Part B - Design the Repeated Case, Resolve Exceptions and Supply the Result
ADM.5 - Design Reusable Instructions for Administrative Requests
Type: Architectural
Status: Stable
ADM.5:0 - Use this when
Use this pattern when a service owner has an administrative result to supply repeatedly and the applicable policy, but handlers lack a usable instruction for receiving, checking, deciding, providing and closing individual requests. A new reimbursement service, for example, needs more than a form and a list of approvers.
The first useful result is an instruction that a handler and the relevant specialists can apply to an ordinary request, including the action to take when a needed condition fails. Start with one representative request and the condition promised to its recipient. Follow it far enough to identify the decision, actual provision and evidence of completion.
Use an adequate existing instruction directly. This pattern is unnecessary for each later request and does not itself approve a request, appoint a provider or authorize an exception. A missing substantive policy belongs to the person competent to supply it; a form designer cannot fill that gap by choosing convenient fields.
ADM.5:1 - Problem frame
The designer is working on how a class of administrative requests will be handled. The enabled work and requested condition are already sufficiently clear, or ADM.1 can establish them. The supplied policy determines such matters as eligibility, permitted amounts, deciding authority and any mandatory evidence. Actual service participants supply the remaining operational constraints.
The reusable instruction and an individual case have different results. The instruction describes what the handler, decision maker and provider do under stated conditions. In a particular case, those people apply it to actual facts, make any required decision and perform the provision. A completed design cannot establish that any claimant has received a result.
The relevant scope may be small: reimbursing one category of travel expense for one employee population. Add a variant only when it changes the needed input, authority, action or result. A single instruction need not absorb every service that happens to share a portal.
ADM.5:2 - Problem
A service often begins with an application form. Each department adds fields and approvals, yet nobody establishes how the approved request produces a usable result. Handlers then improvise missing evidence rules; applicants repeat information; providers close requests after issuing instructions whose effects remain unknown.
The opposite response leaves all handling discretionary. Skilled staff may resolve familiar cases, but a new handler cannot tell which decisions are already settled by policy, which require a qualified person and which information is actually needed.
ADM.5:3 - Forces
| Force | Tension |
|---|---|
| Repeatability | An instruction should support consistent handling while retaining legitimate variations and exception conditions. |
| Minimum burden | Reuse known facts and decisions while obtaining the evidence the actual decision needs. |
| Institutional authority | A designer can describe a decision and its recipient without possessing the authority to make or delegate it. |
| Usable completion | A provider’s intermediate activity is easy to record; the promised effect may require a different observation. |
| Practical size | One short instruction can be sufficient, while a diagram that omits refusal, uncertainty or recovery is incomplete for those cases. |
ADM.5:4 - Solution
ADM.5:4.1 - Fix the supported result and governing inputs
Name the condition to be supplied, its recipient, applicable time and supported request class. Recover the actual policy and the people authorized to decide, perform and correct the relevant actions. Distinguish a supplied rule from an assumption that still needs its competent source.
Keep the work enabled separate. A travel reimbursement service supplies an authorized reimbursement; it does not determine whether the traveller’s negotiations succeeded. If the policy makes a particular business condition relevant, include that condition and the person or evidence that can establish it.
An unavailable policy, unassigned payment provider or missing qualified test is a design gap. State the exact missing contribution and who can supply it before promising the affected result.
ADM.5:4.2 - Work backwards to the minimum request
For each action-changing condition, identify the fact, evidence or existing result that the handler needs. Reuse a sufficiently current assignment, permission or prior check within its actual scope. Ask the applicant only for information that cannot adequately be recovered and that matters to handling.
Specify how the handler relates the evidence to the actual claimant and request. A receipt must concern this expense; an assignment must cover the relevant person and time. “Upload documents” leaves these questions unanswered. ADM.7 supplies the case check when the correspondence or support is disputed.
Specify where the request enters, how the applicant can correct an ordinary omission, and what the handler returns when the request is outside the supported class. Collect and expose personal information only for the stated handling need under the applicable information rules.
ADM.5:4.3 - Identify the actual decisions and actions
For each consequential branch, name who applies the rule or makes the decision, the conditions used, and what the next participant receives. A direct policy rule may already determine the required response. A case-specific approval remains a decision when the policy requires an authorized person to make it.
Keep the handler’s preparation, a specialist’s judgment, the competent person’s authorization and the provider’s performance distinct. Completing a checklist neither transfers approval authority nor performs payment. ADM.8 resolves a permission question; OPS.5–6 can supply admission or situated continuation when actual handling needs one.
State which independent action may proceed while another condition is pending. An instruction for obtaining a price quote need not inherit the spending authorization required for a later booking unless the applicable rule makes that authorization a condition of the inquiry.
ADM.5:4.4 - Connect authorization to provision and completion
Identify the provider who will perform the authorized action and the input that provider needs. Define completion from the recipient’s promised use: access that works under the grant, accommodation that can be occupied, or funds credited under the applicable payment terms.
Choose evidence adequate for that effect. An issued instruction may establish that the provider was asked to act; it may leave performance unknown. ADM.9 supplies the needed provision and recovery inquiry. ADM.10 reconciles a discrepancy among the obligation, performance and records.
Specify the record returned to each participant: the relevant decision, actual result, effective conditions and any unresolved next action. Use an existing case record where it suffices. Participants need enough correspondence to recover the same case; they need not adopt one universal description of every event.
ADM.5:4.5 - Describe ordinary correction and genuine exceptions
Give the handler the existing response for a correctable omission or an established negative condition. A missing receipt may receive the policy’s correction request. A clearly excluded expense may receive its reasoned refusal and applicable challenge route. Neither outcome requires inventing another discretionary decision.
Use ADM.6 when an actual gap prevents ordinary handling: conflicting facts, an inapplicable rule, unresolved authority, incompatible requirements or provision whose effect cannot be established. Name the competent destination and the bounded question. A transfer to “support” without anyone assigned to resolve it is still a gap.
For potentially duplicate actions, include recovery of the earlier attempt before repetition. The instruction should state what remains permitted while the uncertain effect is investigated, rather than calling the entire service complete or restarting it blindly.
ADM.5:4.6 - Exercise and publish the usable instruction
Walk through a representative supported request with its prospective handler, deciding person, provider and result consumer. Add variations that exercise the actual branches: a correctable omission, a decisive negative condition, an authority gap and an uncertain provider effect.
Ask each participant to recover their next action from the instruction. Repair missing joins and unnecessary requests. A desk walkthrough establishes that the described handling is intelligible under the supplied facts; a trial of actual provision is needed to establish that the provider can deliver the promised condition.
Return the instruction with its supported class, applicable policy, effective conditions and known gaps. Use the organization’s existing place for such instructions. The first real request then uses the applicable instruction; it does not reopen the design without a changed condition or observed defect.
ADM.5:5 - Archetypal Grounding
ADM.5:5.1 - A reimbursement instruction
Suppose policy P permits reimbursement of documented business-travel expenses up to 500 units for employees with an effective relevant assignment. P requires a named finance approver’s case decision; treasury is authorized to pay approved claims. The payment terms define the promised effect as the approved amount credited to the claimant’s designated account. These are supplied conditions for this example, not universal reimbursement rules.
The service owner and participants develop this instruction:
| Question | Instruction for the supported class |
|---|---|
| What enters? | Receive the claimant’s identity, expense, amount, business purpose, receipt and relevant assignment reference. Recover adequate information already held. |
| What is checked? | The handler establishes claimant/assignment/expense correspondence, the applicable category and amount, and whether this expense has already been reimbursed. A disputed claim uses ADM.7. |
| What ordinary correction applies? | Return a missing receipt for the correction P allows. Apply P’s response to an established excluded category, including the available challenge route. |
| Who decides? | The finance approver applies P and makes the required decision for the exact claim and amount. The handler’s completed preparation supplies input to that person. |
| Who performs? | Treasury receives the approved claim and the account information through the authorized channel, then issues the permitted payment. |
| When is provision complete? | Adequate provider evidence establishes the approved credit to the intended account. An instruction acknowledgement alone leaves the effect to be established. |
| What is returned? | The claimant receives the decision and actual provision result or precise remaining condition. Finance and treasury retain the corresponding evidence needed for their duties. |
| What requires resolution? | Conflicting assignment evidence, unclear approving authority or an unknown earlier payment effect goes to its competent resolver through ADM.6. Recover the earlier effect before a possible duplicate payment. |
Later an employee claims 200 units. The supplied assignment and receipt support eligibility, and adequate records establish no earlier reimbursement. The handler prepares the case, the finance approver approves it, and treasury performs payment. Evidence of the credit supports completion and the returned record. The existing instruction has been enacted; it has not been redesigned.
ADM.5:5.2 - A variant outside the supplied policy
A contractor submits an otherwise identical receipt. P covers employees, and no contractor rule is supplied. The handler follows the instruction’s outside-scope response and identifies the missing contractor-policy question to its competent source. The service owner cannot extend P by adding a contractor checkbox. If another applicable instruction already covers contractors, the request can use it.
ADM.5:6 - Bias-Annotation
Designers tend to optimize the fields and handoffs they can see, while applicants bear repeated entry, waiting and inaccessible channels. Exercise the instruction from the recipient’s attempt to obtain the condition as well as from each provider’s task.
The example assumes an explicit policy and identifiable decision makers. An informal service may use a short agreed instruction, but informality does not create missing authority. The pattern also assumes that the substantive policy is supplied; it offers no independent judgment that the policy is lawful or desirable.
ADM.5:7 - Conformance Checklist
Recognition. The result is a reusable instruction for a bounded class. It connects entry and evidence to actual deciding and performing participants, a usable completion condition, the returned account and meaningful failure branches.
Assurance for reliance. Trace a supported request and a relevant failing variation. Can the participants recover their own next action without inventing authority, supplying a needless fact or mistaking an intermediate acknowledgement for completion? Check any consequential dependency against its actual policy, source or provider capability. Describe a walkthrough and an operational trial according to what each establishes.
ADM.5:8 - Common Anti-Patterns and How to Avoid Them
A form presented as a service specifies inputs but leaves the decision and actual provision unassigned. Follow one request through to the recipient’s usable condition.
Design on every request repeats the architecture inquiry despite an adequate instruction. Apply the existing instruction; reopen only the defective or changed condition.
Every refusal becomes an escalation sends settled cases to another decider. Retain the policy’s ordinary response and challenge route; reserve exception resolution for the actual unresolved question.
ADM.5:9 - Consequences
Handlers can begin ordinary cases with less improvisation, while specialists receive specific questions and providers receive actionable decisions. Applicants can distinguish a correction request, a reasoned refusal and unfinished provision.
Design costs become visible: someone must obtain missing policy, test correspondence and agree how to observe completion. More detailed documentation is useful only while it changes handling. The instruction’s successful construction does not establish service effectiveness; that requires evidence from actual cases and participants.
ADM.5:10 - Architectural Rationale
The reusable object is the handling instruction. Authority remains with the actual participants, and successful provision remains an effect of their work. Keeping these distinct lets the service reuse its design without treating a model, approval or record as the beneficiary’s result.
Conditional connections are sufficient. A settled case need not visit every specialist; an uncertain effect does need its qualified recovery. This preserves both efficient ordinary handling and accountable exceptional handling.
ADM.5:11 - SoTA-Echoing
The working question is how to make an administrative service repeatable while keeping institutional decisions and actual provision connected. The June laboratory and ADM source pack distinguish developing a service from using it. Part of this question is how the service supports the participant’s intended work and what effort it requires from them. The laboratory material supplies reported situations; assess service effectiveness from its actual use.
The selected synthesis uses the actual OPS.5 through OPS.6 instructions for admission and continuation during handling, with ADM’s explicit evidence, authority and usable-result joins. CMMN 1.1, §§4.1–4.3, supplies a serious case-model alternative: work toward an outcome can use evolving information and discretionary planning. Its model does not supply the local eligibility policy, appoint the decider or establish real provision.
An adequate existing service instruction is the strongest low-cost alternative and should be used directly. A process diagram or case model is also sufficient when it already carries the needed conditions and returns. Sections 4.2–4.5 become necessary where the representation omits those joins; no particular notation or CMMN conformance is required.
Reopen the affected design when policy, supported population, deciding authority, provider capability or a demonstrated handling failure changes it. A new form or software feature alone is not a new administrative result.
ADM.5:12 - Relations
ADM.1 supplies the condition the service enables; ADM.2–3 supply participants and effective relations when those are unsettled. The handler uses ADM.7 for a needed claim check, ADM.8 for permission, ADM.9 for usable provision and ADM.10 for reconciliation. A genuine obstacle returns through ADM.6 to the person able to resolve it.
OPS.5 through OPS.6 supply decisions during actual handling. SYSE.26 supplies the design of a supported interaction and its failure recovery when that engineering question is live. Neither return is a mandatory preliminary to using an adequate administrative instruction.
ADM.5:End
ADM.6 - Resolve an Administrative Exception
Type: Architectural
Status: Stable
ADM.6:0 - Use this when
Use this pattern when a real obstacle prevents the applicable administrative instruction from producing its ordinary result: a needed fact is disputed, the rule does not cover the case, requirements conflict, authority is unresolved or provision has failed in a way the ordinary recovery cannot resolve.
The first useful move is to state the exact condition preventing the next action and identify the person or source able to resolve it. The result is a resolved condition and usable continuation, or a reasoned disposition with the applicable correction or challenge route. A request for resolution is an intermediate result when the answer is still unavailable.
Apply a sufficient existing rule or recovery instruction directly. An ordinary missing-field correction or a negative condition already settled by policy is not automatically an exception. This pattern grants no authority to waive a requirement, invent evidence or extend a permission.
ADM.6:1 - Problem frame
A handler is working on a particular request for an administrative condition. The relevant action, participant and intended time are known well enough to locate what is blocked. The handler may have a service instruction, prior decisions and evidence from the provider.
The obstacle belongs to a particular question. A missing identity result, an unresolved eligibility rule, an unavailable authorized decider and an unknown payment effect call for different work. They can occur in one case without becoming interchangeable reasons to “escalate”.
Resolution also has several possible stopping points. Finding the competent source creates an actionable request; receiving its answer may settle the condition; an authorized provider must still perform any resulting provision. The handler states which result is actually available.
ADM.6:2 - Problem
An opaque refusal leaves the participant unable to correct the case. Repeated transfers between departments can move the request without moving the unresolved question. A handler may compensate by improvising a waiver, treating technical access as permission, or repeating a payment whose earlier effect remains unknown.
At the other extreme, every negative answer is sent to a discretionary decision maker. This delays cases whose governing rule already supplies the response and obscures the genuinely unresolved alternatives that do need judgment.
ADM.6:3 - Forces
| Force | Tension |
|---|---|
| Continuity | The participant needs a next move, while some missing results require qualified work that the handler cannot perform. |
| Competence | A reachable person is useful only if they can supply the needed fact, interpretation, decision or provision. |
| Direct resolution | A matching rule or prior result may settle the question without a new choice. |
| Legitimate alternatives | A permitted alternative can restore use; convenience cannot create permission to bypass a restriction. |
| Accurate progress | A sent request, received decision and usable effect must remain distinguishable. |
ADM.6:4 - Solution
ADM.6:4.1 - Recover the blocked action and the actual obstacle
State the intended action, its participant, applicable time and the condition that is not established. Use the existing case facts; reopen ADM.1–3 only when the requested result, relevant relation or effective time is itself unclear.
Separate what is known from what is missing. “No appointment is effective on this date under the supplied decision” is an established result. “An earlier appointment is claimed but its decision cannot be recovered” is a separate unresolved basis. A provider’s failure message may establish that a login attempt failed while leaving institutional permission intact.
If the applicable rule already determines the response, apply it. A policy-defined refusal can finish that bounded inquiry and still expose the available correction or challenge route. The existence of that route does not make a challenge mandatory.
ADM.6:4.2 - Identify the smallest resolution task
Locate the missing contribution before choosing a recipient.
| Actual obstacle | Needed contribution |
|---|---|
| A material claim is unsupported or disputed | Evidence or a competent check of that exact claim; ADM.7 helps specify it. |
| The rule’s application or scope is unresolved | Interpretation from the source or person authorized to settle that question. |
| Requirements yield incompatible conclusions | A matching precedence rule or adequate resolving decision; ADM.8 keeps the permission question bounded. |
| A required authority is absent or unclear | A decision or assignment by the person permitted to provide it, if the governing arrangement allows one. |
| Authorized provision failed or its effect is unknown | Investigation and recovery by the provider able to establish or change that effect; ADM.9 applies. |
A named department is not yet a resolution mechanism. Identify an actual receiving function or person and the result they can supply. If no such assignment exists, return that gap to the person authorized to arrange it. Do not fabricate a specialist answer to keep the case moving.
ADM.6:4.3 - Reuse what already resolves the question
First apply a matching rule, adequate evidence or existing authorized decision within its conditions. Confirm the relevant subject, scope and time; a nearby case’s answer may concern a different person or action.
When more than one legitimate continuation remains, use the applicable decision method to select among them. OPS.6 supplies the situated continuation: direct rule or recognition first, a real choice only when alternatives remain, and a bounded probe only if its answer can change the action.
An authorized exception can permit a bounded action under its actual conditions. It does not make a failed factual claim true. Record or communicate the condition that was waived or varied separately from the evidence that remains absent or negative.
ADM.6:4.4 - Send an answerable question and preserve permitted work
Give the resolver the question, relevant facts, actual conflict or gap, intended use of the answer, and any time condition that changes its usefulness. Use existing evidence references and protect information according to the applicable rules. Avoid forwarding an entire personal file when a narrower account suffices.
State who will consume the result and perform the next action. Obtain a usable return arrangement through the existing service channel; do not assume that sending a message appointed the recipient or established a response commitment.
Continue independent permitted work when its own prerequisites hold. A spending-approval question can block booking while a permitted price inquiry proceeds. An unresolved earlier payment effect blocks a potentially duplicate payment, but may leave an evidence inquiry fully permitted.
ADM.6:4.5 - Apply the actual answer or issue the reasoned disposition
On return, check that the answer concerns this subject, action, scope and time. Apply a settled condition under the service instruction. A new authorization supplies a permission result; the provider still needs to perform the authorized provision.
For a refusal, explain the action-changing reason and the correction, alternative or challenge route that the applicable arrangement actually provides. A competent refusal may be the correct case disposition while the requested condition remains unprovided. Do not report the beneficiary’s service as supplied merely because the administrative inquiry ended.
If the answer or effect is still unavailable, preserve the specific uncertainty, the responsible next action and any applicable time or stop condition. The useful completed result may be an actionable resolution request, with the dependent provision still unfinished.
ADM.6:5 - Archetypal Grounding
ADM.6:5.1 - A valid read grant and a failed identity route
A visiting researcher has an effective appointment and a valid archive read grant for 2 October. The supplied access policy additionally requires an accepted identity result for the person using the service. The portal’s device credential succeeds, but its identity service cannot complete the required person check.
The handler establishes three facts: the grant is valid, the requested use is within it, and the person-check result is unavailable. The device result cannot answer the missing person question. The handler has no authority to remove that requirement.
The supplied support instruction permits the identity support officer to perform a qualified attended check through a protected channel. The handler sends that officer the specific failed attempt and needed identity question. This is a resolution request; the researcher does not yet have usable archive access.
The officer performs the prescribed check and returns an accepted result for this person and attempt. The archive provider then completes the authorized access setup. The researcher successfully opens the permitted archive material, supplying evidence of usable provision through ADM.9. These are three distinct results: the check, its use in handling, and access that actually works.
If the attended route is unavailable too, the handler reports the unavailable check and the existing support or challenge route. The valid grant is preserved; it does not supply missing identity evidence. A different service that does not depend on that check may proceed under its own conditions.
ADM.6:5.2 - A settled negative and a genuine alternative basis
A request for 25 September cites only an appointment effective on 1 October. The service rule requires an effective appointment at use and prescribes a response explaining the failed condition. ADM.3 supplies the negative temporal result; the handler issues that response. No further eligibility decision is needed for the supplied appointment.
The requester then identifies a different appointment said to begin on 1 September, but the relevant decision and scope are unavailable. The new question goes to its issuing office: does that appointment cover this person, work and requested date? If an adequate existing decision is recovered, use it. If it is not recovered, preserve the gap. The later descriptive record of a valid September appointment would not itself make that appointment begin later.
ADM.6:6 - Bias-Annotation
Handlers often classify an unusual participant as an invalid request or assume that every exception deserves special permission. First distinguish a valid unsupported case, a settled negative condition and a genuine uncertainty.
A digital route can conceal barriers experienced by people who cannot use that channel. The pattern requires an actual permitted support or redress arrangement when one is supplied; it does not presume universal availability or let the handler invent it.
ADM.6:7 - Conformance Checklist
Recognition. The handler can name the blocked action, exact obstacle, needed contribution and competent destination. A settled result is applied; an unresolved question remains explicit.
Assurance for reliance. Trace the actual response back to its authority or evidence and forward to the next action. Verify that an alternative preserves the relevant conditions, that independent permitted work is not blocked by association, and that a request for resolution has not been reported as the received answer or completed provision.
ADM.6:8 - Common Anti-Patterns and How to Avoid Them
Escalation by forwarding moves the case but supplies no question or capable recipient. Identify the smallest missing contribution and who can return it.
A negative answer treated as uncertainty repeats a decision already supplied by the rule. Apply its ordinary response; investigate only a separately live alternative or challenge.
An exception that rewrites the facts describes absent evidence as a passed check. Keep the authorized variation and the unresolved or negative fact distinct.
ADM.6:9 - Consequences
Participants receive an intelligible next action instead of an unexplained transfer. Handlers can use existing rules and answers more quickly while reserving specialist attention for unresolved questions.
Some cases remain blocked because the competent contribution is unavailable. Making that condition explicit is useful, but it does not provide the requested service. Evidence from actual handling is needed to establish whether resolution reduces delay or displaced effort.
ADM.6:10 - Architectural Rationale
The unit of resolution is the action-changing question. That unit connects the case to the source or participant able to answer it without making the handler a universal authority. Separating the answer from its later execution preserves accountability when several people contribute to one administrative result.
ADM.6:11 - SoTA-Echoing
The working question is how to restore legitimate continuation when ordinary administrative handling cannot supply its result. The May and June laboratories expose opaque refusal, specialist judgment and execution gaps. The selected method joins those domain distinctions to the actual direct-rule, recognition and continuation instructions in OPS.6.
NIST SP 800-63-4’s redress treatment supplies a bounded comparison for digital-identity failures: accessible issue handling, review, correction and human support. It does not determine a local appointment or entitlement. That limit shapes §§4.2 and 5.1: a qualified identity result is requested from its proper source and then used by the service.
CMMN 1.1 provides a serious alternative for adaptive case planning. Its information and discretionary-work constructs can carry the handling arrangement, but do not by themselves settle institutional authority. An adequate ordinary instruction is the cheaper alternative and remains sufficient when it already resolves the condition.
Reopen the affected instruction when repeated exceptions reveal a missing ordinary branch, an unavailable competent provider or a changed governing rule. Repetition alone does not justify waiving the condition.
ADM.6:12 - Relations
ADM.1–3 establish the needed condition and relevant effective relations when those are unclear. ADM.7 specifies the needed factual check; ADM.8 resolves permission within the applicable rule. The handler uses the returned result in continuing the case, while the authorized provider performs provision under ADM.9. ADM.10 supplies reconciliation when an obligation or recorded effect remains disputed.
ADM.5 is used when the recurring instruction itself needs repair. OPS.6 supplies a current continuation decision without requiring redesign of that instruction for every exception.
ADM.6:End
ADM.7 - Check the Claim Needed for This Administrative Decision
Type: Architectural
Status: Stable
ADM.7:0 - Use this when
Use this pattern when an administrative action depends on a particular claim and the handler needs to establish whether available evidence adequately supports that claim for this use. Examples include an effective assignment, an expense’s eligibility, the identity of the person requesting access or the effect of an earlier payment.
Start by writing the claim and the action that depends on it. The first useful result is a supported answer, a supported negative answer, or the exact missing evidence or competent check. Reuse a sufficient existing result within its conditions.
Do not run an additional check merely because a form has a field for it. A settled decision whose applicable rule requires no further check can use its established basis. This pattern applies an existing qualified check to a case; redesigning a control or inventing a specialist test is a separate task.
ADM.7:1 - Problem frame
A handler, deciding person or provider is about to rely on a claim. The claim concerns an identified participant, event, relation, amount or condition at a relevant time. The governing service rule supplies the criterion where one is needed.
A check can establish different things: that a document came from its stated issuer, that a receipt concerns this expense, that a condition holds under a policy, or that a provider effect occurred. A successful check of one thing cannot silently answer another. An authentic assignment record can describe a future appointment; a successful credential operation can leave the person’s eligibility unestablished.
The handler specifies and uses the needed result. The person or mechanism competent to perform the check supplies its evidence or judgment. Administrative responsibility for the case does not confer every specialist competence.
ADM.7:2 - Problem
Administrative checks often follow available documents instead of the decision. Staff confirm that a file exists, a signature is valid or an automated service returned green, then treat that observation as proof of entitlement or completion.
Repeating all checks can also be harmful. It imposes burden without improving the answer, particularly when an adequate result already exists or when the checked fact cannot change the decision. Meanwhile, a consequential missing claim can remain hidden behind several successful but irrelevant checks.
ADM.7:3 - Forces
| Force | Tension |
|---|---|
| Claim precision | A broad label such as “verified” is convenient but conceals what was actually established. |
| Proportionate effort | A wrong answer can matter greatly, while unnecessary checking delays legitimate work and collects avoidable information. |
| Reuse | A prior result may remain adequate, or may concern a different subject, rule, condition or time. |
| Competence | A general evidence account can expose a gap without supplying the qualified domain test. |
| Distinct outcomes | False, unsupported, inapplicable and unavailable can require different next actions. |
ADM.7:4 - Solution
ADM.7:4.1 - State the claim and receiving action
Specify what needs to be true, for whom or what, under which relevant rule and time, and which action depends on the answer. Split a compound claim only when its components need different sources or can lead to different actions.
Ask what a wrong positive or negative answer would change. That consequence helps identify the applicable evidence requirement and any needed specialist contribution; it does not authorize the handler to invent a numerical confidence threshold.
For example, proving that a claimant has an effective assignment does not prove that a particular expense falls under it. Checking the expense’s category does not establish that it has not already been reimbursed. Select only the claims actually required for the receiving action.
ADM.7:4.2 - Match available evidence to the claim
Recover an existing result before commissioning another check. Identify the actual subject, source, criterion, relevant time and stated limitations. Establish enough correspondence to know that the result concerns this person, expense, grant or provider attempt.
Distinguish the source’s identity from the truth of its content. A signed record can support an origin claim while leaving scope, effective date or substantive correctness disputed. FPF A.10 supplies source recovery and bounded reliance when that account needs to remain inspectable; it does not perform the domain check.
Use ADM.3 for a live effective-time question and ADM.4 when participant accounts or cross-source identity prevent the match. Do not build a larger evidence record when the ordinary source and its conditions already answer the question.
ADM.7:4.3 - Reuse the result or perform the smallest competent check
Reuse a result while its subject, criterion and action-changing conditions match the current use. Name the specific change that would defeat reuse: a different person, a revised policy, a revoked grant, an altered subject or a later time outside the result’s scope.
When evidence is insufficient, select the qualified procedure or competent person that can answer the remaining question. A records custodian may recover a decision; the authorized specialist may interpret a rule; the payment provider may establish an attempt’s effect. A new generic document request cannot replace any of these.
If a domain method is missing, return that method gap through ADM.6. If a separately required assurance claim is current, FPF B.3 supplies the argument about that exact claim and use. Consequence alone does not require constructing such an assurance claim.
ADM.7:4.4 - Preserve each action-changing outcome
Return the substantive result in ordinary language and retain distinctions the next action needs.
| Outcome | Meaning and continuation |
|---|---|
| The claim is supported for the stated use | The deciding person or handler may use that result under the applicable rule; the check itself does not grant permission or perform provision. |
| Evidence supports the negative condition | Apply the service rule’s response to that established negative result. |
| The evidence is insufficient or conflicting | Preserve the unresolved claim and request the particular additional evidence or judgment needed. |
| The chosen check is inapplicable | Choose the check that actually answers the claim, or return the missing method; an irrelevant test supplies no positive or negative answer. |
| The check cannot currently be performed | Use an adequate existing result or separately permitted alternative if available; otherwise report the unavailable check and dependent action. |
An unavailable mechanism is a fact about checking, not a negative answer about the claimant. A policy may prescribe refusal or deferral when evidence is missing, but that disposition still differs from proof that the claim is false.
ADM.7:4.5 - Bind the result to the actual use
Return the claim, its answer, the material basis and any limitation that changes action. Add enough identity and timing to prevent substitution between check and use. If a payment instruction can change after approval, verify that the provider receives the approved amount and destination under the applicable procedure.
A historical observation cannot establish an indefinitely changing condition. SYSE.28 supplies the engineering question of where a check or enforcement mechanism must act when later changes can defeat it. Use an adequate existing control directly in a case; do not redesign its placement merely because a request arrived.
The consuming person then applies the governing rule or makes the required decision. Keep that decision and subsequent performance separate from the check. Reopen only a result affected by a material changed condition.
ADM.7:5 - Archetypal Grounding
ADM.7:5.1 - An eligible expense, with one missing answer
Use the reimbursement policy P from ADM.5. Elena claims 200 units for travel on 10 September. P requires an effective relevant assignment, a receipt corresponding to an eligible business-travel expense, and no earlier reimbursement of the same expense. In this constructed case, P accepts the assigned manager’s confirmation of business purpose.
The existing appointment decision covers Elena and the trip date. The handler reuses that temporal result. The receipt identifies Elena’s actual journey and amount; the accepted manager confirmation supplies its business purpose. Those results support the corresponding eligibility claims without another appointment inquiry or purpose interview.
The payment log contains an earlier instruction for the same expense, but its effect is unknown. The missing claim is now precise: was that expense already reimbursed by this attempt? A bank or payment-provider effect inquiry can answer it. Another receipt upload cannot.
The provider confirms that the earlier instruction failed before any credit. That result supports the negative answer to “already reimbursed by this attempt”; the handler still checks the actual policy’s required coverage of any other possible reimbursement. Suppose the adequate case records establish none. The finance approver can now make the required decision. The provider then performs any authorized payment. The check neither approved the claim nor paid it.
If the earlier effect remains unknown, the handler preserves that uncertainty. A potentially duplicate payment waits for recovery under ADM.9–10.
ADM.7:5.2 - The wrong test and an unavailable test
An archive requires an accepted person-identity result and a valid read grant. A device credential succeeds. That observation supports the device operation it actually checked; the handler cannot use it as the required person result or read grant.
If the person checker is unavailable, the outcome is unavailable checking. The existing approved alternative may supply a qualified person check through ADM.6. If the person check instead establishes that the person is different from the grant beneficiary, that is a substantive negative correspondence result, and the applicable service rule supplies the response.
These cases require different next actions despite each sometimes being displayed as “verification failed”.
ADM.7:6 - Bias-Annotation
Available data and automated scores can dominate the question even when they concern convenient proxies. Start with the actual claim and inspect what the selected check can establish.
The pattern assumes access to applicable criteria and qualified sources. It cannot infer those from institutional prestige, a familiar interface or an applicant’s ability to produce more documents. Additional collection should have an action-changing purpose and follow the actual information rules.
ADM.7:7 - Conformance Checklist
Recognition. A reader can recover the exact claim, dependent action, applicable criterion, subject correspondence and substantive outcome. Existing adequate evidence has an explicit scope of reuse.
Assurance for reliance. Examine the actual source and check for this claim. Try a relevant subject substitution, changed effective time or unavailable-check case. Confirm that each produces the correct limitation or next action under the rule. Use the qualified domain procedure for consequential correctness; a well-filled evidence table alone cannot establish it.
ADM.7:8 - Common Anti-Patterns and How to Avoid Them
Green means eligible substitutes a successful technical operation for the required institutional claim. State the property actually checked and recover the missing result.
Unknown means false turns unavailable evidence into an accusation or an incorrect case account. Preserve uncertainty while applying the policy’s actual response to missing evidence.
Check everything again ignores adequate existing results. Recheck only a claim whose receiving use or relevant condition has changed.
ADM.7:9 - Consequences
The handler can reduce irrelevant requests and direct missing-evidence work to the source that can answer it. Decisions receive more precise inputs, and a refusal can distinguish a failed condition from an unavailable check.
This may expose a previously hidden method or evidence gap. More precise uncertainty is not a successful check, but it prevents unsupported permission, denial or duplicate action. Actual service observations are needed to establish the effect on errors and participant burden.
ADM.7:10 - Architectural Rationale
The organizing relation is between one claim, its evidence and its receiving use. That relation allows a source result to be reused where it remains adequate and limited where it does not. Institutional decisions and provider actions retain their own conditions instead of being collapsed into a generic “verified” status.
ADM.7:11 - SoTA-Echoing
The working question is how to check the administrative claim that matters to a particular decision without replacing it by an available proxy. The May laboratory’s control-purpose problem supplies the domain failure. FPF A.10, especially §§4.1–4.2 and 4.5–4.6, supplies source and bounded-use recovery; FPF B.3 is retained only for an actual separately named assurance question.
The selected synthesis applies that evidence discipline with the actual reuse, outcome and change-before-use instructions in SYSE.28. A generic checklist is the serious low-cost alternative: it suffices when its items already match the case claims and preserve consequential outcomes. It fails when one “pass/fail” field hides an inapplicable or unavailable check, which motivates §§4.1 and 4.4.
NIST SP 800-63-4’s separation of digital-identity functions supports the bounded identity example. It does not supply an expense rule or a universal permission test. The cases are constructed applications, not estimates of checking accuracy.
Reopen a result when its relevant subject, rule, evidence or use changes. Reopen the reusable checking design when actual failures show that the test cannot answer the claimed question or cannot protect the interval before reliance.
ADM.7:12 - Relations
ADM.2–4 supply participant, relation, time and account correspondence when needed. The handler uses the check result in the actual permission or case decision; ADM.8 governs the permission question, and ADM.9 governs provision. An unavailable competent check returns through ADM.6.
ADM.10 uses effect evidence to reconcile an obligation and performance. FPF A.10 retains the source-to-use account; FPF B.3 addresses an actual assurance claim; SYSE.28 designs or repairs a check’s placement when that separate question is live.
ADM.7:End
ADM.8 - Establish and Exercise the Required Permission for an Administrative Action
Type: Architectural
Status: Stable
ADM.8:0 - Use this when
Use this pattern when an intended administrative action needs a permission and the performer must establish the applicable grant, its conditions or a material conflict before acting. Examples include approving expenditure, booking a journey, reading an archive or instructing a payment.
Start with the actual performer and intended action, including the resource, extent and time that matter. The first useful result is the applicable permission and its conditions, an established lack of the required permission, or the precise unresolved authority question. When the current work includes performance, the performer then acts within the established bounds.
Use an adequate standing grant directly. The pattern does not require a fresh approval for every exercise. Technical ability, an appointment or an absence of known prohibition can be relevant inputs; each supplies only the condition it actually establishes.
ADM.8:1 - Problem frame
A person or organization proposes an action for which the applicable institutional arrangement requires authority. The beneficiary of a grant may perform the action or may act through another participant whose own authority must be established. Approval of expenditure, delegation to an agent, access to a technical system and actual performance can therefore concern different actions.
The permission question is bounded. Permission to ask for a quote may already exist while permission to incur expenditure is still missing. Permission to read a collection does not necessarily cover downloading or disclosing it.
The local policy, agreement or competent decision supplies the substantive grant and conflict rules. This pattern establishes and uses their application to the case; it does not invent the institution’s authority structure.
ADM.8:2 - Problem
Administrative handling often treats all successful preparatory steps as “approval”. A directory entry, supervisor endorsement or enabled button is then used as if it granted the exact action. Conversely, staff repeatedly seek approval already supplied by a standing grant.
Conflicts create a further error. A handler may assume that a permit overrides a prohibition, or ask another decider despite an applicable precedence rule already settling the case. Both responses lose the actual authority and scope of the decision.
ADM.8:3 - Forces
| Force | Tension |
|---|---|
| Usable authority | A performer needs an actionable answer, while broad labels conceal resource, purpose, amount and time limits. |
| Reuse | Standing grants reduce repeated decisions, but cannot cover changed actions or expired conditions. |
| Conflict | An applicable rule can settle incompatible conclusions; unresolved cases require a competent result. |
| Technical enforcement | A mechanism can block or enable an action without constituting institutional permission. |
| Performance | Permission supports an action but does not establish that the action occurred or its promised result was supplied. |
ADM.8:4 - Solution
ADM.8:4.1 - Name the action and actual participants
Specify who intends to do what, to which resource or recipient, for what relevant purpose, extent and time. Identify whose grant is being used and whether the performer acts for another participant. Add a delegation question only when the action depends on one.
Separate neighboring actions when their permission conditions differ. A manager’s authorization to approve a travel expense does not automatically authorize the travel handler to approve it; the handler may instead be authorized to prepare the claim or issue a booking after that approval.
Use ADM.2 for an unclear participant or relation and ADM.3 for uncertain effectivity. Use already adequate results without rebuilding the organizational account.
ADM.8:4.2 - Recover the required positive basis and conditions
Obtain the applicable grant or rule-derived permission and the source that establishes it. Match the beneficiary, action, resource, extent and effective conditions to the proposed exercise. Check a relevant revocation, suspension or unmet prerequisite when it can alter this use.
Establish separately any eligibility condition required by the grant. A valid appointment can meet an appointment condition while leaving the required read grant absent. A technical credential can support authentication without supplying spending authority.
If the governing arrangement requires a positive grant, a non-prohibition finding alone is insufficient. If the rule itself permits the action under specified conditions, apply that rule; do not manufacture a separate approval requirement.
ADM.8:4.3 - Resolve only the conflict that actually applies
Determine whether the apparently competing conclusions concern the same beneficiary and action with overlapping scope and time. A download restriction may leave a permitted read untouched. A restriction from 09:00 to 11:00 does not by itself govern an action at noon.
For an actual conflict, follow FPF A.2.8.PER’s distinction. First apply a matching current precedence rule when it selects the applicable conclusion. Otherwise reuse an adequate authorized resolving decision for this scope and time. Only a remaining unresolved conflict calls for the competent person to decide the exact question.
The title of an office, the presence of two records or the handler’s preferred outcome supplies no precedence. Preserve the unresolved condition if the authorized answer is unavailable. An authorized variation does not retroactively make a failed factual prerequisite true.
ADM.8:4.4 - Return the bounded permission result
State which action by which performer is permitted, under what action-changing conditions, or why the required basis is absent or unresolved. Include the relevant source or decision reference where the recipient needs it to rely on the result.
Apply the ordinary service response to an established negative condition. If a distinct alternative basis is actually claimed, investigate that question. A missing grant, conflicting evidence and a settled prohibition need not receive the same response.
Keep a request for permission separate from the received grant. Use ADM.6 to obtain a missing competent answer or resolve an unavailable authority arrangement. The handler does not acquire the authority by documenting the gap.
ADM.8:4.5 - Exercise within the established bounds
If the present task is only to answer the permission question, stop with that answer and its conditions. When the task includes the action, the authorized performer carries it out under those conditions and obtains the evidence of actual performance needed by its consumer.
Before a delayed exercise, revisit only facts that can change the permission: expiration, revocation, changed amount, resource, purpose or performer. A permission for one date does not extend because provision was late. A different permitted action may proceed while a separate grant remains pending.
Technical enforcement implements its specified rule. A successful operation supplies evidence about the operation and effect it actually achieved. Use ADM.9 when the beneficiary’s promised condition still needs to be provided or established; use ADM.10 when performance and records disagree.
ADM.8:5 - Archetypal Grounding
ADM.8:5.1 - A quote and a booking have different prerequisites
A travel handler is permitted by the supplied service policy to request nonbinding prices. The same policy permits booking only after a named budget holder authorizes the expenditure. A traveller supplies a destination and date, but the budget authorization is pending.
The intended first action is a nonbinding price inquiry. The standing permission covers the handler, inquiry and relevant provider; the stipulated other conditions hold. The handler can obtain a quote now. That action does not create the budget holder’s approval or commit the organization to the booking.
After the budget holder authorizes a specified booking up to 300 units for the named trip, the handler receives a 280-unit offer within those conditions. The existing booking instruction and grant permit the handler to book it. An otherwise similar 340-unit offer is outside the supplied amount condition and needs its applicable response or a new competent decision.
The budget holder’s decision, handler’s booking action and traveller’s usable travel arrangements remain separately recoverable.
ADM.8:5.2 - A grant, a temporary restriction and an unresolved variant
A researcher has a valid read grant for collection R on 2 October. A security instruction restricts that same read action from 09:00 to 11:00. The supplied policy explicitly gives this temporary security restriction precedence during that interval. At 09:30 the handler applies that rule: the read action is restricted, and no additional discretionary decision is needed.
At noon the temporary restriction no longer covers the requested action. Suppose the grant and all its other conditions still hold and no other applicable restriction is present. The researcher can exercise the read permission. The earlier conflict does not create an all-day ban.
Now change the case: both conclusions apply at 09:30, but no matching precedence rule or adequate resolving decision is available. The handler returns the exact conflict to the authorized security/access decision maker and preserves the unresolved permission question. Naming that person is not the resolving decision.
ADM.8:5.3 - Permission survives a provider failure within its conditions
For a permitted read at noon, the portal fails to open collection R. The grant is still valid. The provider investigates the failed use under ADM.9, using any permitted existing recovery route.
The provider may not silently give download access when the grant covers reading only. If recovery is delayed beyond the grant’s effective day, the permission question reopens for the later use. Repairing software neither broadens the action nor extends its time.
ADM.8:6 - Bias-Annotation
Organizational status, familiarity and a powerful interface can be mistaken for authority. Examine the actual grant and action instead of the participant’s prestige or technical capability.
A permission account can also become needlessly restrictive by carrying every neighboring action’s prerequisites into the present one. Keep the bounded action visible, including ordinary permitted inquiry and correction.
ADM.8:7 - Conformance Checklist
Recognition. The result identifies the action, performer, positive basis where required, material conditions and any applicable conflict. It distinguishes the grant, its exercise and a non-prohibition finding.
Assurance for reliance. Compare the actual grant and rule to a changed amount, action or time that could alter the answer. For a conflict, establish the scope overlap and the rule or authorized result that settles it. For performance, obtain evidence of what the performer actually did; a permission record alone cannot supply that evidence.
ADM.8:8 - Common Anti-Patterns and How to Avoid Them
The button grants authority treats technical capability as institutional permission. Recover the rule or grant required for the action.
Approval everywhere repeats a standing authorization or blocks inquiry behind an unrelated spending prerequisite. Match the condition to the particular action.
Permit always wins invents conflict precedence. Apply the actual matching rule or adequate resolving decision; return only the unresolved question.
A repair enlarges the grant supplies an excluded action or later use as a convenient workaround. Recover permission for the changed action before relying on it.
ADM.8:9 - Consequences
The performer can use established authority without needless reapproval, while material limits remain explicit. Handlers can give a precise response to absent permission and keep technical repair separate from institutional decision.
This requires access to the operative grant and conflict rules. Some actions remain unresolved when those sources or decisions are unavailable. An intelligible permission account improves the basis for action; it does not prove that the later provision succeeded.
ADM.8:10 - Architectural Rationale
A permission is a relation under particular conditions, its exercise is an action, and the provider’s usable result may be a further effect. Preserving those distinctions lets the handler reuse a grant, identify a real conflict and repair a failed provision without accidentally changing institutional authority.
ADM.8:11 - SoTA-Echoing
The working question is how to make an administrative action legitimate and executable without confusing grant, eligibility, enforcement and performance. The selected instruction follows the actual FPF A.2.8.PER grant, exercise, non-prohibition and conflict distinctions, especially §4.6. The laboratories supply the administrative cases in which device permission, institutional conditions and usable access diverge.
OASIS XACML 3.0, terminology and §7.2, supplies a serious policy-decision/enforcement comparison. Its architecture separates information, decisions and enforcement; it requires defined handling of inapplicable or indeterminate outcomes. Sections 4.2–4.5 retain that separation without prescribing XML or importing an XACML enforcement operation as a general legal obligation.
A direct standing rule is the strongest simpler alternative and is sufficient when its conditions settle the action. A universal approval workflow adds cost and can misclassify independent actions; an allow/deny interface alone can conceal the missing institutional basis. The constructed cases test these distinctions under supplied rules, not the legality of an actual organization.
Reopen the affected permission when its beneficiary, action, scope, rule or effective conditions change. Changes to a technical implementation require reconsidering permission only where they change those conditions or the action being performed.
ADM.8:12 - Relations
ADM.2–3 establish the relevant participants and effective relations; ADM.7 checks a needed claim without granting permission. ADM.6 supplies a competent return for a genuine unresolved question. The authorized performer uses the applicable permission in acting, and ADM.9 establishes the promised usable condition when provision is the next task.
FPF A.2.8.PER governs the grant/exercise/non-prohibition distinction. OPS.6 supplies situated continuation when a legitimate next action still needs to be selected.
ADM.8:End
ADM.9 - Provide a Usable Administrative Result
Type: Architectural
Status: Stable
ADM.9:0 - Use this when
Use this pattern when a participant needs an authorized administrative condition to become usable, or when an approval or completion message does not establish that the promised result is available. Typical cases are access that still fails, accommodation that cannot be occupied or a payment instruction whose effect is unknown.
Start with what the recipient must be able to do and the provider action expected to make that possible. The first useful result is the promised usable condition with adequate evidence, or the exact remaining provision failure and accountable next action.
Use an adequate existing provision and recovery instruction directly. A request only for a permission answer can finish under ADM.8; a service whose promised result is a booking can finish with a usable booking. The completion criterion follows the actual promise, not a universal demand to prove all later business outcomes.
ADM.9:1 - Problem frame
A beneficiary, relevant permission and intended administrative condition are known sufficiently to act, or the outstanding prerequisite is explicit. A provider has the ability and assignment to perform the needed action. The handler connects that provider’s work to the condition the participant will use.
Several results may occur on the way: a request is accepted, a decision is issued, work is scheduled, a provider acts and an effect becomes usable. Each may be valuable for its own purpose. The handler must determine which one satisfies the particular service promise.
Provision can be synchronous and simple. A participant may immediately receive the required document through an authorized channel. Delayed or externally effected provision may instead require enough attempt identity and observation to recover a failure without duplicating work.
ADM.9:2 - Problem
A service reports completion when its internal task ends. The recipient then discovers that access still fails, the reservation is unusable or funds have not been confirmed. The unresolved work moves to the recipient, while the service’s record appears successful.
A blind retry can make matters worse. An unobserved payment may already have occurred; an interrupted account change may be partly applied. Repeating the instruction without knowing its effect can produce duplication or contradictory conditions.
ADM.9:3 - Forces
| Force | Tension |
|---|---|
| Recipient use | The beneficiary needs a practical condition, while provider systems expose intermediate activity more readily. |
| Permission | The authorized action may be clear even when provision fails; a workaround may change its scope. |
| Recovery | Fast retries can help reversible operations but can duplicate uncertain external effects. |
| Evidence | Adequate confirmation should support the promised use without demanding an unnecessary ceremony from every recipient. |
| Continuity | An honest partial or unknown result needs a next action, not merely an accurate failure label. |
ADM.9:4 - Solution
ADM.9:4.1 - Recover the promised usable condition
Name the recipient, condition, relevant time and intended use. Recover the applicable authorization and provider assignment from existing results. Use ADM.1 or ADM.8 only for an actual unresolved framing or permission question.
Describe completion so the handler and recipient can distinguish it from a preparatory step. “The researcher can retrieve the permitted document on the intended day” is different from “the administrator entered an access rule”. Conversely, when the requested result is a reservation that can later be used, occupied accommodation is not the immediate completion criterion.
State any prerequisite whose absence still prevents provision. An approved service plan does not establish that a provider has been assigned or can deliver it.
ADM.9:4.2 - Give the capable provider an executable request
Use the existing supported channel and instruction. Supply the authorized action, actual recipient, relevant resource or destination, effective conditions and information needed to perform it. Preserve sensitive information through the applicable protected mechanism.
For a simple immediate action, the ordinary request and result may suffice. When delay, cancellation or uncertain external effects matter, preserve an identifier and evidence that allow the provider and handler to recover the same attempt. Do not create a separate job-tracking scheme for every trivial request.
Identify who can investigate or repair the effect. A generic support link is insufficient if no provider is actually assigned to answer the relevant question. ADM.6 can obtain the missing contribution.
ADM.9:4.3 - Establish the effect needed for this use
The provider performs the authorized action. The handler then uses evidence adequate for the promised effect: a recipient’s successful use, a qualified provider confirmation or another observation accepted by the applicable arrangement.
Match that evidence to this beneficiary, resource, amount, configuration and time where those distinctions matter. A successful test with an administrator’s account cannot automatically establish the beneficiary’s access. One document successfully opened establishes only the scope that the observation and supporting conditions carry.
Keep the result proportionate. An ordinary confirmed delivery need not provoke a new independent test unless the promise or actual uncertainty requires it. An “instruction accepted” response cannot establish a downstream effect that the provider has not yet observed.
ADM.9:4.4 - Distinguish failure, partial effect and unknown effect
Locate what actually happened before choosing recovery.
| Observed situation | Next provision question |
|---|---|
| No effect occurred and the cause is established | Can the provider correct that cause and retry under the existing authorization and recovery instruction? |
| Part of the effect occurred | What remains needed, what must be preserved, and would another action duplicate or contradict the completed part? |
| The effect may have occurred but cannot yet be established | How can the provider recover the earlier attempt’s actual state before a potentially duplicate action? |
| The promised condition is usable | Does the available evidence support the requested completion statement within its scope? |
A failed response channel does not prove that the provider action failed. Look up or investigate the same attempt when possible. If the provider cannot establish its effect, preserve that uncertainty and restrict the dependent repeat action according to the applicable recovery rule.
For a payment, ADM.10 connects the recovered effect to the obligation and records. Technical data or software recovery stays with its qualified engineering method; this pattern does not invent a rollback procedure.
ADM.9:4.5 - Recover a permitted path and return the actual result
Apply an adequate existing recovery instruction or permitted alternative. Confirm that it supplies the promised condition within the same relevant authorization. An alternative read channel can be sufficient; sending a downloadable copy may be outside the read grant.
If the action, amount, recipient, resource or effective time changes materially, obtain the required permission result through ADM.8. An expired grant cannot be extended by treating the later use as completion of an earlier support ticket.
Return the usable result and relevant limitations, or the remaining condition, competent next action and applicable time or stop condition. Distinguish successful provision, a partial usable result and an unresolved effect. Ending an investigation with a reasoned refusal is a possible case disposition, but it does not mean the requested condition was supplied.
Use SYSE.26 when the supported interaction or failure recovery itself needs design. A single failed request with an adequate recovery path needs that path applied, not a new portal.
ADM.9:5 - Archetypal Grounding
ADM.9:5.1 - The read grant is valid and the service still fails
A researcher has an effective appointment, an accepted identity result and a valid grant to read document D from archive R on 2 October. The provider has been assigned to supply that access. These prerequisites are stipulated as adequate for the example.
An administrator installs the expected access rule and marks the request complete. The researcher attempts to open D under their actual account and receives an access error. The installation is an observed provider action; the promised condition is still unavailable.
The existing support instruction lets the archive provider inspect the account/resource mapping for that attempt. The provider finds that the rule was associated with a different account identifier. It corrects the mapping under its assigned authority. The researcher then opens D through the permitted channel, and the evidence supports completion for the named document and time.
If the service promise instead covered a larger collection, this single opening would need the applicable additional evidence of that scope. The handler does not promote a narrow observation into a whole-collection result.
If the ordinary channel remains unavailable, a supplied authorized attended-reading route may provide the same permitted use. A downloadable copy is not a substitute when the grant excludes downloading. If the usable access cannot be supplied until 4 October, the grant for 2 October does not cover that later use; the permission question reopens.
ADM.9:5.2 - A payment response disappeared
Treasury is authorized to transfer 400 units to a specified recipient. The payment provider receives an instruction, but the response connection fails. The available observation is “the response was lost”; it does not establish whether funds were credited.
The handler preserves the original attempt reference and requests its effect through the provider’s authorized inquiry channel. The provider confirms credit to the intended account. Under the supplied payment terms, that evidence establishes the promised effect; no second payment is needed.
If the provider instead confirms failure before any credit, treasury can use its applicable authorized retry instruction. If the effect remains unknown, the handler returns that uncertainty and the effect-recovery task. ADM.10 determines what can then be said about the obligation and records.
ADM.9:6 - Bias-Annotation
Provider dashboards favor events inside the provider’s control. Recipients may experience a failure after every internal task has succeeded. Observe the condition relevant to the recipient’s use without assuming that one person’s feedback represents every user or future attempt.
The pattern also resists a universal requirement that every recipient perform a ceremonial acceptance test. Use the evidence adequate for the actual promise, uncertainty and receiving decision.
ADM.9:7 - Conformance Checklist
Recognition. The result names the beneficiary’s promised usable condition, actual provider action and evidence of effect. A partial or unknown result identifies what remains and who can act.
Assurance for reliance. Compare the evidence with the actual recipient, resource and effective conditions. Exercise an uncertain-effect or partial-effect case where repetition could cause harm, using the existing qualified recovery method. Establish that the alternative or retry stays within its permission and does not silently duplicate completed provision.
ADM.9:8 - Common Anti-Patterns and How to Avoid Them
Closed means supplied equates an internal record with the beneficiary’s condition. Recover the actual promised effect and its evidence.
Retry to discover what happened uses another consequential action as a diagnostic for the first. Recover the earlier effect through a suitable observation or qualified recovery.
Any workaround is equivalent ignores scope or permission changes. Compare the alternative’s actual use with the promise and grant.
ADM.9:9 - Consequences
Completion becomes meaningful to the participant who needs to work. Failed provision can retain its valid authorization and receive focused provider recovery, while unknown effects are less likely to trigger duplicate actions.
The cost is access to evidence beyond the provider’s immediate task status and, sometimes, cooperation across providers. A bounded successful use establishes that result under its conditions; service-wide reliability requires broader observations.
ADM.9:10 - Architectural Rationale
Authorization, provider action and beneficiary effect are connected but distinct. The first allows an action, the second occurs through performance, and the third determines whether the promised condition was supplied. This separation makes recovery local: repair the failed contribution without inventing another permission or erasing an already completed effect.
ADM.9:11 - SoTA-Echoing
The working question is how administrative handling reaches the participant’s usable condition, including recovery after ambiguous provider effects. The May and July laboratories supply the access and enabling-service failures. Include the participant’s effort in obtaining the service when judging whether provision is usable.
The selected instruction uses SYSE.26, §§4.1–4.5: begin with the user’s undertaking, distinguish progress from result and uncertainty, recover the same attempt before a consequential replay, and keep support connected to failed use. ADM adds the explicit institutional grant, promised condition and beneficiary correspondence.
A provider completion response is the serious simpler alternative. It is sufficient when its actual semantics and evidence establish the promised effect; it is insufficient when it only acknowledges receipt of an instruction. This comparison determines §§4.3–4.4. No particular portal, persistent job model or universal recipient test is selected.
Reopen the affected provision or recovery instruction when the promised use, authorization, provider capability or effect evidence changes, or an actual failure reveals an unsupported transition. The constructed cases establish an intelligible application, not measured service reliability.
ADM.9:12 - Relations
ADM.1 supplies the enabled condition and ADM.8 the relevant permission when either is unresolved. ADM.7 checks a needed effect claim; ADM.6 obtains a missing competent contribution. ADM.10 connects the actual effect to an obligation and participant records.
The handler applies an existing service instruction from ADM.5 where one is needed. SYSE.26 supplies supported-interaction and recovery design for a genuine engineering question; engineering realization itself remains with its qualified provider and method.
ADM.9:End
ADM.10 - Reconcile Administrative Obligations, Performance and Records
Type: Architectural
Status: Stable
ADM.10:0 - Use this when
Use this pattern when participants need to determine whether an administrative obligation was fulfilled, yet the obligation, actual performance and records do not line up clearly. A payment record may be closed while part of the credit remains unconfirmed; an access obligation may be recorded as fulfilled while the recipient could not use the permitted resource.
Start with the particular obligation and its applicable fulfillment rule, then compare the performance evidence and records for that same subject and time. The first useful result is a supported reconciliation, or the exact remaining discrepancy and competent next action.
Use a sufficient existing reconciliation directly. An isolated spelling correction with no effect on meaning does not require this inquiry. The pattern does not supply statutory accounting, tax, valuation, treasury or legal discharge rules; use the rule actually governing the obligation and obtain a qualified interpretation when that rule is unresolved.
ADM.10:1 - Problem frame
The handler is comparing what one participant owed another, what actually happened and what the participants recorded. Those may be three different claims about related subjects. A record may describe an instruction, debit, credit, allocation or case closure; each can have a different effective or recording time.
The obligation’s fulfillment condition must be known. Issuing an instruction, crediting a recipient, accepting a deliverable and making a resource usable can be different conditions. The handler cannot infer which condition discharges an obligation from the most convenient system status.
Participant-relative descriptions remain legitimate. A payer’s outgoing payment and a recipient’s incoming receipt can concern the same transfer. ADM.4 supplies their correspondence when needed; this pattern then determines what that event establishes about the particular obligation.
ADM.10:2 - Problem
A handler compares two totals or status fields without establishing their meaning, scope or time. Apparent equality is then reported as settlement, or a harmless difference in recording time is treated as failed performance.
A more serious error turns missing evidence into another payment. The record says 400 remains, so someone instructs 400 again, although the earlier instruction may already have credited the recipient. Correcting the account requires recovering the event before changing the world.
ADM.10:3 - Forces
| Force | Tension |
|---|---|
| Comparable claims | Common amounts and labels can conceal different events, quantities, purposes or periods. |
| Institutional effect | Actual performance matters under a supplied fulfillment rule; the handler cannot invent that rule. |
| Honest uncertainty | Unconfirmed effect differs from known nonperformance and may prevent a safe repeat action. |
| Participant accounts | Several correct records can coexist while their correspondence needs to remain recoverable. |
| Corrective authority | A record correction, additional provision and change to an obligation can require different authority. |
ADM.10:4 - Solution
ADM.10:4.1 - Fix the obligation and the question being answered
Identify who owes what to whom, for which subject, quantity or usable condition, purpose and relevant time. Recover the operative agreement, decision or rule and its actual fulfillment condition. Include a change, suspension, allocation or permitted offset only when it matters to this obligation.
State the receiving question: whether the obligation was fulfilled by a particular date, what is still established as outstanding, why two accounts differ, or which corrective action is now needed. A historical statement and a present payment decision may require different evidence.
If the fulfillment rule is unavailable or disputed, obtain its competent interpretation. A ledger label cannot supply the missing rule. Use ADM.3 for a material effective-time question.
ADM.10:4.2 - Align the claims before comparing them
Recover what each record asserts and what evidence supports actual performance. Establish event identity and participant correspondence through ADM.4 when needed. Use SIE.4 through SIE.6 for a genuine unresolved source-meaning or identity question.
Match quantities, units, direction, gross or net basis, allocation, observation time and coverage where those distinctions can change the conclusion. A debit from the payer and a credit to the recipient may be different observations of a transfer. Two identical amounts may instead belong to two different transfers.
OPS.15 supplies comparison of observations for matching subjects and bases when that operational comparison is needed. It does not determine the obligation’s fulfillment rule. Once the claims are adequately aligned, compare them directly without constructing an unnecessary shared database.
ADM.10:4.3 - Apply the fulfillment rule to established performance
Determine which evidenced effects satisfy which part of the obligation under the supplied rule. Keep the actual event, evidence of it and institutional consequence distinct. A later report can improve knowledge of an earlier credit without making the credit occur on the report date.
Distinguish at least the differences that change the next action:
| Difference | What must be resolved |
|---|---|
| Meaning or identity | Whether the records concern comparable claims about the same subject or event. |
| Time or coverage | Whether one account is earlier, later or covers a different interval or subset. |
| Quantity or condition | Whether established performance meets the amount or usable condition actually owed. |
| Authority or allocation | Whether the governing decision permits the claimed change, correction, offset or application. |
| Unknown effect | Whether an earlier action actually supplied any of the condition; missing evidence is not proof of nonperformance. |
A known fulfilled part and an uncertain remainder can coexist. Report each with its basis. Do not infer that a whole obligation is settled merely because the case record is closed, or that an uncertain remainder is definitely unpaid.
ADM.10:4.4 - Select the correction that matches the discrepancy
For a recording defect with adequate performance evidence, obtain the authorized correction and retain the needed connection to the original event and prior account. Correcting a description does not undo or repeat the historical action. If the governing rule gives a recording act a constitutive effect, apply that rule explicitly.
For established missing performance, identify the provider action and permission actually required to complete it. ADM.8 supplies a live permission inquiry; ADM.9 supplies provision. A handler authorized to edit a case record is not thereby authorized to issue payment or amend the obligation.
For an unknown earlier effect, first recover the same attempt through its competent provider. If the effect occurred, reconcile and correct the account. If it did not occur, use the applicable authorized continuation. If it remains unknown, preserve that uncertainty and the next recovery action before any repetition that could duplicate performance.
A real dispute about the obligation or its interpretation returns through ADM.6 to its competent decision maker. The reconciliation cannot settle that dispute by choosing one participant’s preferred record.
ADM.10:4.5 - Return the reconciled account and remaining action
Give the participants the bounded conclusion, material basis and any unresolved difference. Retain each participant’s correct account and explain its correspondence where a common event is used.
A small case may finish with a short note: the named obligation was fulfilled by the confirmed effect at the relevant time, and the record has been corrected by the authorized handler. An unresolved case needs the precise missing claim, its competent recipient and the action that depends on it.
Reopen only the affected conclusion when new evidence, a corrected meaning, a valid changed obligation or a relevant effective-time fact arrives. Do not reopen unrelated reconciled cases merely because the same provider supplied the new information.
ADM.10:5 - Archetypal Grounding
ADM.10:5.1 - One thousand owed, six hundred confirmed, four hundred unknown
Organization P owes supplier Q 1,000 units for invoice I. The supplied terms say that amounts credited to Q’s designated account discharge the corresponding portion of this obligation. For this example there are no fees, offsets, other credits or changes to I.
Evidence confirms a 600-unit credit to that account. A second instruction for 400 units was issued, but its effect is unknown. The case record says “paid 1,000” because both instructions were sent.
The handler establishes that the confirmed 600 discharges that portion under the supplied terms. The second instruction establishes an attempted payment, not its credit. The remaining 400 has an unresolved effect; the available evidence does not establish whether the actual outstanding amount is now 400 or zero. The record’s closed status cannot settle the question.
The handler uses the original second-attempt reference to ask the payment provider whether and when Q’s account was credited. The possible returns have different consequences:
| Provider result | Reconciliation and next action |
|---|---|
| The 400 was credited to Q’s designated account | The supplied terms establish full fulfillment. The authorized handler corrects the account or evidence linkage as needed; there is no remaining payment to issue. |
| The attempt failed without a credit | The available evidence establishes 400 still outstanding under the stated assumptions. The competent participants arrange the properly authorized remaining provision. |
| The effect still cannot be established | Retain the confirmed 600 and the 400-unit uncertainty. Continue the assigned effect inquiry before any potentially duplicate payment. |
Suppose the confirmed second credit occurred on 10 September but the provider’s report arrived on 12 September. The event time remains 10 September. A report made on 11 September with only the earlier evidence should have stated uncertainty. The later evidence supports a better historical account, not a new credit on 12 September.
ADM.10:5.2 - Compare debit, credit and fee before deciding fulfillment
In a different case, P’s account shows a 1,000-unit debit, while Q’s account shows a 990-unit credit and a separate fee claim. Before inferring an unpaid balance, the handler establishes the event correspondence, quantity bases and actual fee allocation.
If the supplied terms require a net 1,000 credit to Q, the 990 credit alone does not establish full performance of that condition. If a different applicable term assigns the fee differently, its competent interpretation determines the institutional consequence. The two record totals cannot choose the term.
Likewise, a 1,000-unit receipt allocated to another invoice cannot automatically close I. The handler needs the actual allocation basis and authority before applying the receipt to this obligation.
ADM.10:6 - Bias-Annotation
The most accessible ledger can appear to be the truth for every question. Inspect whether it records instructions, effects, obligations or a participant’s classification before relying on it.
Financial examples make quantities visible, but administrative fulfillment can concern usable access or another condition. Do not force every such condition into a monetary balance. The pattern also does not equate one common event account with one mandatory database.
ADM.10:7 - Conformance Checklist
Recognition. The result distinguishes the obligation, its fulfillment rule, evidenced performance and records. It states what is established, what remains uncertain and which correction or provision is actually needed.
Assurance for reliance. Trace the conclusion through actual event correspondence, comparable quantities and times, and the governing rule. Examine a missing-effect, changed-allocation or delayed-evidence case that could alter the next action. Verify that a record correction and any new provision use their own authority, and that uncertainty has not become an invented settlement or duplicate action.
ADM.10:8 - Common Anti-Patterns and How to Avoid Them
The ledger is closed, therefore the obligation is discharged substitutes record status for the applicable fulfillment condition. Apply the rule to evidenced performance.
The totals match, therefore the accounts agree ignores gross/net basis, identity, allocation or time. Align the claims before comparing amounts.
Unconfirmed means unpaid turns missing evidence into an instruction to repeat. Recover the earlier effect and retain uncertainty until the result supports a continuation.
Correcting history by changing the event treats a revised account as another payment or a retroactive obligation change. Distinguish authorized description correction from actual provision and constitutive acts.
ADM.10:9 - Consequences
Participants can see which portion of a claim is established, why apparently different accounts may both be correct and what work remains. Reconciliation can avoid duplicate provision and direct corrections to the person with the right authority.
The process depends on adequate event evidence and an applicable fulfillment rule. A precise unresolved account may be the only supportable result. Broader accounting correctness and operational effectiveness require their own qualified evidence.
ADM.10:10 - Architectural Rationale
The obligation, performance and record have different change conditions. Their connection is established through event correspondence and the operative institutional rule. Keeping those conditions separate permits a later correction of knowledge without changing the event, and a legitimate additional action without treating every discrepancy as missing performance.
ADM.10:11 - SoTA-Echoing
The working question is how to determine fulfillment across participant accounts without confusing instructions, effects and records. The July laboratory supplies the administrative problem. Use an account suited to the decision while preserving accounts needed for other purposes. Partridge and colleagues’ accounting and agentology arguments support preserving participant-relative meanings around an established common subject.
The selected synthesis combines that representational contribution with the comparable-observation question in OPS.15, the meaning and identity work in SIE.4 through SIE.6, and the recovery of uncertain provider effects in SYSE.26. The substantive fulfillment rule remains an explicit local input.
Direct matching of two records is the serious simpler alternative and suffices when their semantics, coverage and evidence already support the requested conclusion. A universal ledger or wholesale ontology replacement adds no needed result to the worked cases. Sections 4.1–4.4 instead make the institutional rule and unresolved effect visible while retaining adequate existing records.
The 2018 representation arguments are conceptual sources, not current evidence that a particular accounting system is superior. Reopen the affected reconciliation when the obligation, source meaning, allocation, evidence or effective-time basis changes. A broader financial or accounting claim needs its qualified method and evidence.
ADM.10:12 - Relations
ADM.3 supplies material effectivity distinctions; ADM.4 establishes participant-relative correspondence before this pattern determines what performance fulfills. ADM.7 supplies a missing claim check. ADM.8 establishes any needed permission, and the provider performs remaining provision through ADM.9. ADM.6 returns an unresolved substantive question to its competent source.
SIE.4 through SIE.6 and OPS.15 supply meaning, identity and observation comparison within their scopes. The handler uses those results under the actual fulfillment rule; none of those methods creates the obligation or authorizes payment merely by describing it.