profile-owned for screening reconciliation); reconciled hints as a form baseline with a step hide-only override; saved work completes after exclusion by default; form-owned timeout and in-progress limit; one shared place Decided (hint part Decided-amended) REG Q-28 with its hint amendment; CONS §4
Foundations (Batch 0 and Batch B) Q-12 Step selector with one form area in the existing annotation workspace Decided REG Q-12; CONS §6
Foundations (Batch 0 and Batch B) Q-01 Progress after own Include while the collective result is pending; a stage setting can require collective Include; exclusion-stop still applies Decided REG Q-01; CONS §3
Foundations (Batch 0 and Batch B) Q-02 Automatic completion follows remaining work; static completion stays until explicit reopening; impact shown before admin changes; merges never change stage status directly Decided REG Q-02; CONS §3
Foundations (Batch 0 and Batch B) Q-30 Hints on by default; blinding on by default with context-local aliases and no cross-Study continuity; unstarted-assignment expiry optional Decided REG Q-30; CONS §4
Foundations (Batch 0 and Batch B) Q-33 A withdrawn search keeps its references and appends an event; current reports exclude it and explain; frozen reports unchanged Decided REG Q-33
Foundations (Batch 0 and Batch B) Q-37 External-step ledger and deduplication QC adopted; the alias merge rule replaced by the consolidated Study (D2-12); parity numbers stay with D4-21 Decided-amended REG Q-37; CONS §2
R1 Single-reviewer evidence and verification Q-29 Target-one: automatic SingleAnnotator accepted result or required human reconciliation, configured on the form version; a task exists for every form Decided-amended CDN R1, "R1 final owner clarification"; REG Q-29; CONS §4
R1 Single-reviewer evidence and verification D4-03 Second-person checking is one-candidate human reconciliation; no Verified engine (OS-A28) Decided-amended CDN R1, "R1 final owner clarification"; REG D4-03; CONS §4
R2 Reconciliation powers and shortcuts Q-36 No ordinary self-reconciliation by default; explicit override grants; current authority for new admissions Decided CDN R2; REG Q-36
R2 Reconciliation powers and shortcuts Q-11 Optional per-form bulk acceptance, off by default, with explicit reconciler confirmation Decided CDN R2; REG Q-11; CONS §4
R2 Reconciliation powers and shortcuts Q-32 A profile may require an adjudication rationale; off by default Decided CDN R2; REG Q-32
R3 Accepted-answer completeness Q-04 Completeness follows requiredness with a form override; blank is Not assessed; Unknown and Not reported are answers Decided CDN R3; REG Q-04; CONS §4
R3 Accepted-answer completeness Q-35 Legacy reconciliation backfill removed; every conversion dry run checks the no-records premise Removed CDN R3; REG Q-35; CONS §4
R4 Baseline conversion for all projects Q-05 Outcome data converts inside the faithful baseline; untouched defaults stay ValueOrDefaultUnknown Decided-amended CDN R4, "R4 owner direction"; REG Q-05; CONS §5
R4 Baseline conversion for all projects Q-21 Legacy screening maps to a reviewed legacy-compatible profile; an admin confirms its meaning Decided-amended CDN R4, "R4 owner direction"; REG Q-21; CONS §5
R4 Baseline conversion for all projects D4-16 Early limited adoption only for complete, validated scopes; universal waves follow Decided-amended CDN R4, "R4 owner direction"; REG D4-16; CONS §5
S1 Unsure D4-01 Per-profile Unsure, on in the title/abstract template; not excluded for availability; bounded handling (OS-A16) Decided CDN S1, "S1 amendment"; REG D4-01; CONS §4
S2 Discussion after a screening conflict D4-02 Optional discussion after a revealed conflict; initial observations kept; fallback when unresolved Decided CDN S2; REG D4-02; CONS §4
S3 Exclusion-reason template Q-22 A primary reason is template and reporting guidance; distinct excluded Studies counted apart from overlapping reasons (OS-A17) Decided-amended CDN S3, "S3 clarification"; REG Q-22; CONS §4
S3 Exclusion-reason template D4-13 First failing criterion as the template default; per-profile reviewer choice Decided-amended CDN S3, "S3 clarification"; REG D4-13
S4 Training and calibration D4-04 Training step with references, scoring, manual assessment, retries and optional group admission (OS-A18) Decided-amended CDN S4, "S4 owner expansion"; REG D4-04; CONS §5
S5 First rule and classification capabilities Q-18 First reasoner limited to conjunction, containment, disjointness and exhaustiveness; opt-in beta (OS-A19) Decided CDN S5, "S5 approved interpretation behavior"; REG Q-18; CONS §5
S5 First rule and classification capabilities Q-19 The Design capability publishes rules; reviewers confirm applicability; normal reconciliation resolves disagreement Decided CDN S5; REG Q-19
E1 Reporting units and updated-review diagrams Q-06b Amendments B, E and F: distinct units, coverage disclosure, frozen reports Decided CDN E1; REG Q-06b; CONS §5
E1 Reporting units and updated-review diagrams D4-11 Previous-review box from supplied counts; full updated-review workflow deferred Decided CDN E1; REG D4-11; CONS §5
E2 Methods documentation and full-text retrieval D4-05 Versioned search documentation; protocol record with append-only amendments Decided CDN E2; REG D4-05; CONS §5
E2 Methods documentation and full-text retrieval D4-07 Explicit Sought, Retrieved and Not retrieved actions; a PDF never confirms retrieval Decided CDN E2; REG D4-07; CONS §5
E3 Exports, estimated values and imports D4-09 Analysis-ready export, codebook and selected RIS; no effect sizes in SyRF Decided CDN E3; REG D4-09; CONS §5
E3 Exports, estimated values and imports D4-10 Estimated-from-graph provenance now; digitisation after pilots Decided CDN E3; REG D4-10; CONS §5
E3 Exports, estimated values and imports D4-14 Answer imports later; external and AI-model screening sources count by ScreeningSourcePolicy (OS-A20) Decided-amended CDN E3, "E3 expansion"; REG D4-14; CONS §5
E4 Accepted answers controlling later steps D4-15 Accepted-answer branching between steps outside MVP; reconciled-answer filter clauses stay Deferred (beyond MVP) CDN E4; REG D4-15; CONS §5
U1 Labels and draft status D3-03 Labels accepted; "Draft auto-saved" versus "Version checkpoint saved", illustrative (OS-A21) Decided-amended CDN U1, "U1 owner amendment", "U1 wording flexibility"; REG D3-03; CONS §6
U1 Labels and draft status D3-04 Material 3 sentence case Decided CDN U1; REG D3-04
U2 Device support and legacy appearance D3-05 Full annotation and screening on phones, tablets and desktops at launch; PWA exploration beyond MVP (OS-A22) Decided-amended CDN U2; REG D3-05; CONS §6
U2 Device support and legacy appearance D3-06 Legacy screens refreshed with compatible features; workflow semantics unchanged (OS-A23) Decided-amended CDN U2, "U2 final owner clarification"; REG D3-06; CONS §6
U3 Work discovery and pilot measurement D3-07 My work, cross-project tab and global badge with notifications muted; landing page deferred Decided CDN U3; REG D3-07; CONS §6
U3 Work discovery and pilot measurement D3-08 Current tester panel; consent-based timing telemetry without answer content Decided CDN U3; REG D3-08; CONS §6
O1 Withdrawal, access removal and evidence validity D3-12 Search withdrawal keeps history; reversible project deletion and restoration (OS-A25); permanent erasure unapproved Decided-amended CDN O1, "O1 final owner clarification"; REG D3-12; CONS §6
O1 Withdrawal, access removal and evidence validity D4-20 Contributions stay valid after access loss; admin exclusion by form, profile, stage or project (OS-A24) Decided-amended CDN O1, "O1 amendment"; REG D4-20; CONS §6
O2 Email privacy and conversation retention D3-22 Informative, permission-aware email; answers and free text configurable (OS-A26) Decided-amended CDN O2, "O2 owner amendment"; REG D3-22; CONS §6
O2 Email privacy and conversation retention D3-24 Per-project email mute; in-app notices kept Decided CDN O2; REG D3-24; CONS §6
O2 Email privacy and conversation retention D3-25 Conversations as permissioned audit records outside answer exports and agreement statistics Decided CDN O2; REG D3-25; CONS §6
O3 Warnings about outdated answers D4-17 Outdated-answer handling configurable: warn and allow Complete (default) or block Decided-amended CDN O3; REG D4-17; CONS §4
O4 Default serving and candidate identity protection D4-19 Random serving by default; blinded, dynamic reviewer-pool browsing within a stage (OS-A27) Decided-amended CDN O4 and the browsing sections; REG D4-19; CONS §3

3.2 The 15 decisions outside the session register

ID Final decision Status Source
D2-01 Publication may create attributable generated session versions; reverses the round-2 "publication writes no evidence" proposal Decided-amended REG "Decisions already fixed", bullet 3; CDN "Settled foundations"
D2-02 Compatibility belongs to immutable question versions; SyRF suggests, the publisher declares; corrections use guided rollback and republication Decided-amended REG "Decisions already fixed", bullet 3; REG Q-34; CONS §1
D2-05 The standard reviewer target is part of the immutable form version (OS-A12); every other setting is classified in the brief Decided-amended (in part) REG "Owner amendment: the standard reviewer target versions the form"; CONS §1
D2-07 Form-owned inactivity timeout and per-reviewer in-progress limit; one place across tabs and routes; expiry keeps the draft Decided REG Q-28; CONS §4
D2-08 One shared session and place across tabs and devices; connections tracked separately; base-version checks; take-over presentation a brief detail Decided REG "Decisions already fixed", bullet 2; REG Q-28; CONS §1
D2-12 One consolidated current Study with immutable history and reversible unmerge (OS-A29) Replaced REG "Decisions already fixed", bullets 4 to 6; CONS §2
D2-14 Account deletion disables access and keeps named attribution; identity erasure not decided Decided-amended REG "Decisions already fixed", bullet 9; CONS §6
D2-15 One application-wide CAMARADES catalogue; versioned copies with provenance; publication requests Decided-amended REG "Decisions already fixed", bullet 10; CONS §6
D2-16 No size-based exclusion; the largest project is an acceptance case Replaced REG "Decisions already fixed", bullet 2; CONS §6
D3-14 Add missing staging seeds; prefer preserving staging data; justified staging changes allowed; never production Decided REG "Decisions already fixed", bullet 11
D3-15 Firefox, WebKit and touch coverage Decided REG "Decisions already fixed", bullet 11
D2-03 A data-type or multiplicity change is an incompatible version of the same question Engineering contract (no owner question) Not in the session register; repository question in ORIG §D2
D2-04 A stage binds the form identity; the live route presents the session's resolved version Engineering contract (no owner question) Not in the session register; repository question in ORIG §D2
D2-06 System questions stored as versioned data and adopted through a form publication Engineering contract (no owner question) Not in the session register; repository question in ORIG §D2
D2-09 Shared-question accepted answers across two forms; recommendation unchanged: the second form's reconciler may revise with a new snapshot Open owner decision (T-OI-01) Not in the session register; repository question in ORIG §D2

3.3 The 22 alignment, brief and specialist entries of the session register

These are not owner decisions. They are listed so that every one of the 89 has a source.

ID Treatment Status Source
Q-23 Apply the reporting-unit distinction; grouping of distinct reports deferred Brief item (carry-forward alignment) CDN "Carry forward"; REG Q-23; CONS §7
D4-08 Prepared multi-source links; Study-owned work; distinct-report grouping deferred Brief item (carry-forward alignment) CDN "Carry forward"; REG D4-08; CONS §1, §7
D3-17 Capacity cap separate from the target; form baseline; no eviction; cap defaults proposed only Brief item (carry-forward alignment) CDN "Carry forward"; REG D3-17; CONS §7
D3-18 Form-owned timeout and in-progress limit; stage-derived rules removed Brief item (carry-forward alignment) CDN "Carry forward"; REG D3-18; CONS §7
D2-10 Tested publication active-work protection; measured pause and operation limits Brief item CDN "Workstream briefs"; REG D2-10; CONS §7
D2-13 Isolated point-in-time recovery specification and rehearsal Brief item CDN "Workstream briefs"; REG D2-13; CONS §7
D3-01 Material 3 roles and themes, dark-mode and staging checks, visual baselines Brief item CDN "Workstream briefs"; REG D3-01; CONS §7
D3-02 Design review checkpoints and risky-screen previews Brief item CDN "Workstream briefs"; REG D3-02; CONS §7
D3-09 Paused eligibility programme aligned with the filter and step model Brief item CDN "Workstream briefs"; REG D3-09; CONS §7
D3-10 Source-pinned statistics, protected pilots, profile granularity; production readiness provisional Brief item CDN "Workstream briefs"; REG D3-10; CONS §7
D3-11 Rebuildable agreement store with a source watermark and measured budget Brief item CDN "Workstream briefs"; REG D3-11; CONS §7
D3-13 Allocation and batch contracts; release, pool entry, review start and completion as distinct events Brief item CDN "Workstream briefs"; REG D3-13; CONS §7
D3-16 Shared-form capacity piloted before broad rollout Brief item CDN "Workstream briefs"; REG D3-16; CONS §7
D3-19 Annotation place reserved at personal Include; screening kept when no place is free Brief item CDN "Workstream briefs"; REG D3-19; CONS §7
D3-20 Active counts and own place for reviewers; Monitor names; blinding respected Brief item CDN "Workstream briefs"; REG D3-20; CONS §7
D3-21 Notification environment, kind-family and pilot gates; test sink; delivery pause Brief item CDN "Workstream briefs"; REG D3-21; CONS §7
D3-23 Notices resolve with the work; unread counts consistent; history kept Brief item CDN "Workstream briefs"; REG D3-23; CONS §7
Q-17 Event-count field specification and the meaning of "variation" Specialist input CDN "Workstream briefs"; REG Q-17; CONS §7
Q-16 Denominators, percent agreement, statistical review of multi-rater formulas Specialist input CDN "Workstream briefs"; REG Q-16; CONS §7
D4-12 Initial independent observations; per-profile screening agreement Specialist input CDN "Workstream briefs"; REG D4-12; CONS §7
D4-06 Methodologist curation of the SYRCLE, CAMARADES and ARRIVE Essential 10 templates Specialist input CDN "Workstream briefs"; REG D4-06; CONS §7
D4-21 ASySD parity and performance method; F1 and throughput figures proposed only Specialist input CDN "Workstream briefs"; REG D4-21; CONS §7

3.4 Amendments OS-A01 to OS-A30

ID Amendment Status Source
OS-A01 Collaborative question-management drafts: presence, live updates, conflicts, audit (supplements D2-11) Decided REG "Additional agreed requirement: collaborative question-management drafts"; CONS §1
OS-A02 Reconciliation blinding owned by the form or profile, with unpredictable candidate ordering (supplements Q-28, Q-30) Decided REG "Additional agreed requirement: reconciliation blinding and candidate ordering"; REG Q-28; CONS §4
OS-A03 No cross-Study identity continuity in blinded reconciliation Decided REG "Owner decision: no cross-study identity continuity in blinded reconciliation"; REG Q-30
OS-A04 Reconciled-answer hints and explicit click-to-fill; step hide-only override; supersedes automatic prefilling Decided REG Q-28, "Additional owner amendment: reconciled-answer hints and explicit autofill"; CONS §4
OS-A05 Already-started work may finish after any filter-driven pool departure by default; admin restriction, placement still to specify Decided REG "Additional owner decision: finishing existing work after leaving a stage study pool"; CONS §3
OS-A06 A result produced through a stage may change its own pool: commit, then recalculate membership Decided SFS "Results produced through a stage change its own pool"; CONS §3
OS-A07 Targeted pool-membership history; current pools stay query-time Decided REG and SFS "Agreed addition: targeted pool-membership history"; CONS §3
OS-A08 Admin explanation of review activity and inactivity over time Decided REG and SFS "Owner goal: explain review activity and inactivity over time"; CONS §3
OS-A09 Historical pool coverage for flow diagrams; actual review through the stage is the reporting priority Decided (box mapping is specialist input T-SI-05) REG and SFS "Owner requirement: historical pool coverage" with "reporting priority" clarification; CONS §3
OS-A10 Explicit entry justification for every pool entry Decided REG and SFS "Explicit entry justification"; CONS §3
OS-A11 Structured, queryable history events and the required event queries Decided REG and SFS "Structured, queryable event records", "Required event-query examples"; CONS §3
OS-A12 The standard reviewer target versions the form Decided REG and CDN "Owner amendment: the standard reviewer target versions the form"; CONS §1
OS-A13 Configurable screening tie adjudication; member or group adjudicator assignment Decided REG and CDN "Owner amendment: configurable screening tie adjudication"; CONS §4
OS-A14 R4: explicit legacy activity mapping and adoption guidance in the wizard Decided REG and CDN "R4 amendment: explicit legacy activity mapping and adoption guidance"
OS-A15 R4: universal faithful baseline conversion, then optional in-engine redesign; supersedes the permanent-archive option Decided REG and CDN "R4 owner direction" (replaces "R4 research finding"); CONS §5
OS-A16 S1: bounded Unsure handling and adjudication fallback Decided-amended (unstated transition rows are brief items) REG and CDN "S1 amendment"; CONS §4
OS-A17 S3: the exclusion-reason template is guidance and sets no question-count limit Decided REG and CDN "S3 clarification"; CONS §4
OS-A18 S4: training with reference answers, scoring, manual assessment, retries and optional group admission Decided REG and CDN "S4 owner expansion", "S4 manual assessment and retry policy"; CONS §5
OS-A19 S5: inference behaviour and the project-designer opt-in beta, off by default Decided REG and CDN "S5 approved interpretation behavior", "S5 activation amendment"; CONS §5
OS-A20 E3: external screening and AI-model-generated screening decisions; model metadata ownership; source identity; terminology Decided REG and CDN "E3 expansion" with its metadata, source-identity and terminology sections; CONS §5
OS-A21 U1: "Draft auto-saved" versus "Version checkpoint saved" (illustrative wording) Decided REG and CDN "U1 owner amendment", "U1 wording flexibility"; CONS §6
OS-A22 U2: PWA exploration beyond MVP, including possible caching of allocated studies; no offline writes Deferred (exploration beyond MVP) REG and CDN "U2 exploration", "U2 clarification: PWA scope and caching"; CONS §6
OS-A23 U2: compatible improvements on legacy screens without a workflow-semantics change Decided CDN "U2 final owner clarification"; CONS §6
OS-A24 O1: admin-controlled contribution exclusion Decided REG and CDN "O1 amendment"; CONS §6
OS-A25 O1: reversible project deletion and restoration Decided REG and CDN "O1 final owner clarification"; CONS §6
OS-A26 O2: informative, permission-aware emails with configurable answer and free-text detail Decided CDN "O2 owner amendment"; CONS §6
OS-A27 O4: optional, dynamic, blinded reviewer-study-pool browsing within a stage Decided REG and CDN "Owner addition: optional browsing" and its three clarifications; CONS §3
OS-A28 R1: one candidate plus human reconciliation instead of a separate verification engine Decided CDN "R1 final owner clarification"; CONS §4
OS-A29 Consolidated, atomic, reversible duplicate merge; replaces D2-12's alias Decided REG "Decisions already fixed", bullets 4 to 6; CONS §2
OS-A30 Deliverable: the design-prototype handoff specification for iterating SyRF Prototype v10; no design session is messaged Decided (process requirement) ADD; the addendum request (claude-design-addendum-request.txt)

4. Superseded wording register

Implementers must not follow the old wording below, and new text must not reintroduce it. Rows 1 to 17 are the owner session's main list; the decision register §2 labels them "Superseded wording 1" to "17". Rows 18 to 51 are the further owner-session rows of register §2 and of the nine specifications' §14, deduplicated: a specification row that restates a main-list item is folded into that item, and its locations are merged. "Where it is now amended" names the documents that carry the replacement today. It was checked on 5 October 2026 by searching each listed document for the replacement wording; the exceptions are documents outside this package, which are named.

Document short names: VM versioning model; CM consistency model; CT contracts; DMod domain model; IP integrated plan; ACC acceptance criteria; OQ open questions; PA PRISMA amendments; MC methodology coverage; PI programme integration; UXS UX strategy; NI notifications integration; MIG migration, adoption and rollback; DR decision register; LED owner ledger; G0 G0 dossier. Specification prefixes as in §5.

# Old wording New decision Rationale Where it appeared Where it is now amended
1 Publication writes no evidence; publication itself creates no session version (D2-01 round-2 proposal) Publication may create attributable generated session versions, and SF6 applies to them literally (D2-01 Decided-amended) Attributable versions let a session's current version pin the form version it satisfies and keep history reconstructable (REG "Decisions already fixed", bullet 3) VM §1.1, §2 rule 4, §7.3, §7.5, §8.1, §8.4, §8.5; CM §7.4, §19.3; CT C4, C5; DMod §4.1, §4.5; IP R2c; AC-R2c-02; OQ D2-01 and the Q-20 and D2-10 recommendations VM (§8.11 new), CM, CT C4 and C5, DMod, IP, ACC (AC-R2c-02r), OQ; RD §3.15, §14
2 Duplicate merge as an alias: two active Studies linked by mergedInto and StudyAlias; a split removes the alias; "moving Citations needs an identity and lineage manifest" (amendment D); "the admin's identity mapping is an alias" (FX-PRISMA-07a); reports "resolve aliases"; "a dedup alias drifts a reconciliation task" One consolidated current Study; originals kept as immutable history; atomic merge; reversible unmerge with per-item carry-forward choices; references never move (D2-12 Replaced; OS-A29; C21) Chris requires one current Study after a merge and an easy, fully reversible unmerge (CONS §2) DMod §4.7, §6.2, §6.3, §7.1, §7.2, §9, §14; CT C1, C9, C12; CM §4.2, §7.8, §15, §19.3; PA summary, D, L.4, L.5; IP §5.8; VM §9.3; MC §9.1; AC-P2-04, AC-P2-05, FX-PRISMA-07a; OQ D2-12, E33, Q-37 All of those (VM §16.1 and CT C21 new; ACC AC-P2-04r, AC-P2-05r, FX-PRISMA-07ar); DM §14; RI §14
3 The form target is an operational setting; changing it is an audited settings change that never triggers publication (D2-05 round 2); "the form's minimum target (an operational setting)" A standard-target change creates a new immutable form version and uses the publication-impact process; Study × form overrides keep their own history (D2-05 Decided-amended in part; OS-A12) The target is part of what reviewers satisfy, so it versions with the form and shows publication impact (CONS §1) VM §2 rule 6, §4.4; CT C4; DMod §4.5; MIG §3 stage-targets row; AC-R2a-33; FX-VM-42; OQ D2-05 VM (§4.6, §4.7, §8.12 new), CT C4, DMod, MIG §3.1, ACC (AC-R2a-33r), OQ; RD §3.5, §14; RS §14; BC §14
4 Stage-owned or stage-only capacity, idle timeout and in-progress limits ("the most restrictive bound stage sets the cap and the idle timeout; the stage in use sets the in-progress limit; the form is tracked if any bound stage is"); "optional capacity cap (stage or route policy)"; most-restrictive-stage reconciliation blinding; BL1 stage-owned; stage-owned alias sources, including My work "stage-owned aliases (BL1)" and the C11 and C15 BL1 wording Form-owned inactivity timeout, in-progress limit and capacity baseline with one shared count, where a stage may be stricter; reconciliation blinding owned by the annotation form, or by the screening profile for screening reconciliation, with context-local aliases (Q-28, Q-30, D2-07, D3-18; OS-A02, OS-A03) One shared session and place across stages cannot obey conflicting stage rules (CONS §4; REG Q-28) DR §1.3 BL1; LED BL1; CT C6, C7, C11, C15; DMod §4.4, §4.11; PI §6.2; UXS §3.1; NI §2; AC-R2b-10, AC-R2b-16, AC-R3a-15, AC-R3a-23, AC-R4a-30; MC §2, §3.8; OQ Q-28, D3-17, D3-18 All of those (ACC AC-R2b-10r, AC-R4a-30r); SP §14; RS §14; ACD §14; RI §14; UX §14
5 A separate incoming stage-entry gate or cross-stage progression policy: DP6 "cross-stage routing is configurable"; DP7 "Collective Include required" by default with "own Include sufficient"; Q-15 parts (a) and (b); A-06 and A-18; the access-policy proposal's "Incoming dependencies / progression between stages" The stage study filter defines the pool; dependencies are between steps inside a stage; exclusion-stop is a separate step setting; neither Q-15 alternative is approved (Q-15 Replaced) The owner corrected a major ambiguity: there is no separate incoming gate into a stage (CONS §3; SFS §1 to §3) DR §1.4 DP6, DP7; LED DP6, DP7 and header; CT C6 evaluation table; IP §2, §5.5 (R3a); AC-R3a-05, AC-R3a-14, AC-R3a-21; access-policy proposal; OQ Q-15, A-06, A-18 DR, LED, CT C6, IP, ACC (AC-R3a-14 and 21 retired), OQ; SP §14. Not amended in this PR: the access-policy proposal, outside the package (SP §13 asks for a status note)
6 Automatic prefilling of reconciled answers into a reviewer's form Labelled reconciled-answer hints shown by default, explicit reviewer click-to-fill, exposure and adoption recorded, never counted as independent evidence; RE2's matching-answer prefill inside the reconciler's own workspace is unaffected (Q-28 hint amendment; OS-A04) Copied values must not pass as independent evidence (REG Q-28, hint amendment) The earlier Q-28 owner-amendment wording in the session register; VS1-based display designs DR §2; CT C3, C9; ACC (AC-R4a-42r, AC-R4a-59); IP; UXS; RS §5.7, §14
7 A mandatory "legacy authority unknown" reconciliation backfill; legacy reconciled answers exported as LegacyAuthorityUnknown (Q-35 recommendation) Removed; every conversion dry run verifies the no-records premise and stops that project's case on unexpected records (Q-35 Removed; RS-R68) The owner says reconciliation was never fully implemented, so no such records are assumed (CONS §4) CT C9, C9-T14; MIG §3; VM §11; DMod §7.2; AC-R4a-12; IP §5.6; OQ Q-35 All of those (VM §11 row marked removed; ACC AC-R4a-12r); RS §14; BC §4.2, §14
8 Permanent legacy or archive adapters; projects staying legacy indefinitely; completed projects kept as read-only legacy snapshots; "Reviewed adoption: existing projects chosen by Chris"; "Existing real projects stay legacy until R6 adoption"; staying legacy as a permanent R4 alternative Universal faithful baseline conversion of every project after staging trials and production pilots; blocked projects record a blocker and remediate toward the baseline; legacy-writer retirement is its own verified, owner-approved milestone (R4; OS-A15) Chris chose one eventual writable engine (CONS §5) MIG §2, §5; IP §5.10; the session register's "R4 research finding"; condensed R4 options MIG (§2, §3.1, §8, §9), IP §5.9, §5.10, G0 (G0-X18), PA amendment G, ACC §4.31; BC §14
9 Immediate full report or investigation linking: a "link reports to one study" action (D4-08 original; amendment O) Prepared multi-source links; Study-owned work; distinct-report grouping deferred (D4-08 brief item; RI-R03) The consolidation defers the full workflow for linking distinct reports (CONS §1) PA §O; MC §10.1; AC-R5b-15; OQ D4-08, E92 PA, MC, ACC (AC-R5b-15r), OQ; RI §14
10 Account deletion anonymises the Investigator record and answers stay attributed to an anonymised identity (D2-14) Ordinary account deletion disables access and keeps named attribution; joining terms explain retention; identity erasure is not decided (D2-14 Decided-amended; T-POL-02) REG "Decisions already fixed", bullet 9; CONS §6 DMod §2.1, §3, §5; CM §11.5; MIG §1 principle 8; OQ D2-14, E32; AC-R2a-30 All of those (ACC AC-R2a-30r); ACD §14
11 A separate verification step or session type producing Verified gold; the "single extraction, verified" export label (D4-03 original) The same reconciliation mechanism: target one plus required human reconciliation (ReconciliationPolicy.targetOneHandling = RequireHumanReconciliation) (R1; OS-A28) R1 final clarification: no separate review engine (CDN "R1 final owner clarification") CT C9, C14; DMod §4.3, §7.2; AC-R4a-49; MC §3.1, §4.4, §5.8; OQ D4-03 All of those (ACC AC-R4a-49r); RS §14; RI §14
12 An initial form-size ceiling; "the 2,023-question project stays on the legacy path even after adoption opens" (D2-16) No size-based exclusion; the largest project is an acceptance case, and E28 limits are engineered for it (D2-16 Replaced; RD-R33) Francesca's largest project is an explicit acceptance case (CONS §6) DMod §4.5; VM D2-16 row; OQ D2-16, E28; AC-R2a-22 All of those (ACC AC-R2a-22r); RD §14; UX §14; BC §14
13 A seven-day expiry for explicitly assigned, unstarted reconciliation work (Q-30 recommendation; RA3 stage default) Optional, admin-configured, off by default (Q-30; RS §5.14) REG Q-30: the proposed seven-day expiry is not enforced by default CT C6; DMod §4.4; IP §5.6; OQ Q-30 All of those; RS §14
14 "Model decision" "AI-model-generated screening decision" and "AI screening model"; non-AI external sources keep their real source type (OS-A20) CDN "Explicit AI-model terminology" Earlier session drafts; new text must avoid it RI §14; the package uses the new terms (MC, PA, CT C22, DR)
15 "Changes kept, not yet saved" and "Autosaved—not yet submitted" "Draft auto-saved" for recoverable drafts and "Version checkpoint saved" after Save progress, both illustrative; the distinction is fixed and Complete stays distinct (D3-03 Decided-amended; OS-A21) CDN "U1 owner amendment" and "U1 wording flexibility" UXS §5.2, §6.4; DMod §8; ACC UI-11; OQ D3-03 All of those; UX §14; RD §14
16 Every-ever-in-pool membership used as the PRISMA reviewed count Actual review through the stage is the reporting priority; pool history is separate audit data; box mapping is specialist input T-SI-05 (OS-A09; RI-R04) REG and SFS "Owner clarification: reporting priority is actual review through the pool" The session register's "historical pool coverage" section before the clarification; PA A; CT C12 PA amendment A, CT C12, MC, DR; SP §14; RI §14
17 Every target-counted imported contribution must map to a SyRF reviewer (D4-14 original) Configured external and AI screening sources count under the profile's ScreeningSourcePolicy; annotation imports keep the mapping rule (D4-14 Decided-amended; OS-A20) E3 expansion: an AI screening model may be a contributing vote or the sole required screener (CDN "E3 expansion") MC §13.1; ACC §4.36 closing paragraph; CT C3 imported authority; OQ D4-14 All of those; RI §14
18 A compatibility declaration may change until a revision pins the version (D2-02 recommendation) The publisher's declaration is immutable from commit; corrections use guided rollback and republication (D2-02 Decided-amended) REG Q-34: compatibility on a committed question version stays immutable VM §3.5; CT C4; OQ D2-02 All of those; RD §14
19 No autosave trail beyond the current draft (PH-33) Autosave sends diffs and keeps a reconstructable draft change log (consolidation §1) CONS §1: fully reconstructable history VM §7.6; CT C5 Both (VM §7.7 new); RD §3.10, §14
20 The second tab is read-only with "Take over editing" (D2-08 recommendation); a draft holds the place under today's idle and disconnect timers (D2-07 middle ground) One shared session and place across tabs and devices with base-version checks, where take-over is only a presentation option; form-owned timeout and in-progress limit; expiry keeps the draft (D2-07, D2-08 Decided) REG Q-28; CONS §1, §4 VM §7.6; CM §4.4, §4.5; CT C5; AC-R2a-06, AC-R2a-37; OQ D2-07, D2-08, E21, E70, U31 All of those (ACC AC-R2a-06r, AC-R2a-37r); RD §14; UX §12
21 An additional review never changes the normal form target (RA5 boundary); a requested reviewer bypasses allocation buckets and the enforced target once (D3-13c); a requestedReview claim "never changes the target" An additional-review request may name people or groups and many Studies, raises the effective Study × form target explicitly through an override version and counts qualifying reviewers once across routes CONS §1 LED RA5; DR §1.6 RA5; CT C7, C9; DMod §4.3; PI §3.2; AC-R4a-38; OQ D3-13, E66 All of those (ACC AC-R4a-38r); RD §3.12, §14; SP §14
22 Q-34 option mapping OPEN; Q-26 OPEN ("a profile version publishes only before any decision exists") Decided: the publisher declares compatibility and mapping (Q-34); profile publication with mismatch detection and treatment (Q-26) REG Q-34, Q-26 VM §1.2, §5.1, §8.9, §15.1; AC-R2c-23 Both (VM §5.5 new); RD §14
23 StudyEnteredPool as the pool-entry event in StudyPoolLedger WorkFirstReleased for the first release of work (renamed to avoid clashing with stage-pool entry); StagePoolEntered and the other StagePool* events in HistoryEvent for membership (OS-A11; C20) The D3-13 treatment keeps first release, pool entry, review start and completion distinct (CDN "Workstream briefs and specialist validation") PA A; DMod §4.2, §6.2, §6.3, §8, §10; CM §4.2, §12; PI §4.2; CT C12; AC-R3a-05, AC-R3a-10, AC-R3c-17; OQ E26, E67 All of those (CT C20 new); SP §14; RD §14; RI §14
24 Merges refuse busy Studies (claims, drafts, open tasks) Warn about active work before confirmation, recheck at commit, keep drafts and refuse stale saves CONS §2 DMod §4.7, §6.3; CM §4.2, §7.8 Both; DM §7, §14
25 The current session is chosen (default the later Complete) and the other superseded; "primary and secondary Study" (dedup); scenario 4 links via a shared Publication without merging review data The merging user or the original reviewer resolves both submissions in a reconciliation-like view and the actual resolver is recorded; "consolidated Study and input Studies"; related reports take the "distinct report" outcome CONS §2 PA L, L.4, L.5; FEAT-012 §7.1, §9.2; AC-P2-05; DMod §8; UXS §5.2 PA, ACC (AC-P2-05r), DMod, UXS; DM §14. Not amended in this PR: FEAT-012 (a feature document; DM §13 routes it to the FEAT-012 change-policy PR)
26 "Strict within-stage collective mode is a proposal only" (Q-01 open) Decided: a stage setting can require collective Include; off by default (Q-01) REG Q-01 DR §1.4 DP7; AC-R3c-07; IP §5.5 (R3c) All of those; SP §14
27 LC1's "obtain confirmation before admitting a change that would reopen a Completed stage" applied to automatic stages and new arrivals ("the same gate"); "exact flow is PROPOSAL (Q-02)" An automatic Completed stage is recalculated as soon as remaining work appears; admin-initiated changes show their impact first; protected changes to the Completed stage still need approval; manual completion stays until explicit reopening (Q-02) REG Q-02; CONS §3 DR §1.4 LC1; LED LC1; AC-R3c-03, AC-R3c-08; OQ E29, U10 All of those (ACC AC-R3c-03r); SP §14
28 "Circular references … are detected at save time" Filters read preserved evidence only, so recursion cannot arise SP §3.3 FEAT-008 stage filtering Not amended in this PR: FEAT-008 is a feature document; SP §13 gives the input for its own PR; SP §14
29 The interim recommendation to omit continuous membership history Targeted transition history with query-time current pools (OS-A07) REG and SFS "Agreed addition: targeted pool-membership history" Session register only; no package text Nothing to amend; SP §14
30 "Target-1 forms create no task and no automatic gold"; "single reviewer, unreconciled"; an optional "accept as gold" action A task exists for every form; automatic SingleAnnotator result or one-candidate human reconciliation, configured on the form version; converted target-one forms carry NoAcceptance (RS-R04a, PROPOSAL) CDN "R1 final owner clarification" CT C9; DMod §4.3; AC-R4a-31; IP §5.6, §5.10; MIG §3; AC-R6-08; OQ Q-29 All of those (ACC AC-R4a-31r, AC-R6-08r); RS §14; BC §14
31 "Candidates are always blinded; the stage chooses only the alias scheme" (D4-19 recommendation) Blinded by default; names visible only by explicit form or profile choice (Q-30; D4-19) REG Q-30 AC-R4a-48; MC §3.8; OQ D4-19 All of those (ACC AC-R4a-48r); RS §14
32 VS1 as a step policy with a stage default (originally recommended off) The form baseline shows reconciled hints by default and a step may only hide them (Q-28, Q-30; OS-A04) REG Q-28, hint amendment DR §1.3 VS1; LED VS1; CT C6; AC-R4a-42; IP §5.5; OQ Q-30, U16 All of those (ACC AC-R4a-42r); RS §14
33 Outdated answers: a non-blocking warning only, with enforcement levels dropped (D4-17 recommendation) Configurable: warn and allow Complete (default) or block until addressed (D4-17; O3) CDN O3 MC §13.4; OQ D4-17, E34 Both; RS §14
34 Profile rationale, Unsure and discussion settings on the profile head with no impact flow; the Unsure rules "Unsure + Unsure and Include + Unsure need a third vote; Exclude + Unsure is a conflict" In the immutable profile version with Q-26 publication; the RS §5.10 Unsure table REG Q-26; CDN "S1 amendment" VM §5.1; DMod §4.5; AC-R3b-05; MC §3.2 All of those (ACC AC-R3b-05r); RS §14
35 "No project setting permits self-reconciliation" No self-reconciliation by default; an explicit override grant (Q-36) CDN R2 AC-R4a-28 ACC (AC-R4a-28r); RS §14
36 A submitted replacement of an input decision makes an earlier adjudication inapplicable, and the outcome falls back to the candidate facet until re-adjudicated (25 September clarification, RECOVERED) The adjudication stays the current final facet, flagged InputsChanged, until an eligible adjudicator explicitly reconsiders it; the actor is warned and affected authors informed (RS-R58; Q-27; O1 amendment) Dependent results are never silently rewritten (CONS §1; REG Q-27) CM §8.4; access specification ambiguity B1 CM; ACD §12.5 (B1 closed); RS §14
37 An outcome authority list of CandidateAgreement, Reconciled, Adjudicated, Admin, Imported, LegacyUnknown ScreeningOutcome.finalSource plus RI's composition fields; accepted results use SingleAnnotator, HumanReconciled, Adjudicated and MergeResolved Harmonisation of RS §3.8 and RI §3.13 under the owner model PA §H; CT C12; DMod §7.2 All of those; RS §14; RI §3.13
38 "Allocation is disabled on adoption unless AL1 is live" An enabled allocation regime blocks conversion until AL1 and is never silently disabled (BC-R17, PROPOSAL) Faithful conversion preserves workflow semantics (CONS §5) MIG §3; AC-R6-14 Both (ACC AC-R6-14r); BC §14
39 "Allow admin-initiated adoption for screening-only, unreconciled stages after R3b, reversible until the first canonical write" (D4-16 recommendation) Limited pilot scopes only with complete validated reader and writer coverage; the first-canonical-write boundary applies to every conversion (D4-16 Decided-amended) CDN R4 and "R4 owner direction" OQ D4-16; AC-R6-17 Both (ACC AC-R6-17r); BC §14
40 "Restore policy (D2-13, PROPOSAL until Chris answers)" Brief item D2-13 with BC §8.4 and a required rehearsal; production execution needs separate authorisation CDN "Workstream briefs and specialist validation" MIG §6; CM §13.1, §19.3 Both; BC §14
41 Calibration step "R3c (or after GA with the C6 admission hook reserved now)" and deferral to the hook only; "scored training against gold as an admission prerequisite" in the backlog; "a passed-training admission hook in C6" Training is in delivery scope with references, scoring, assessment, retries, group admission through the group contracts and explicit promotion; hook-only deferral needs a separate owner agreement (D4-04; OS-A18) CDN "S4 owner expansion" MC §2, §3.4, §16.4; CT C6; AC-R3c-18; OQ D4-04 All of those; TI §14
42 C2 "Inference and counts" with no activation rule; U4 "conservative inference" including "safe count/bounds checks" Beta, off by default, explicit project-designer opt-in, never enabled by baseline conversion; the first reasoner is limited to the four operators (Q-18; OS-A19) CDN "S5 activation amendment" IP §5.8 C2 row; CT C13; unified-annotation-classification-research §7 IP, CT C13; TI §14. Not amended in this PR: the classification research note (TI §13 gives its input)
43 "Machine-learning prioritisation or automated exclusion … no lane" External and AI-model-generated screening decisions are in scope in a later opt-in lane; prioritisation stays out of scope (OS-A20) CDN "E3 expansion" MC §2, Screening row MC; RI §14
44 Phone support for title and abstract screening only, with annotation on tablet and desktop first (D3-05 recommendation) Full annotation and screening on phones, tablets and desktops at launch (D3-05) CONS §6 UXS §6.1, §8.2; ACC UI-6, §3.1; OQ D3-05, U33 All of those; UX §14
45 Legacy screens restyled "with no behaviour change" only Restyle plus as many compatible new features as possible, with workflow semantics unchanged (D3-06; OS-A23) CDN "U2 final owner clarification" UXS §3.4; AC-GA-09; OQ U45 All of those; UX §14
46 "At least two external SyRF users where possible" as a testing requirement; timing telemetry "if D3-08 approves"; "Pending D3-0x" markers for D3-03 to D3-08, D3-14 and D3-15 The agreed tester panel with no extra external recruitment now; telemetry approved with consent and without answer content; the D3 entries decided as recorded CDN U3; REG "Decisions already fixed", bullet 11 UXS §9, §10, §15.1 and inline markers; ACC §5.3, §5.4, AC-ALL-25, AC-UX-03; OQ A-38 All of those; UX §14
47 "Notification emails and digests may name the project; never study titles, aliases, answers or free text" (D3-22 recommendation) Study titles allowed; aliases and content follow recipient permission and blinding; answers and free text configurable; rights checked at delivery (D3-22; OS-A26) CDN "O2 owner amendment" OQ D3-22; CT C15; AC-ALL-30 All of those (ACC AC-ALL-30r); ACD §14
48 "Deleting a whole project keeps ADR-014's physical removal with a tombstone" (D3-12 recommendation) Ordinary deletion is reversible; permanent erasure is a separate unapproved policy (T-POL-01) (D3-12; OS-A25) CDN "O1 final owner clarification" OQ D3-12; AC-P1-16; IP P1 row, X-DEL row and programme table; DMod §2.1 All of those (ACC AC-P1-16r); ACD §14
49 "An audited admin action can exclude a reviewer's contributions from a form" (D4-20 recommendation) Exclusion by form, screening profile, stage or project, with preview, reason, actor and time, and provenance-based stage scope (D4-20; OS-A24) CDN "O1 amendment" OQ D4-20; AC-R2a-45 Both (ACC AC-R2a-45r); ACD §14
50 "A CAMARADES-curated system catalogue (an application role), plus 'copy from a project I administer'" (D2-15 recommendation) One application-wide catalogue with versioned copies, copy provenance and publication requests; project-to-project copy awaits confirmation (ACD ambiguity B5) (D2-15 Decided-amended) REG "Decisions already fixed", bullet 10 OQ D2-15; AC-R1a-10; DMod §4.5 All of those (ACC AC-R1a-10r); ACD §14
51 "Auto-resolve … Yes" and "Notification enablement" as open owner questions Brief items D3-21 and D3-23; G-NOTIF unchanged CONS §7 OQ D3-21, D3-23; NI §6 Both; ACD §14

Earlier register §2 rows whose replacement the owner session changed. These rows predate the session. Their old text stays superseded, and the owner session changed what replaces it; register §2 carries an Owner session note on each.

Earlier superseded text (register §2) Replacement after the owner session See row
DP1: personal Include carries across stages DP6/DP7's cross-stage part is itself replaced by the stage study filter model (Q-15) 5
Single-annotator studies auto-promoted to reconciled versions Q-29 gives target-one forms a configurable automatic SingleAnnotator result or required human reconciliation; platform-wide and adoption-time promotion stay superseded 30
Platform-wide backfill of lifecycle status and screening outcomes (MIG-11, MIG-12) Per-project conversion inside universal baseline waves (R4) 8
Blinding chosen per profile or form; "most restrictive wins" Form or profile ownership; BL1's stage ownership is superseded too 4
Screening reconciliation always first; Exclude always hides form reconciliation Configured step dependencies and exclusion-stop settings inside the stage (Q-15, Q-24) 5
v10 step settings "who reconciles, per part" and related VS1 rules VS1 is a form hint baseline with step hide-only narrowing (Q-28) 32
Eligibility D3a: no stage closure or reopening state machine The lifecycle follows Q-02 27
Eligibility D3b: annotation never needs a screening prerequisite Q-24 decided: independent unless a step dependency is configured; legacy behaviour maps through the opt-in wizard 5
FEAT-008 Included, Conflict pass-forward; FEAT-010 "stages unordered"; FEAT-026 "no sequential stage-step model" The stage study filter and step model (Q-15) 5
Global anonymised-candidate invariant; "Annotator A vs B" two columns Blinding owned by the form or profile and on by default (Q-28, Q-30) 4, 31
FEAT-006 D12: a rationale may be required per stage Q-32 decided: a profile setting, off by default §3.1 (Q-32)
FEAT-006 D15: no annotation reconciliation bypass Q-29 and Q-11 decided 30
FEAT-006 D19 to D27: reference-first sharing, four scopes, an Organisation aggregate D2-15 decided-amended: one application-wide catalogue 50
Release-2 migration roadmap: auto-promotion, rollback by $unset, platform-wide backfill Target-one forms may accept automatically under Q-29; platform-wide backfill becomes universal baseline conversion (R4) 8, 30
Random-only reconciliation assignment; "Annotator A/B" view RA3 expiry optional (Q-30); blinding form- or profile-owned; additional-review requests raise the target 4, 13, 21

5. Coverage matrix

One row per decision ID (all 89) and per amendment (OS-A01 to OS-A30), 119 rows. Rows follow the order of §3: the 52 resolved session-register entries by package, the 15 decisions outside the register, the 22 alignment, brief and specialist entries, then the amendments.

How each column was derived.

  • Decision (short), Status. From the decision register §1.15. They agree row by row with acceptance criteria §9.6 and §9.7 and implementation tracker §5.
  • Specification section(s). The owning specification's sections from register §1.15, plus the sections where another specification carries part of the decision (for example RI §3.2 for Q-22's counting). Prefixes: RD review domain and versioning; DM duplicate merge; SP stage pools, steps and history; RS reconciliation and screening; BC baseline conversion; TI training and inference; RI reporting, imports and AI screening; UX UX, devices and work discovery; ACD access, communications and deletion. RD-R30 is rule 30 of RD's §5; SP-AMB-01 is an ambiguity in SP §12.4. ACD is the access specification's prefix, so that its IDs cannot be confused with acceptance criteria such as AC-R2a-01.
  • Contract(s) / domain entity. Contracts are the contracts sections (C1 to C22) that cite the decision, the contracts whose conformance tests appear in its criteria, and the contracts its specification's §13 amends. Entities use the names of the domain model §4 and the naming registry; new names are PROPOSALs until the F1a naming ADR. Six rows name no contract, and each says why: D3-02, D3-08, D3-14, D3-15, OS-A22 and OS-A30 are a review schedule, a UX telemetry setting, S0 tooling, exploration and a process deliverable.
  • Acceptance criteria. Copied from acceptance criteria §9.6 (decisions) and §9.7 (amendments). AC-, UI-, PI-, PE-, FX-, INV- and Cn-Tnn IDs are in that file; specification evidence IDs (RD-AE01 and so on) map to them in its §9.8. Two rows have no release criterion and say why: D4-15 (deferred beyond MVP) and OS-A30 (a process deliverable).
  • Workstream; release; gate. The stream and owning specification from the tracker's brief rows, the releases or lanes of the tracker's implementation rows, and the freeze or programme gate from open questions ("Needed by") and the rollout plan §7. Release and lane IDs new in the rollout plan (P2a to P2c, TR1, XS1, XA1, RW1, PWA1, BR1, F-TR, F-XS, F-XA) are PROPOSALs.
  • Tracker row(s). From implementation tracker §5.1 and §5.2. Every row also depends on T-HOLD and T-G0, which are not repeated.

No cell asserts that work has started. Every tracker row named here is at most Brief drafted, with implementation authorisation On hold.

ID Decision (short) Status Specification section(s) Contract(s) / domain entity Acceptance criteria Workstream; release; gate Tracker row(s)
D2-11 Many drafts; one publication operation per form; the next publication rechecks the resulting state; collaborative drafts (OS-A01) Decided RD §3.7, §4.7 C4 / DesignDraft, DesignDraftChange; one publication operation per form AC-R2c-14, 34; C4-T14 Stream A (RD); R2c; F2 T-RD-00, T-RD-05
Q-20 Admin impact preview before publication; alerts to affected reviewers with drafts kept; in-form warnings for a reviewer's own edits; one deduplicated notice per recipient and cause Decided RD §4.8, §7 C4, C15 / FormVersionIssue impact; deduplicated inbox notice AC-R2c-07, 35; AC-R2d-08 Stream A (RD); R2c, R2d; F2 T-RD-00, T-RD-05
Q-27 Readiness from current evidence; warn the actor before commit; inform affected authors; dependent work never rewritten automatically Decided RD §4.5, §7 C5, C9 / ReviewerStudyEvidence session versions; ReconciliationTask readiness AC-R2a-02; AC-R2c-35; AC-R3a-39; AC-R4a-50, 51, 62; AC-R4p-05r, 12; AC-P2-26, 34; INV-13 Stream A (RD); R2a, R2c (cascade R3a); F1a, F2 T-RD-00, T-RD-02, T-RD-05
Q-34 The publisher explicitly declares compatibility and mapping; mapping writes attributable revisions Decided-amended RD §3.4, §4.8 C2, C4 / compatibility declaration on the question version; mapping revisions AC-R2c-21r, 23 Stream A (RD); R2c; F2 T-RD-00, T-RD-04, T-RD-05
Q-15 The stage study filter defines the pool; no incoming stage gate; dependencies are between steps; exclusion-stop is a separate step setting Replaced SP §3.3, §3.4, §5.1, §5.2 C6, C20 / StageStudyFilter, StageStudyFilterVersion; steps in StageSettingsVersion AC-R3a-01, 02, 05, 22, 42, 43, 45, 48; FX-PRISMA-03ar; FX-ACCESS-01 to 14; FX-FILTER; INV-03; C6-T02r, T03r; C6-T16 Stream B (SP); R3a; F3 T-SP-00, T-SP-03, T-SP-04
Q-24 Independent annotation stays independent; legacy stages map through the opt-in wizard; new combined steps stop extra screening at sufficiency (Allow available); Apply anyway releases temporary reservations only Decided SP §3.4, §3.11, §7, §10.4 C6, C7 / step dependencies and sufficiency stop; claims (Apply anyway) AC-R2b-17; AC-R3a-03, 07, 16, 24; C6-T20 Stream B (SP); R3a, conversion trials, Apply anyway from R2c; F3 T-SP-00, T-SP-04, T-BC-04, T-AC-09
Q-26 Immutable profile versions; mismatches with existing decisions and outcomes detected and treated before publication Decided RD §3.6, §4.12 C4, C8, C22 / ScreeningProfileVersion, ProfileVersionIssue AC-R3b-05r; AC-XS1-04; FX-PRISMA-04c; C4-T20; C22-T04 Stream A with B (RD); R3b; F5 T-RD-00, T-RD-07
Q-28 Form-owned blinding (profile-owned for screening reconciliation); reconciled hints as a form baseline with a step hide-only override; saved work completes after exclusion by default; form-owned timeout and in-progress limit; one shared place Decided (hint part Decided-amended) SP §3.9, §3.11; RS §3.5, §3.6, §5.6, §5.7 C5, C6, C7, C9, C11 / form timeout, in-progress limit and CapacityCap; form blinding and hint baseline AC-R2a-37r; AC-R2b-10r, 16; AC-R3a-05, 35, 37, 40r, 46; AC-R4a-30r, 42r; PI-R2b-02; FX-PRISMA-03ar; FX-ACCESS-01 to 14 Stream B (SP), D for hints (RS); R2b, R3a, R4a; F3, F4 T-SP-00, T-SP-02, T-SP-04, T-RS-04
Q-12 Step selector with one form area in the existing annotation workspace Decided UX §3.1 C17 / no stored entity (reviewer workspace layout) AC-R3a-55 Stream C (UX); R3a; F1c, U7 T-UX-00, T-UX-04
Q-01 Progress after own Include while the collective result is pending; a stage setting can require collective Include; exclusion-stop still applies Decided SP §3.4, §5.2 C6 / progression basis in StageSettingsVersion AC-R3a-02, 22; AC-R3c-07; FX-PRISMA-03ar; FX-ACCESS-01 to 14; INV-03; C6-T01, T04 to T10 Stream B (SP); R3a default, R3c setting; F3 T-SP-00, T-SP-04, T-SP-06
Q-02 Automatic completion follows remaining work; static completion stays until explicit reopening; impact shown before admin changes; merges never change stage status directly Decided SP §3.10, §4.11, §5.9; DM §4.6 (merge part) C6, C21 / Stage lifecycle (automatic or static completion) AC-R3a-43; AC-R3c-02, 03r, 04, 08, 13, 15; AC-P2-30; FX-PRISMA-04dr; FX-LIFE-01 to 10; C21-T19 Stream B (SP); R3c; F3 T-SP-00, T-SP-06
Q-30 Hints on by default; blinding on by default with context-local aliases and no cross-Study continuity; unstarted-assignment expiry optional Decided RS §5.6, §5.7, §5.14 C4, C6, C9 / context-local ReviewerAlias; hint baseline; optional assignment expiry AC-R4a-07, 08, 21, 30r, 48r; INV-16 Stream D (RS); R4a, R4p; F4 T-RS-00, T-RS-02, T-RS-03, T-RS-04
Q-33 A withdrawn search keeps its references and appends an event; current reports exclude it and explain; frozen reports unchanged Decided RI §3.5 C12 / search withdrawal and reinstatement events AC-R5b-14; AC-P1-15, 16r Stream E (RI); P1; F-P T-RI-00, T-RI-01
Q-37 External-step ledger and deduplication QC adopted; the alias merge rule replaced by the consolidated Study (D2-12); parity numbers stay with D4-21 Decided-amended DM §4.1, §5; RI §3.4, §3.15 C12, C21 / ExternalStepLedger; DuplicateReviewItem; StudyMerge AC-R5b-03, 04, 12, 16, 17; AC-P1-05; AC-P2-01r, 12, 17; C12-T06, 07 Stream E (DM, RI); P1, P2a, R5b; F-P T-DM-00, T-DM-02, T-DM-05, T-RI-01, T-RI-03
Q-29 Target-one: automatic SingleAnnotator accepted result or required human reconciliation, configured on the form version; a task exists for every form Decided-amended RS §3.2, §5.1; RD §4.9 (target change); BC §12.4 A1 C9 / AcceptedResultVersion (SingleAnnotator); ReconciliationPolicy.targetOneHandling AC-R4a-31r, 52, 54, 55; AC-R6-08r; PI-R2a-01r; INV-07; C9-T13r Stream D (RS); R4a, conversion; F4 T-RS-00, T-RS-01, T-RS-02
D4-03 Second-person checking is one-candidate human reconciliation; no Verified engine (OS-A28) Decided-amended RS §5.1 C9, C14 / ReconciliationPolicy.targetOneHandling = RequireHumanReconciliation AC-R3d-09; AC-R4a-49r; AC-R5b-24; C9-T13r Stream D (RS); R4a; F4 T-RS-00, T-RS-01, T-RS-02
Q-36 No ordinary self-reconciliation by default; explicit override grants; current authority for new admissions Decided RS §5.4 C9, C10 / self-reconciliation override grant AC-R4a-05, 28r, 51 Stream D (RS); R4a, R4p; F4 T-RS-00, T-RS-01, T-RS-02
Q-11 Optional per-form bulk acceptance, off by default, with explicit reconciler confirmation Decided RS §4.5, §5.5 C9 / bulk-acceptance setting (form operational setting) AC-R4a-56 Stream D (RS); increment after R4a pilot exit; F4 T-RS-00, T-RS-09
Q-32 A profile may require an adjudication rationale; off by default Decided RS §5.11 C4, C9 / rationale setting in ScreeningProfileVersion; AdjudicationTask AC-R4p-06 Stream D (RS); R4p; F5 T-RS-00, T-RS-07
Q-04 Completeness follows requiredness with a form override; blank is Not assessed; Unknown and Not reported are answers Decided RS §5.3 C4, C9 / completeness rule in the form version; AcceptedResultVersion AC-R4a-44; AC-R5c-03 Stream D (RS); R4a, R5c; F4 T-RS-00, T-RS-02
Q-35 Legacy reconciliation backfill removed; every conversion dry run checks the no-records premise Removed RS §5.13; BC §4.2 C9, C16 / premise count in the conversion dry run (conversion records) AC-R4a-12r; AC-R6-19, 22 Stream D (RS), L15 (BC); dry runs, conversion trials; F4, F1a T-RS-00, T-RS-01, T-BC-01, T-BC-04
Q-05 Outcome data converts inside the faithful baseline; untouched defaults stay ValueOrDefaultUnknown Decided-amended BC §3.4, §4, §5 C14, C16 / outcome data in the baseline; ValueOrDefaultUnknown AC-O2-01r, 02, 04; AC-R6-19, 26; C14-T04 L15 with Stream E (BC); O2, conversion; F-O, G-ADOPT T-BC-00, T-BC-05
Q-21 Legacy screening maps to a reviewed legacy-compatible profile; an admin confirms its meaning Decided-amended BC §3.4, §5 C4, C16 / legacy-compatible ScreeningProfileVersion; conversion manifest AC-R6-15 L15 with Stream B (BC); conversion (R6); G-ADOPT T-BC-00, T-BC-04
D4-16 Early limited adoption only for complete, validated scopes; universal waves follow Decided-amended BC §5, §10.1 C16 / pilot scope; CanonicalEnrolment; conversion records AC-R6-17r L15 (BC); staging trials, pilots; G-ADOPT per pilot T-BC-00, T-BC-03, T-BC-04, T-BC-07
D4-01 Per-profile Unsure, on in the title/abstract template; not excluded for availability; bounded handling (OS-A16) Decided RS §5.10 C4, C12 / ScreeningProfileVersion (Unsure enabled) AC-R3b-14, 21 Stream B (RS); R3b; F5 T-RS-00, T-RS-06
D4-02 Optional discussion after a revealed conflict; initial observations kept; fallback when unresolved Decided RS §5.12 C3, C4 / ScreeningDiscussion; discussion exposure AC-R4p-08 Stream D (RS); R4p increment; F5 T-RS-00, T-RS-08
Q-22 A primary reason is template and reporting guidance; distinct excluded Studies counted apart from overlapping reasons (OS-A17) Decided-amended RS §5.13; RI §3.3, RI-R05a (counting) C4, C12 / profile reason questions; distinct excluded-Study count AC-R3b-13; AC-R5b-11 Stream B (RS), E (RI); R3b, R5b; F5, F6b T-RS-00, T-RS-06, T-RI-05
D4-13 First failing criterion as the template default; per-profile reviewer choice Decided-amended RS §5.13 C4, C12 / primary-reason rule in ScreeningProfileVersion AC-R3b-13; AC-R4p-09 Stream B (RS); R3b; F5 T-RS-00, T-RS-06
D4-04 Training step with references, scoring, manual assessment, retries and optional group admission (OS-A18) Decided-amended TI §3.1 to §3.6, §5.1 to §5.4 C3, C6, C10, C12 / TrainingStep, TrainingReferenceVersion, TrainingPolicyVersion, TrainingAttempt, TrainingAssessment AC-R5c-11; AC-TR1-01, 10, 13 Stream B (TI); TR1; F1a, F1b, F3, F-TR T-TI-00, T-TI-01, T-TI-02, T-TI-05
Q-18 First reasoner limited to conjunction, containment, disjointness and exhaustiveness; opt-in beta (OS-A19) Decided TI §5.5, §5.6 C13 / ClassificationRuleVersion, InferenceResult AC-C2-04; C13-T05 Stream E (TI); C2 beta; F-C T-TI-00, T-TI-06
Q-19 The Design capability publishes rules; reviewers confirm applicability; normal reconciliation resolves disagreement Decided TI §5.6 C13 / ClassificationRuleVersion (project rules); mapping answers AC-C1-09 Stream E (TI); C2 beta; F-C T-TI-00, T-TI-06
Q-06b Amendments B, E and F: distinct units, coverage disclosure, frozen reports Decided RI §3.1, §3.2 C12 / PrismaFlowSnapshot; report manifest; coverage values AC-R5b-10, 13, 20; FX-PRISMA-03d Stream E (RI); R5b; F6b T-RI-00, T-RI-05, T-SI-05
D4-11 Previous-review box from supplied counts; full updated-review workflow deferred Decided RI §3.4 C12 / supplied previous-review counts in the report manifest AC-R5b-12; AC-P1-18 Stream E (RI); R5b; F6b T-RI-00, T-RI-05
D4-05 Versioned search documentation; protocol record with append-only amendments Decided RI §3.6, §3.7 C4, C12, C22 / SearchDocumentationVersion, ProtocolRegistration, ProtocolAmendment (PROPOSAL names) AC-R3b-15; AC-P1-14; C22-T17 Stream E (RI); P1, R3b; F-P, F5 T-RI-00, T-RI-01, T-RI-02
D4-07 Explicit Sought, Retrieved and Not retrieved actions; a PDF never confirms retrieval Decided RI §3.8 C12 / retrieval actions (Sought, Retrieved, Not retrieved) AC-R5b-18; AC-P1-11; C12-T09 Stream E (RI); P1; F-P T-RI-00, T-RI-01
D4-09 Analysis-ready export, codebook and selected RIS; no effect sizes in SyRF Decided RI §3.9 C11, C12 / ExportManifest; codebook AC-X1-01 to 03; AC-X1-CONF; FX-X1 Stream E (RI); X1; F6a T-RI-00, T-RI-08
D4-10 Estimated-from-graph provenance now; digitisation after pilots Decided RI §3.9 C12, C14 / estimated-from-graph provenance on observations AC-O1-10 Stream E (RI); O1; F-O T-RI-00, T-RI-07
D4-14 Answer imports later; external and AI-model screening sources count by ScreeningSourcePolicy (OS-A20) Decided-amended RI §3.10 to §3.14 C3, C22 / ScreeningSourcePolicy, ExternalScreeningRun, ExternalScreeningDecision; imported provenance AC-XS1-01; AC-XA1-01 Stream E (RI); XS1, XA1 after GA; F-XS, F-XA T-RI-00, T-RI-09, T-RI-10
D4-15 Accepted-answer branching between steps outside MVP; reconciled-answer filter clauses stay Deferred (beyond MVP) SP §3.4, §10.3; TI §5.6 (TI-R36) C6 / none in this rollout (branching deferred); reconciled-answer clauses in StageStudyFilterVersion No criterion in this rollout; the floors are stated in acceptance criteria §4.36 Stream B (SP); BR1 deferred, filter clauses an R4a increment (PROPOSAL); none T-SP-00, T-SP-08, T-SP-10
D3-03 Labels accepted; "Draft auto-saved" versus "Version checkpoint saved", illustrative (OS-A21) Decided-amended UX §3.2; RD §4.2, §9.1 (status meaning) C5, C17 / save-status states (copy deck) UI-11; AC-R2a-46, 47 Stream C (UX); R2a; F1c T-UX-00, T-UX-02, T-UX-03
D3-04 Material 3 sentence case Decided UX §3.2 C17 / copy deck (sentence case) UI-5; UI-11 Stream C (UX); copy deck; F1c T-UX-00, T-UX-02
D3-05 Full annotation and screening on phones, tablets and desktops at launch; PWA exploration beyond MVP (OS-A22) Decided-amended UX §3.3, §3.11 C17 / no new entity (device support for existing forms) AC-ALL-07; UI-6; UI-12; AC-R2a-48; AC-R3a-29; AC-R4a-61; AC-TR1-14; INV-18 Stream C (UX); R2a, R3a; F1c, F3 T-UX-00, T-UX-03, T-UX-04
D3-06 Legacy screens refreshed with compatible features; workflow semantics unchanged (OS-A23) Decided-amended UX §3.4 C17 / compatibility register (UX §3.4) AC-GA-09 Stream C (UX); by GA; F1c T-UX-00, T-UX-07
D3-07 My work, cross-project tab and global badge with notifications muted; landing page deferred Decided UX §3.5 C17 / read-time My work counts AC-ALL-33; AC-R3c-11; AC-R4a-47; C17-T06 Stream C (UX); R3c, R4a, landing page after GA; F3 T-UX-00, T-UX-05
D3-08 Current tester panel; consent-based timing telemetry without answer content Decided UX §3.6 No contract: a UX brief item / TelemetryConsent, PilotTimingEvent (PROPOSAL) AC-ALL-20, 25; AC-UX-03; AC-R4a-60; AC-TR1-15; PI-ALL-02 Stream C, L17 (UX); from R2a pilots; F1c T-UX-00, T-UX-08
D3-12 Search withdrawal keeps history; reversible project deletion and restoration (OS-A25); permanent erasure unapproved Decided-amended ACD §3.3, §4.5, §4.6; RI §3.5 (search withdrawal) C12, C16 / Project.deletionState, ProjectDeletionRecord, ProjectRestorationRecord; search withdrawal event AC-R2a-52, 57; AC-P1-16r Deletion programme, Stream D (ACD); X-DEL, P1, before R6; F3, F-P T-AC-00, T-AC-03, T-RI-01, T-BC-05
D4-20 Contributions stay valid after access loss; admin exclusion by form, profile, stage or project (OS-A24) Decided-amended ACD §3.2, §4.3 C5, C10 / ContributionExclusion AC-R1b-10; AC-R2a-45r, 49; AC-R3a-56; AC-R3b-24; AC-R4a-62; AC-R4p-12 L8 with Streams A, B (ACD); R1b, R2a to R4p; F4 T-AC-00, T-AC-01, T-AC-02
D3-22 Informative, permission-aware email; answers and free text configurable (OS-A26) Decided-amended ACD §3.5, §4.9 C15 / NotificationContentPolicy AC-ALL-30r, 32 Notification programme, Stream D (ACD); before production email; F1b, G-NOTIF T-AC-00, T-AC-05
D3-24 Per-project email mute; in-app notices kept Decided ACD §3.6 C15 / NotificationEmailPreferences (muted projects) AC-ALL-31 Notification programme, Stream D (ACD); before production email; F1b, G-NOTIF T-AC-00, T-AC-05
D3-25 Conversations as permissioned audit records outside answer exports and agreement statistics Decided ACD §3.8 C3, C9, C11 / StudyConversation AC-R5a-12 Stream D (ACD); R4a, R5a; F4 T-AC-00, T-AC-07
D4-17 Outdated-answer handling configurable: warn and allow Complete (default) or block Decided-amended RS §5.8 C4, C5, C9 / outdated-answer mode in the form version AC-R2d-15r Stream A with D (RS); R2d; F4 T-RS-00, T-RS-05
D4-19 Random serving by default; blinded, dynamic reviewer-pool browsing within a stage (OS-A27) Decided-amended SP §3.6, §4.5; RS §5.6 C6, C10 / ReviewerStudyPool (derived); browsing setting AC-R3a-41, 49; AC-R3c-20; AC-R4a-48r Stream B (SP); R3c opt-in slice; F3 T-SP-00, T-SP-07
D2-01 Publication may create attributable generated session versions; reverses the round-2 "publication writes no evidence" proposal Decided-amended RD §3.15, §4.8 C1, C4, C5 / generated session versions (PublicationGenerated) AC-R2c-02r, 05, 13, 20r, 33; AC-R2d-12r; FX-PUB-10K; INV-02; C4-T13r; C5-T10r Stream A (RD); R2c; F1a, F2 T-RD-00, T-RD-04, T-RD-05
D2-02 Compatibility belongs to immutable question versions; SyRF suggests, the publisher declares; corrections use guided rollback and republication Decided-amended RD §3.4, §4.13 C2, C4, C9 / compatibility on the immutable question version AC-R2c-21r, 28; AC-R2d-11; AC-R4a-33; AC-R5c-08; C2-T07; C4-T07r; C9-T19 Stream A (RD); R2c, R2d; F1a, F2 T-RD-00, T-RD-04, T-RD-06
D2-05 The standard reviewer target is part of the immutable form version (OS-A12); every other setting is classified in the brief Decided-amended (in part) RD §3.5 C4 / FormVersion.standardTarget; the D2-05 settings classification AC-R2a-33r; AC-R2c-29; C4-T18 Stream A (RD); R2a; F1a T-RD-00, T-RD-01
D2-07 Form-owned inactivity timeout and per-reviewer in-progress limit; one place across tabs and routes; expiry keeps the draft Decided RD §3.11, §4.6; SP §3.11 C5, C7 / form inactivity timeout and in-progress limit AC-R2a-37r; AC-R2b-03, 10r; AC-R3a-37, 40r; PI-R2b-02; C7-T12 Streams A, B (RD, SP); R2b; F1a T-RD-00, T-RD-01, T-RD-03, T-SP-02
D2-08 One shared session and place across tabs and devices; connections tracked separately; base-version checks; take-over presentation a brief detail Decided RD §3.10, §3.11 C5, C7 / SessionDraft, SessionDraftChange; connection records AC-UX-06; AC-R2a-06r, 37r; AC-R2b-03; FX-DRAFT-01 to 10; C5-T08r Stream A (RD); R2b; F1a T-RD-00, T-RD-01, T-RD-03
D2-12 One consolidated current Study with immutable history and reversible unmerge (OS-A29) Replaced DM (whole specification) C1, C21 / Study (state, currentVersionId), StudyVersion, StudyMerge, StudyUnmerge, MergeConflictTask, CurrentEvidenceView AC-R5b-29; AC-P2-04r, 05r; FX-PRISMA-07ar; INV-14; C12-T11r Stream E with A (DM); P2a to P2c; F-P T-DM-00, T-DM-01, T-DM-02
D2-14 Account deletion disables access and keeps named attribution; identity erasure not decided Decided-amended ACD §3.1 C11 / Investigator deactivation; named attribution kept AC-R1b-10; AC-R2a-30r; AC-R5a-09; C11-T05 L8 (ACD); R1b; F1a, F1b T-AC-00, T-AC-01
D2-15 One application-wide CAMARADES catalogue; versioned copies with provenance; publication requests Decided-amended ACD §3.4, §4.7 C4, C10 / CatalogueItem, CatalogueItemVersion; copy provenance AC-R1a-10r Stream A with L8 (ACD); R1a, R3b, C1, O1; F1a, F1b T-AC-00, T-AC-04
D2-16 No size-based exclusion; the largest project is an acceptance case Replaced RD-R33, RD §11; UX §3.3 C1 / E28 limits engineered for the largest project; no size ceiling AC-R2a-22r; AC-R6-25; FX-MAXFORM; INV-18 Streams A, C (RD, UX); R2a; F1a T-RD-00, T-RD-02, T-UX-03
D3-14 Add missing staging seeds; prefer preserving staging data; justified staging changes allowed; never production Decided UX §3.12 No contract: S0 tooling / seed-if-absent job (S0-4) AC-S0-06; PI-XS1-01 L17, Stream A (UX); S0; G0 T-UX-00, T-UX-01
D3-15 Firefox, WebKit and touch coverage Decided UX §3.12 No contract: S0 tooling / Playwright browser and touch projects (S0-7) AC-ALL-07; AC-R1a-12; AC-R4a-32 L17 (UX); S0; G0, F1c T-UX-00, T-UX-01
D2-03 A data-type or multiplicity change is an incompatible version of the same question Engineering contract (no owner question) RD-R30 C4 / question version (data type, multiplicity) AC-R2c-26; C4-T19 Stream A (RD); contract only; F1a T-RD-00, T-RD-01
D2-04 A stage binds the form identity; the live route presents the session's resolved version Engineering contract (no owner question) RD-R31 C6, C5 / stage binding to the form identity; the session's resolved version AC-R2b-15 Stream A (RD); contract only; F1a T-RD-00, T-RD-01
D2-06 System questions stored as versioned data and adopted through a form publication Engineering contract (no owner question) RD-R32 C4 / SystemQuestionVersion AC-R2a-23; C4-T12 Stream A (RD); contract only; F1a T-RD-00, T-RD-01
D2-09 Shared-question accepted answers across two forms; recommendation unchanged: the second form's reconciler may revise with a new snapshot Open owner decision (T-OI-01) RD §4.14, §12 C9 / StudyGold snapshots for a shared question AC-R4a-43; C9-T15 Stream A (RD), owner; R2d; F1a shape, F4 T-OI-01, T-RD-00, T-RD-06
Q-23 Apply the reporting-unit distinction; grouping of distinct reports deferred Brief item (carry-forward alignment) RI §3.1; DM §4.12 C12 / reporting units; reportIdentityCoverage (PROPOSAL) AC-R5b-13 Stream E (RI); P1, R5b; F-P, F6b T-RI-00, T-RI-01, T-RI-05
D4-08 Prepared multi-source links; Study-owned work; distinct-report grouping deferred Brief item (carry-forward alignment) RI §3.1; RD §3.3; DM §4.12 C12, C21 / StudyVersion reference links with sourceDocumentKey AC-R5b-15r Stream E with A (RI, DM); P1; F-P T-RI-00, T-RI-01, T-RD-09
D3-17 Capacity cap separate from the target; form baseline; no eviction; cap defaults proposed only Brief item (carry-forward alignment) SP §3.11 C4, C7 / CapacityCap, kept apart from EffectiveTarget AC-R2b-16; C7-T05 Stream B (SP); R2b; F1a T-SP-00, T-SP-01, T-SP-02
D3-18 Form-owned timeout and in-progress limit; stage-derived rules removed Brief item (carry-forward alignment) SP §3.11 C7 / form-owned timeout and in-progress limit AC-R2b-10r Stream B (SP); R2b; F1a, F3 T-SP-00, T-SP-01, T-SP-02
D2-10 Tested publication active-work protection; measured pause and operation limits Brief item RD §7, §12 C4, C18 / publication operation records; drain and per-form pause AC-R2c-06, 15, 33; AC-R3c-13; C18-T05 Stream A (RD); R2c; F1a, F2 T-RD-00, T-RD-04, T-RD-05
D2-13 Isolated point-in-time recovery specification and rehearsal Brief item BC §8.4, §12.1; DM §8 (separate from unmerge) C11, C21 / recovery manifest (conversion records) AC-R2a-29; AC-R5a-11; AC-R7-02; C11-T09 L15 with Stream A (BC); rehearsal at the R2a ship gate and before any production pilot; F1a T-BC-00, T-BC-02
D3-01 Material 3 roles and themes, dark-mode and staging checks, visual baselines Brief item UX §12 C17 / no stored entity (visual roles and themes) UI-3 Stream C (UX); each release; F1c T-UX-00, T-UX-02
D3-02 Design review checkpoints and risky-screen previews Brief item UX §12 No contract: a design-review schedule in each brief / no entity UI-8 Stream C (UX); each release's design review; F1c T-UX-00, T-UX-02, T-DH-04
D3-09 Paused eligibility programme aligned with the filter and step model Brief item SP §12.1 C6 / admission reasons; the eligibility truth table AC-R3a-03, 33; PI-R3a-02 Stream B (SP); R3a; F3 T-SP-00, T-SP-03
D3-10 Source-pinned statistics, protected pilots, profile granularity; production readiness provisional Brief item RI §3.17 C8 / pinnedStatisticsRead (PROPOSAL) AC-R2c-04, 08, 17; AC-R3b-12; PI-R2a-05; PI-R2c-01; PI-R3b-01; C8-T02 Stream E with B (RI); R2c, R3b; F2, F5 T-RI-00, T-RI-04
D3-11 Rebuildable agreement store with a source watermark and measured budget Brief item RI §3.16 C8 / AgreementResult (derived) with a source watermark AC-R5c-09 Stream D (RI); R5c; F4 T-RI-00, T-RI-06
D3-13 Allocation and batch contracts; release, pool entry, review start and completion as distinct events Brief item SP §3.7, §12.1; RD §3.12 (additional-review clause) C7, C12, C20 / WorkFirstReleased; allocation and batch contracts AC-R2a-41; AC-R3a-09, 10; AC-R3c-17, 19; AC-R4a-38r; AC-P2-35; PI-R2b-01; FX-PRISMA-03b; C7-T07, 09r; C12-T02 Stream B (SP); R3a, R3c; F3, F-A T-SP-00, T-SP-03, T-SP-05
D3-16 Shared-form capacity piloted before broad rollout Brief item SP §12.1 C7, C16 / capacity claims; tracking scope AC-R2b-14; AC-T-09r; PI-R4a-01 Stream B (SP); X-CLAIMS pilot; F1a, F3 T-SP-00, T-SP-09
D3-19 Annotation place reserved at personal Include; screening kept when no place is free Brief item SP §4.6, §12.1 C6, C7 / dependent capacity claim at personal Include AC-R3a-25 Stream B (SP); R3a; F3 T-SP-00, T-SP-04
D3-20 Active counts and own place for reviewers; Monitor names; blinding respected Brief item SP §6, §12.1 C7, C10 / presence disclosure (Monitor) AC-ALL-03; AC-R2c-35; AC-R3a-51; AC-T-08 Stream B (SP); R3a; F1b, F3 T-SP-00, T-SP-04
D3-21 Notification environment, kind-family and pilot gates; test sink; delivery pause Brief item ACD §3.9, §12.1 C15 / enablement gates; delivery pause AC-ALL-29; PE-08; PI-ALL-05 Notification programme (ACD); before any notification enablement; G-NOTIF T-AC-00, T-AC-08
D3-23 Notices resolve with the work; unread counts consistent; history kept Brief item ACD §3.7, §12.1 C15, C17 / inbox notice resolution AC-R3c-12 Stream D (ACD); R3c, R4a, R4b; F3 T-AC-00, T-AC-06
Q-17 Event-count field specification and the meaning of "variation" Specialist input RI §12 C14 / event-count schema (awaits T-SI-01) AC-O1-09 Specialist; Stream E records it (RI); O1; F-O T-SI-01, T-RI-00, T-RI-07
Q-16 Denominators, percent agreement, statistical review of multi-rater formulas Specialist input RI §3.16, §12; RS §5.7, §5.12 (markers) C3, C12 / AgreementResult; exposure markers AC-R5c-06 Specialist; Stream D (RI); R5c; R5c ship gate T-SI-02, T-RI-00, T-RI-06
D4-12 Initial independent observations; per-profile screening agreement Specialist input RI §3.16, §12; RS §5.7, §5.12 (markers) C3, C12 / initial-observation markers; AgreementResult AC-R5c-06 Specialist; Stream D (RI); R5c; F1a markers, F4 T-SI-02, T-RI-00, T-RI-06
D4-06 Methodologist curation of the SYRCLE, CAMARADES and ARRIVE Essential 10 templates Specialist input RI §12 C4 / CatalogueItemVersion (curated templates) AC-R1a-09, 11 Methodologists (RI, ACD); catalogue publication (R1a); F-O part T-SI-03, T-RI-00, T-AC-04
D4-21 ASySD parity and performance method; F1 and throughput figures proposed only Specialist input RI §3.15, §12 C12, C21 / parity evidence only (no entity) AC-P2-01r, 13; PI-P2-01; FX-ASYSD Specialist; Stream E (RI); P2a; F-P, P2a ship gate T-SI-04, T-RI-00, T-RI-03
OS-A01 Collaborative question-management drafts: presence, live updates, conflicts, audit (supplements D2-11) Decided RD §3.7, §4.7; UX §3.8 C4, C10 / DesignDraft, DesignDraftChange; presence AC-R2c-34 Streams A, C (RD, UX); R2a, R2c; F2 T-RD-00, T-RD-02, T-RD-05, T-UX-06
OS-A02 Reconciliation blinding owned by the form or profile, with unpredictable candidate ordering (supplements Q-28, Q-30) Decided RS §3.5, §5.6 C9 / form or profile blinding; reconciliation presentation mapping AC-R4a-08, 30r, 48r, 57, 58; AC-P2-28; FX-BLIND; INV-16 Stream D (RS); R4a, R4p; F4, F5 T-RS-00, T-RS-01, T-RS-03
OS-A03 No cross-Study identity continuity in blinded reconciliation Decided RS §5.6 C9 / context-local ReviewerAlias AC-R4a-21, 48r, 57; FX-BLIND Stream D (RS); R4a, R4p; F4, F5 T-RS-00, T-RS-03
OS-A04 Reconciled-answer hints and explicit click-to-fill; step hide-only override; supersedes automatic prefilling Decided RS §3.6, §5.7 C3, C9 / HintExposure, HintAdoption AC-R4a-42r, 59; INV-07 Stream D (RS); R4a; F4 T-RS-00, T-RS-04
OS-A05 Already-started work may finish after any filter-driven pool departure by default; admin restriction, placement still to specify Decided SP §3.9; SP-AMB-01 C6 / continuation setting (placement PROPOSAL, SP-AMB-01) AC-R3a-46, 47; FX-POOL Stream B (SP); R3a; F3 T-SP-00, T-SP-04
OS-A06 A result produced through a stage may change its own pool: commit, then recalculate membership Decided SP §4.2, §9.2 C6, C20 / StagePoolDeparted with its cause AC-R3a-05, 44; C20-T03 Stream B (SP); R3a; F3 T-SP-00, T-SP-04, T-SP-05
OS-A07 Targeted pool-membership history; current pools stay query-time Decided SP §3.5, §4.1 to §4.4 C20 / StagePoolBaselineMember, StagePoolEntered, StagePoolDeparted AC-R3a-52; INV-15; C20-T01, 02, 05, 06, 08, 16 Stream B (SP); R3a; F1a, F3 T-SP-00, T-SP-05
OS-A08 Admin explanation of review activity and inactivity over time Decided SP §3.14; UX §3.7 C20 / explanation queries over HistoryEvent AC-R3a-50, 51; C20-T15 Streams B, C (SP, UX); R3a; F3 T-SP-00, T-SP-05, T-UX-06
OS-A09 Historical pool coverage for flow diagrams; actual review through the stage is the reporting priority Decided (box mapping is specialist input T-SI-05) SP §3.13; RI §3.3 C12, C20 / pool-history datasets; stage measures AC-R3a-53; AC-R5b-26 to 28, 30; AC-R6-30; C20-T11, 13, 14, 17 Streams B, E (SP, RI); R3a, R5b; F3, F6b T-SP-00, T-SP-05, T-RI-05, T-SI-05
OS-A10 Explicit entry justification for every pool entry Decided SP §3.5 C20 / entry justification on StagePoolEntered AC-R3a-19; C20-T10 Stream B (SP); R3a; F3 T-SP-00, T-SP-05
OS-A11 Structured, queryable history events and the required event queries Decided SP §3.12, §3.13 (C20) C20 / HistoryEvent envelope AC-XS1-10; FX-POOL; INV-15; C20-T04, 07, 09, 12, 13, 16 Stream B (SP); R3a; F1a, F3 T-SP-00, T-SP-01, T-SP-03, T-SP-05
OS-A12 The standard reviewer target versions the form Decided RD §3.5, §4.9; RS §4.6 C4, C7 / FormVersion.standardTarget, StudyTargetOverride, EffectiveTarget AC-R2a-33r; AC-R2c-29 to 31; AC-R4a-52, 55; AC-R6-14r; FX-TARGET; INV-01, 06 Stream A (RD); R2a, R2c, R4a; F1a, F2, F4 T-RD-00, T-RD-01, T-RD-02, T-RD-05, T-RD-08
OS-A13 Configurable screening tie adjudication; member or group adjudicator assignment Decided RS §3.9, §5.11; SP §5.12 C6, C9 / AdjudicationTask, AdjudicatorAssignmentVersion; tie policy in ScreeningProfileVersion AC-R3a-54; AC-R3b-22, 23; AC-R3d-09; AC-R4p-04, 10, 11; AC-XS1-07; FX-SCREEN-POLICY Stream D with B (RS, SP); R3b, R4p; F3, F5 T-RS-00, T-RS-06, T-RS-07, T-SP-03
OS-A14 R4: explicit legacy activity mapping and adoption guidance in the wizard Decided BC §3.3, §4.3, §10.3 C16 / conversion wizard mapping; conversion manifest AC-R3a-16; AC-R6-20, 21; FX-LEGACY L15 (BC); conversion trials; F1a, G-ADOPT T-BC-00, T-BC-01, T-BC-03, T-BC-04
OS-A15 R4: universal faithful baseline conversion, then optional in-engine redesign; supersedes the permanent-archive option Decided BC §3.1, §4.6, §4.7, §10 C16, C20 / conversion records; legacy-gap states AC-R6-04, 08r, 14r, 17r, 19, 23 to 33; AC-RW1-01; FX-LEGACY; FX-CONVERT; INV-09, 17; C20-T17 L15 (BC); pilots, R6, R7, RW1; F1a, G-ADOPT, G-RETIRE T-BC-00, T-BC-01, T-BC-06 to T-BC-10
OS-A16 S1: bounded Unsure handling and adjudication fallback Decided-amended (unstated transition rows are brief items) RS §5.10 C4, C22 / Unsure transition table in ScreeningProfileVersion AC-R3b-14, 21, 23; AC-XS1-08; FX-SCREEN-POLICY Streams B, D (RS); R3b, R4p; F5 T-RS-00, T-RS-06, T-RS-07
OS-A17 S3: the exclusion-reason template is guidance and sets no question-count limit Decided RS §5.13; RI §3.3, RI-R05a C4, C12 / profile reason questions; distinct excluded-Study count AC-R3b-13; AC-R3d-09; AC-R5b-11; FX-SCREEN-POLICY Streams B, E (RS, RI); R3b, R5b; F5, F6b T-RS-00, T-RS-06, T-RI-05
OS-A18 S4: training with reference answers, scoring, manual assessment, retries and optional group admission Decided TI §3.2 to §3.6, §5.2 to §5.4 C3, C6, C10, C20 / the training entities (as D4-04) AC-R3a-54; AC-TR1-01 to 15; PI-TR1-01; FX-TRAIN; C20-T18 Stream B (TI); TR1; F3, F-TR T-TI-00 to T-TI-05
OS-A19 S5: inference behaviour and the project-designer opt-in beta, off by default Decided TI §3.7, §3.9, §5.5, §5.6 C13 / beta opt-in record; InferenceResult AC-C2-01, 05, 07 to 12; AC-R6-33; PI-C2-01 Stream E (TI); C2 beta; F-C T-TI-00, T-TI-06 to T-TI-08
OS-A20 E3: external screening and AI-model-generated screening decisions; model metadata ownership; source identity; terminology Decided RI §3.11 to §3.14 (C22) C22 / AIScreeningModelConfiguration, ScreeningSourcePolicy, ExternalScreeningRun, ExternalScreeningDecision AC-R5c-06; AC-R5b-22; AC-XS1-01 to 12; PI-XS1-01; FX-AISCREEN; C22-T01 to 17 Stream E with B (RI); XS1 after GA; F5 slot, F-XS T-RI-00, T-RI-09
OS-A21 U1: "Draft auto-saved" versus "Version checkpoint saved" (illustrative wording) Decided UX §3.2 C5, C17 / save-status states UI-11; AC-R2a-46, 47 Stream C (UX); R2a; F1c T-UX-00, T-UX-02, T-UX-03
OS-A22 U2: PWA exploration beyond MVP, including possible caching of allocated studies; no offline writes Deferred (exploration beyond MVP) UX §3.11 No contract: exploration only / no entity (feasibility report) AC-PWA1-01 Stream C (UX); PWA1 exploration; none T-UX-00, T-UX-09
OS-A23 U2: compatible improvements on legacy screens without a workflow-semantics change Decided UX §3.4 C17 / compatibility register AC-GA-09, 11 Stream C (UX); by GA; F1c T-UX-00, T-UX-07
OS-A24 O1: admin-controlled contribution exclusion Decided ACD §3.2, §4.3, §4.4 C5, C10, C20 / ContributionExclusion, ContributionExclusionLift (PROPOSAL) AC-R1b-10; AC-R2a-45r, 49 to 51; AC-R3a-56; AC-R3b-24; AC-R4a-62; AC-R4p-12; FX-EXCL L8 with Streams A, B (ACD); R2a, R3a, R3b, R4a, R4p; F4 T-AC-00, T-AC-02
OS-A25 O1: reversible project deletion and restoration Decided ACD §3.3, §4.5, §4.6 C16 / Project.deletionState, ProjectDeletionRecord, ProjectRestorationRecord AC-R2a-52 to 57; AC-R6-32; FX-PROJDEL Deletion programme (ACD); X-DEL, R2a, R3a, before R6; X-DEL T-AC-00, T-AC-03, T-BC-05
OS-A26 O2: informative, permission-aware emails with configurable answer and free-text detail Decided ACD §3.5, §4.9 C15 / NotificationContentPolicy AC-ALL-30r, 32; AC-P2-29 Notification programme (ACD); before production email; F1b, G-NOTIF T-AC-00, T-AC-05
OS-A27 O4: optional, dynamic, blinded reviewer-study-pool browsing within a stage Decided SP §3.6, §4.5 C6, C10 / ReviewerStudyPool (derived) AC-R3a-49; AC-R3c-20; INV-16 Stream B (SP); R3c opt-in slice; F3 T-SP-00, T-SP-07
OS-A28 R1: one candidate plus human reconciliation instead of a separate verification engine Decided RS §5.1 C9 / ReconciliationPolicy.targetOneHandling AC-R4a-49r Stream D (RS); R4a; F4 T-RS-00, T-RS-01, T-RS-02
OS-A29 Consolidated, atomic, reversible duplicate merge; replaces D2-12's alias Decided DM (whole specification; C21) C21 (with C12, C20) / StudyMerge, StudyUnmerge, MergeConflictTask, CurrentEvidenceView AC-R5b-29, 30; AC-P2-04r, 05r, 06r, 18 to 35; AC-XS1-05; FX-PRISMA-07ar; FX-MERGE; INV-14; C12-T11r; C20-T14; C21-T01 to 24 Stream E (DM); P2a, P2b, P2c; F-P T-DM-00 to T-DM-05
OS-A30 Deliverable: the design-prototype handoff specification for iterating SyRF Prototype v10; no design session is messaged Decided (process requirement) Design-prototype handoff No contract: a process deliverable / no entity No release criterion: a process deliverable (design-prototype handoff, T-DH-00); UI-8's prototype validation consumes the iterated prototype Programme lead, Stream C (DH); design input before W0 and F1c; none T-DH-00 to T-DH-04

Check. The matrix has 119 rows: 89 decisions (52 + 15 + 22) and 30 amendments. Every one of the 119 rows has at least one specification section and at least one tracker row. 117 rows list acceptance criteria; D4-15 and OS-A30 state why they have none. 113 rows name a contract; the six listed above state why they name none. Counted by script from the table above on 5 October 2026.

6. Amendments by cross-cutting theme

For each theme, the specification sections that define it come first, then every package document and section whose current text carries it. The document lists were produced on 5 October 2026 by searching the package for each theme's own terms, which appear nowhere in the package on main (0fcce8fb4); every section listed was therefore added or amended for the owner session. A listed section may hold the new rule, an owner-session note on older text, or a cross-reference. "Status note" is a document's opening status paragraph; "owner-session record" is its closing amendment record. The specification overview §5.4 and the specifications' §13 give the amendment inputs.

6.1 Target versioning (OS-A12; D2-05)

The standard reviewer target is part of the immutable form version; Study × form overrides keep their own history; additional-review requests raise the effective target.

  • Specifications: RD §3.5, §3.12, §3.13, §4.9 to §4.11, §9.4, §9.5, §14 (RD-R16 for overrides at a new standard target); RS §4.6, §5.1, §9.4; SP §3.11, §5.8 (cap apart from the effective target); DM §4.4 (target confirmation at merge); BC §3.4 (target row), §14.
  • Search terms: standardTarget, "standard target", target-only publication, StudyTargetOverride, OS-A12.

Package documents and sections:

6.2 Consolidated, reversible duplicate merge (OS-A29; D2-12)

One consolidated current Study after a merge, originals kept as immutable history, atomic activation and a reversible unmerge with carry-forward choices.

  • Specifications: DM (whole specification, §14); RD §3.1, §3.2 (Study state and StudyVersion); SP §3.7 (InheritedThroughMerge), §4.4, §9.11; RS §3.2 (origin), §3.8 (MergeResolved); RI §3.1, §3.3, §3.15, §14; contract C21.
  • Search terms: "consolidated Study", StudyUnmerge, "unmerge", C21, OS-A29.

Package documents and sections:

6.3 Universal baseline conversion (OS-A14, OS-A15; R4)

Staging trials, production pilots, then faithful conversion of every remaining project; later optional redesign; legacy-writer retirement as its own milestone.

  • Specifications: BC (whole specification, §14); RS §3.4, §5.1, §12 (converted target-one forms, NoAcceptance); SP §3.5.5, §5.11; TI §5.5 (the inference beta is never switched on by conversion); UX §3.4 (unconverted projects and the compatibility register), §3.5 (conversion findings in My work); ACD §2 (deleted projects convert in their deleted state, BC-R38).
  • Search terms: "universal baseline", "baseline conversion", "universal wave", OS-A14, OS-A15.

Package documents and sections:

6.4 Stage pools, steps and history (Q-15; OS-A05 to OS-A11)

The stage study filter defines the pool, steps carry dependencies, and structured history explains entry, departure, review start and completion.

  • Specifications: SP (whole specification, §14); RI §3.3, §3.5; DM §3.8; BC §3.3, §3.4, §4.5 (baseline pool events); TI §3.1, §5.1 (training writes no pool events); UX §3.7 (explanation screens); ACD §3.2, §4.3, §4.6 (exclusion and restoration effects); contract C20.
  • Search terms: StagePool*, HistoryEvent, "stage study filter", WorkFirstReleased, ReviewStartEligibility, C20, OS-A05 to OS-A11.

Package documents and sections:

  • Integrated plan: §1, §4, §5.4, §5.5, §5.7, §5.8, §5.12, §6.1, §10, §11.
  • Domain model: status note, §1, §2, §2.1, §4.2, §4.4, §4.8, §4.9, §6.2, §6.3, §7.1, §7.2, §8, §9, §10, §11, §12, §13, §14, owner-session record.
  • Contracts: status note, §1, §2, C1, C3, C6, C7, C11, C12, C19, C20, C21, C22.
  • Versioning model: §2, §5.3, §5.5, §8.12, §10.4, §14, §16.2.
  • Consistency model: status note, §3.3, §4.1, §4.2, §5.2, §5.5, §7.2, §7.7, §7.8, §7.11, §8.3, §8.6, §11.4, §12, §13.1, §13.2, §14, §18, §19.1, §19.3, owner-session record.
  • Migration, adoption and rollback: §3.1, §4, §5, §7, §9.
  • PRISMA amendments: "Summary", amendment A, amendment G, amendment J, owner-session record.
  • UX strategy: §1.1, §4.3, §5.2, §5.4, §5.5, §7.5, §7.8, §7.11, §7.12, §11.
  • Methodology coverage: §1.1, §2, §8.2, §11.1, §11.3, §11.6, §12.2.
  • Acceptance criteria: status note, §1.5, §4.12, §4.14, §4.22, §4.24, §4.31, §4.36 XS1, §4.36 TR1, §7.2, §7.3, §7.4, §7.5, §9.3, §9.6, §9.7, §9.8, owner-session record.
  • Decision register: "Precedence rules used throughout the package", §1.4, §1.15 package table, §1.15 OS-A table, §2, §4, §5.
  • Open questions: Batch B table, D3 table, D4 table, §2, §3.
  • Programme integration: §1, §2.1, §2.2, §3.2, §4.2, §4.3, §5.2, §6.2, §7.4, §12, §14.2.
  • Notifications integration: §3, §4.1.
  • Delivery operating model: §1, §2.4, owner-session record, §3.3, §3.4, §4.3, §5.3, §6.1, resolution record.
  • G0 dossier: §1, §4, App. A, App. D.
  • Source status inventory: §1, §2, §3, §6, §10.
  • UI coverage comparison: §2.2, §2.3, §3, §4, §6.
  • Package README: "Read in this order", "Chris's decisions so far".
  • Rollout plan: §2, §3.1, Phase 1, Phase 2, Phase 4, Phase 6, §5, §6, §7.1, §7.2, §7.6, §10.
  • Implementation tracker: §3, §5.2.
  • Specification overview: §3.6, §3.12, §4, §5.4, §5.5.
  • Design-prototype handoff: §2.7, §2.8, §2.9, §4.2, §5.11, §5.13, §5.20, §6.2, §8, §9.3, §9.6, §9.7, §9.9, §9.11, §10, §12.
  • Owner ledger: "Confirmed decisions", "Confirmed placement (EW1 and BL1)", "Confirmed cross-stage personal-Include dependency (DP1 / OD1)", "DP7 / PR1: confirmed cross-stage default and collective reporting", "Foundations and Batch B (Confirmed)", "Amendments OS-A01 to OS-A30 (Confirmed)", "Earlier entries of this ledger superseded or amended by this session".

6.5 External and AI-model screening imports (OS-A20; D4-14)

External screening sources and AI-model-generated screening decisions, with versioned model configuration, profile source policies, run provenance and their own source class.

  • Specifications: RI §3.10 to §3.14, §10, §14; RS §3.7, §5.10 (Unsure from a model), §12 (source type under blinded adjudication); SP §3.12, §4.4 (accepted external decisions as pool causes); UX §3.5 (runs awaiting acceptance in My work); contract C22.
  • Search terms: "AI-model", AIScreeningModelConfiguration, ScreeningSourcePolicy, C22, XS1, OS-A20.

Package documents and sections:

6.6 Publication-generated session versions (D2-01)

Publication may create attributable generated session versions; SF6 applies to them literally.

  • Specifications: RD §3.15, §4.8, §4.13, §9.3, §12 (generation table), §14; RS §5.2 (result versions under target changes).
  • Search terms: "generated session version", "generated version", PublicationGenerated.

Package documents and sections:

7. Remaining inputs

This is the complete list of what still needs Chris or a specialist. It supersedes any longer list elsewhere in the package. Nothing here restarts the questionnaire.

7.1 Now

Input What it is Tracker
G0 approval Chris's approval of the G0 dossier: the plan and its operating model T-G0
Implementation-hold lift Lifting the hold Chris placed on 5 October 2026. A separate decision from G0; neither implies the other T-HOLD
G0-D1 Confirm the recorded reading of D4-18 ("independent of funders"): the plan maps the NC3Rs and SSI RSMF deliverables itself, does not wait for the funders, and keeps the independent WCAG 2.1 AA audit at GA (AC-GA-08) T-G0
G0-D4 to G0-D10 The dormant-PR dispositions in the G0 dossier. Not authorised while the hold lasts: no PR is closed and no harvest-and-close, restack or rebase request goes out. No answer is needed now T-G0

7.2 Before F4

Input What it is Tracker
D2-09 Accepted answers to a question shared by two forms. Recommendation unchanged: the second form's reconciler may revise them with a new snapshot. G0 does not need it. It is wanted before F4 (shared gold); if it is still open, F1a and F4 freeze with both options carried (RD-AE25) T-OI-01

7.3 At brief approval

These are answered by approving the brief or by naming deviations; none needs a separate answer. Each has a recommendation in the specification cited.

Item Where Brief row
The RS §12 owner-visible confirm items: the default target-one handling (recommendation AutoAccept); converted target-one forms carrying NoAcceptance; the Q-36 reading of "explicit override grants"; a reviewer's own Unsure and progression; re-acceptance under AutoAccept; whether the screening-annotation agreement bypass is a profile rule or a case of the unapproved T-POL-03 RS §12 T-RS-00
The full Unsure transition table (the S1 amendment's unstated rows, including all-Unsure) RS §5.10, §12 T-RS-00
SP-AMB-01: where the "finish started work after departure" setting lives (recommendation: a stage default with a step-level restrict-only override, shown with the saved-work setting) SP §12.4 T-SP-00
RD-R16: how Study target overrides interact with a new standard target (recommendation: an explicit keep, adjust or remove choice per override; the default keeps each Study's number and flags redundant or lower overrides) RD §12 T-RD-00
ACD B5: direct project-to-project copying outside the catalogue (recommendation: keep it, with the same provenance) ACD §12.5 T-AC-00
BC A3: the scope of Chris's wave approvals over project manifests (recommendation: the wave approval covers default faithful mappings with no unresolved findings; project-specific choices need the owner or a delegate) BC §12.4 T-BC-00
RS §12: whether the "suspend" treatment for results below a raised target is offered beside the default "keep accepted" (recommendation: offer both, "keep accepted" by default; RD §4.9, RS-R10) RS §12 T-RS-00, T-RD-00
The TI §12 owner-visible items: the trainee feedback disclosure default (recommendation TI-R10: right or wrong per item after assessment, expected answers only after a pass or when no retry remains); whether a live step may also depend on a passed training step (TI-R23, an optional extra beside group admission); the scope of the inference beta (recommendation (a): the beta covers rules and inference, and explicit cohort recording follows its own enablement) TI §12 T-TI-00
Legal review of the joining-terms and account-deletion wording: Chris routes it; it is recorded before the release that shows the text (ACD-AE03) ACD §12.3 T-AC-00
UX A1: holding unacknowledged edits on the device during a connection loss (recommendation: a bounded in-session holding area, cleared at logout, completion and access loss, replayed only against a matching base version) UX §12 T-UX-00

7.4 Specialist inputs

Row What it needs Who Needed before
T-SI-01 The field-level event-count outcome specification (Q-17), including the meaning of "variation" Chris with CAMARADES methodologists; Stream E records it F-O (O1's event-count schema)
T-SI-02 Agreement methods (Q-16, D4-12): denominators, percent agreement, prevalence, initial independent observations, per-profile screening agreement, statistical review of multi-rater formulas, and treatment of machine sources, Unsure, adopted hints and discussion exposure A statistical reviewer through Chris; Stream D The R5c ship gate; any XS1 mixed metric; TR1's training agreement report
T-SI-03 Curation of the SYRCLE, CAMARADES checklist and ARRIVE Essential 10 templates and their applicability (D4-06) CAMARADES methodologists with the catalogue administrator Catalogue publication of curated templates
T-SI-04 The ASySD parity and performance method and thresholds (D4-21); the F1 ≥ 0.99 and 80,000-citations-in-one-hour figures are proposed, neither approved nor achieved A deduplication specialist through Chris; Stream E The P2a ship gate
T-SI-05 PRISMA box mapping for pool history versus actual review through the stage, distinct counting across merge lineage, AI sole-screener exclusions, Unsure, pending adjudication and pre-conversion coverage gaps Methodologists with the RI owner; Stream E F6b (R5b); XS1 reporting

7.5 Policies not approved

No action is required unless Chris wants one of them. Until then nothing depends on them.

Row Policy
T-POL-01 Permanent physical erasure of project data. Ordinary deletion never erases
T-POL-02 A separate identity-erasure process. Named attribution is kept meanwhile; no wording claims legal sufficiency
T-POL-03 Automatic acceptance of several agreeing candidates. Agreement never creates an accepted result by itself; Q-11's bulk acceptance needs an explicit reconciler confirmation

7.6 Everything else

Every other item in the specifications' §12 is a brief-level default, approved with its brief.

7.7 Facts recorded for follow-up

These are recorded facts. None of them is a decision, and none needs an owner answer here.

  • The account-deletion endpoint's unread parameter. DELETE api/account/profile accepts a removePersonalData query parameter and never reads it, so a caller may believe personal data was removed (AccountController.cs:240; source status inventory §1 item 28). D2-14 keeps named attribution; any wording that promises removal needs legal review (ACD §12.3).
  • The deletion ADR number clash. The uncommitted deletion-lifecycle ADR is numbered ADR-014, which docs/decisions/ADR-014-integrated-study-pdf-viewer.md already uses. ADR-021 was free at the first check, but #3961 took it for #3986's messaging ADR on 5 October 2026; ADR-022 is now the next free number, and the deletion ADR is renumbered when committed.
  • The PWA inspection findings. The web manifest is not linked from index.html, is probably not copied into the build, has empty names and points at icon paths that do not match the build; there is no service worker. The app is very likely not installable as a PWA today; this was read, not run, so it stays unverified (UX §3.11; source status inventory §1 item 27). It is an input to the non-MVP exploration (OS-A22); no fix is scheduled.
  • The statistics programme. FEAT-024 gate (b) failed on latency in the idle-host rerun on 3 October 2026 (#3510). Chris's 4 October revision of the statistics soak gate, recorded in a comment on #3510, belongs to the statistics programme and governs X-STATS-b2 there (programme integration §7.1). Production readiness of the materialised statistics stays provisional, and no production date is a commitment.

8. The design-prototype handoff (OS-A30)

What it is. A self-contained design iteration brief, written so that Chris can ask the Claude Design session that made the original prototype to update it with every product decision since 2 October 2026. The owner session added this deliverable in its addendum: restate the final decisions as interaction behaviour, identify the original prototype from the planning sources, and invent no new prototype. The handoff is specifications/design-prototype-handoff.md (prefix DH; tracker rows T-DH-00 to T-DH-04).

The prototype it resolves. The Claude Design pack "SyRF Prototype v10" (folder design_handoff_syrf_v10, supplied on 2 October 2026). The unchanged copy is on Chris's machine at /home/chris/.codex/visualizations/2026/09/23/01a0cbec-0c32-7103-ab5a-bfc05665deb7/syrf-v10-review-2026-10-02/source/design_handoff_syrf_v10/. The owner ledger is the authoritative decision overlay for the interactive review of that pack. SHA-256 values, computed on 5 October 2026 and listed in full in handoff §2.2:

File SHA-256
prototype/SyRF Prototype v10.dc.html 1f940684e0bbd32e4b04b0e48f50ecf2d371c20ade94f51eb1e9c1e188ecdbe6
prototype/Review Page v10.dc.html (byte-identical to Review Form v10.dc.html) 29adb6b5cf383e5b273aaac7f8817a0c446c2dd22474b504d5231306c240bdbc
prototype/Reconciliation Exploration.dc.html 8daf4e3a860407691c09cf3de0602f35cd6c6429323c0cb0b9b3c7ffe261e31c

The pack's documents (README, AGENTS, FEATURES, DECISIONS, RECONCILIATION, IMPLEMENTATION_PLAN and reference/stage-review-page-handoff.md, the Review Prototype v4 and v5 reviewer-page specification) are listed with their checksums in handoff §2.2, which also describes the _ds/ design-system kit.

No design session has been messaged. Neither this package nor the session that wrote it has sent anything to the design session, and no new prototype has been built. Sending the handoff is Chris's decision (T-DH-01); the iteration (T-DH-02), its review against the specifications (T-DH-03) and folding it into F1c (T-DH-04) follow only after that.

The copy-ready prompt is in handoff §13.

9. Validation

Recorded in validation evidence §9: the docs validator passes with no warning from this package; 2,498 relative links and anchors resolve under both slug rules; the counts recompute to 63 + 25 + 1 = 89; all 13 archive checksums match; and a fresh-context verifier's 24 findings (2 Blocker, 4 Major, 18 Minor) are fixed.