A.21:4.5 - Aggregate and action meaning
In ordinary language: the worst mapped result wins. Only after every required application is present and its mapping is known, the technical aggregation is the order-independent join:
abstain <= pass <= degrade <= block.
The join is associative, commutative, and idempotent. abstain is neutral and block absorbs other values, but those algebraic properties do not change the source results.
| Decision | Meaning for the bounded action |
|---|---|
abstain | The applicable profile says this gate makes no decision for this action and names the remaining decision route or absence of one. It grants no permission. It is not used for missing, unknown, failed, or unrun required checks. |
pass | Every required application is present and the current profile accepts the bounded action without an added restriction, within the stated scope and window. |
degrade | The profile accepts only the named restricted or conditional form of the action. The result states the restriction, stop or exit condition, and recheck condition. It is not an unspecified “proceed carefully”. |
block | The profile refuses or holds the bounded action under the current facts and states what change or new result can reopen the decision. |
An optional application affects the aggregate only when the cited profile rule says it does. A required missing or notRun result can map to degrade or block under an explicit rule, never to pass or neutral abstain.