Document 17

Three SEBoK Pilot Distillations

Three SEBoK Pilot Distillations

Three pilot per-article distillations validating the methodology proposed against SE-016. Pilot A reformulates SEBoK's Engineered System Context (Part 2 — Foundations). Pilot B reformulates Sequential Development Approach and the Vee Model treatment within it (Part 3 — SE & Management). Pilot C reformulates the Hubble Space Telescope Case Study (Part 7 — Implementation Examples). The three pilots span three SEBoK parts and exercise the seven-section template against articles of different genres (foundational, methodological, empirical case). Across the three, six corpus forms compose the structural content, two productive provisional refinements emerge (the ground-state taxonomy now formalized in Doc 571 Section X; the development-approach lattice now worked in Doc 572 Appendix A), and one apparent out-of-scope residual is reread as a virtue-constraint-form (Doc 314) instance rather than a corpus reach failure. The methodology validates; scaling is recommended.


I. The Methodology

The seven-section template, finalized after Pilot A's first run:

  1. Source. Page identifier, URL, lead authors, license, retrieval date.
  2. Source Read. What the article says, in 3-5 sentences, in SEBoK's own framing. Compressed but faithful.
  3. Structural Read. Which corpus forms compose the article's claims. Compose, do not paraphrase. Cite each form document explicitly.
  4. Tier-Tags. For each load-bearing claim, the (warrant, novelty) pair under Doc 490: π/μ/θ for warrant, α/β/γ/δ/ε for novelty. Tag uniformly.
  5. Residuals. SEBoK content the form composition cannot reach, cited verbatim. Each residual is a Phase-4-equivalent falsifier candidate at the per-article scale.
  6. Provisional Refinements. Candidate corpus extensions surfaced by the distillation that fit neither clean reformulation nor pure residual. This section was added after Pilot A's run; subsequent pilots used it.
  7. Cross-Links. Form documents, part-level reformulation, adjacent SEBoK concepts.

Discipline: form must do the work; tier-tag every claim; honor the hypostatic boundary; pulverization is the verification regime; falsifiers are first-class.


II. Pilot A — Engineered System Context

A.1 Source

A.2 Source Read

The article asserts that the systems approach applies to engineered system contexts rather than to isolated systems. It names a five-element scoping structure (Narrower System-of-Interest, Wider System-of-Interest, Environment, Wider Environment, Meta-system) and four context types (Product, Service, Enterprise, System-of-Systems Capability). The boundary choice between NSoI and WSoI depends on "what can be changed and what must remain fixed." Service value is named as realized only through service transactions; enterprise systems are named as constantly evolving, lacking detailed configuration-controlled requirements, and necessary to the creation of both product and service systems.

A.3 Structural Read

Form II — Ontological Ladder of Participation (Doc 548), with Form III — Lattice Extension (Doc 572). The five-element scope (NSoI / WSoI / Environment / Wider Environment / Meta-system) is a participation structure expressed as a lattice rather than a chain. The NSoI is a Pattern-layer entity in one frame and a node within a Structure-layer rule-set in a wider frame; the WSoI carries the rule-set; the Environment supplies the Possibility-layer admissibility; the Wider Environment carries Form-layer constraints. The same physical system occupies multiple rungs depending on which observer's frame is invoked. The article's claim that "boundary choice depends on what can be changed and what must remain fixed" is the operational read of choosing one's position on the lattice.

Form III — Substrate-and-Keeper Composition (Doc 510). The Meta-system is a keeper to the WSoI's substrate. The article names meta-system control as direct without naming the keeper-substrate form; the corpus reads the relation as keeper-substrate composition with the meta-system supplying the constraint structure the WSoI does not produce from its own resources. The Doc 530 affordance gap is consistent: the WSoI cannot generate the meta-system's framing from its internal operations.

Form X — Institutional Ground (Doc 571), now read with state taxonomy. The Enterprise context names institutional ground explicitly. "Enterprise systems are constantly evolving... rarely have detailed configuration-controlled requirements... pursue shareholder value and customer satisfaction... exist in ill-defined, constantly changing contexts." Each clause is a ground condition. Under Doc 571's revised state taxonomy (Section X, formalized after this pilot), the enterprise context's ground is typically decayed-but-not-evacuated: the conditions are partially withdrawing (no configuration-controlled requirements; ill-defined contexts) without crossing into evacuation. The article's claim that "both product and service systems require an enterprise system context to create them" is the institutional ground binding the keeper-substrate dyad of product or service engineering.

Form XI — Co-Production at Sub-Rungs (Doc 573). Service value "is realized only through service transactions." The article names value-as-co-produced without formalizing the move. The corpus reads service-value as a co-production at the sub-rung between provider (keeper) and customer (substrate) under shared institutional ground (the contractual frame, the service infrastructure). The article supplies the empirical basis; Doc 573 supplies the formalization.

Form IV — Pin-Art Model (Doc 270). The four context types (Product, Service, Enterprise, SoS) are alternative pin-sets. Each context induces a different shape of engineering practice not because the substrate differs but because the pin-set differs. SEBoK's framing — "key distinctions... pertain to how and when the SoI boundary is drawn" — is pin-art language reformulated.

A.4 Tier-Tags

  • "Systems approach must address engineered system context, not isolated systems" — π / α (recapitulation; warranted by INCOSE 2012).
  • "SoI boundary selection is context-dependent" — π / α.
  • The five-element scoping (NSoI / WSoI / Environment / Wider Environment / Meta-system) — μ / β under the corpus (extension via Doc 572 lattice; the article presents it as established via Flood and Carson 1993).
  • The four-context taxonomy — μ / β.
  • "Service value is realized only through service transactions" — θ / γ under the corpus (the claim reframes value as co-production; SEBoK presents it as established but does not formalize the structural move).
  • "Both product and service systems require an enterprise system context" — μ / β under the corpus, π in the source.

A.5 Residuals

"Loose coupling" and "late binding" appear in the page's defined-terms list but are not elaborated within the source read available to this distillation.

The terms are likely articulated in linked SEBoK pages; the residual is local to this article and may dissolve under inspection of the linked pages. Logged for subsequent verification.

A.6 Provisional Refinements

The article's enterprise-vs-organization distinction (an enterprise includes organizations plus people, knowledge, processes, principles, policies, practices, doctrines, theories, beliefs, facilities, land, intellectual property) is broader than Doc 571's institutional ground as currently articulated. Doc 571's revised Section X added the four-state taxonomy (stable / conflicted / decayed / evacuated) but did not yet absorb the organization-versus-enterprise sub-distinction. The candidate refinement remains open as Doc 571 Open Question 6.

A.7 Cross-Links

Form documents. Doc 548 (Ladder), Doc 572 (Lattice extension), Doc 510 (Substrate-and-Keeper), Doc 571 (Institutional Ground), Doc 573 (Co-Production), Doc 270 (Pin-Art).

Part-level reformulations. SE-005 (Part 2 — Foundations, primary), SE-007 (Part 4 — Applications, secondary).

Adjacent SEBoK concepts. Systems Approach Applied to Engineered Systems, Systems Fundamentals, Engineered Systems, Identifying and Understanding Problems and Opportunities, Product Systems Engineering, Service Systems Engineering, Enterprise Systems Engineering, System of Systems.


III. Pilot B — Sequential Development Approach (Vee Model)

B.1 Source

  • Page: Sequential Development Approach (the canonical SEBoK location for the Vee Model treatment; the standalone Vee_Model slug returns 404 and Vee_(V)Model(glossary) is a term-only definition)
  • URL: https://sebokwiki.org/wiki/Sequential_Development_Approach
  • License: CC BY-SA 3.0 (SEBoK)
  • Retrieved: 2026-04-29

B.2 Source Read

The article presents sequential development as a traditional, phase-based methodology, introducing the Vee Model as its primary example. The model decomposes downward on the left side (requirements analysis and design), realizes the system at the midpoint, and integrates upward on the right side (verification and validation). Each decomposition level on the left has a paired verification activity at the matching level on the right. The article positions sequential development as the baseline against which iterative, evolutionary, agile, and lean approaches are contrasted, and notes that sequential approaches work best in low-uncertainty environments where requirements are stable.

B.3 Structural Read

Form IV — Pin-Art Model (Doc 270). The V is a pin-set. The left side installs the pins (requirements pin, architecture pin, detailed-design pin, build pin); the right side verifies that the substrate retained each pin's intended shape. The Vee shape is the pin-art model rendered with paired installation-and-verification per layer. SEBoK draws the V as a project-management visualization; the corpus reads it as the canonical paired-pin discipline for sequential engineering.

Form VI — Pulverization (Doc 445). The right side of the V is pulverization at engineering scale. Each verification activity is the corresponding decomposition's pulverizer. The article's claim that "late discovery of defects or requirement mismatches can be costly" reformulates as: pulverization that occurs late is pulverization without remedial reach. The V's discipline is pulverization-at-the-rung-where-the-pin-was-installed.

Form III — Substrate-and-Keeper Composition (Doc 510). The keeper (the systems engineer or program manager) supplies the V's structure; the substrate (the engineering team) flows through it. The V's left-right symmetry is the keeper's discipline of matching every supply act with a paired verification act at the same rung. The article's emphasis that "early engagement in requirement analysis and system design is critical" is the keeper-side discipline that the supply act be done well, since downstream pulverization at the same rung will test it directly.

Form X — Institutional Ground (Doc 571). The article's claim that sequential approaches work best in "low uncertainty and minimal need for flexibility" is a ground condition. Under Doc 571's state taxonomy (Section X), the Vee functions when the institutional ground is stable with respect to the requirements axis; under decayed or conflicted ground, the V's discipline produces costly rework rather than coherent engineering. SEBoK names the condition; the corpus reads it as ground-state functional dependency.

Form III (extension) — Lattice Extension of the Ladder (Doc 572). The article notes that some Vee variations include feedback loops between right and left sides. The pure chain V cannot express the loops; the lattice can. Variants of the Vee are not failures of the model; they are the lattice generalizing the chain to handle multi-rung simultaneity. (Doc 572's Appendix A worked example, added after this pilot, formalizes the lattice reading of development-approach composition more broadly.)

Form IX — Architectural School as Formalization (Doc 538). The article's positioning of sequential development as the baseline against which iterative, evolutionary, agile, and lean are contrasted is school-internal taxonomy work. The school is articulating its own development-approach lattice. The contrasts are sibling-Form composition rules (Doc 572) the school has not yet formalized as such.

B.4 Tier-Tags

  • "Sequential approaches work best when requirements are well-defined, stable, and unlikely to change" — π / α (recapitulation; well-warranted by Royce 1970, INCOSE 2023, ISO/IEC/IEEE 24748-1).
  • "Early engagement in requirement analysis is critical" — π / α.
  • "The V's left-right symmetry pairs decomposition with verification" — μ / β under the corpus (SEBoK presents the symmetry; the corpus reads it as paired-pin-art-plus-pulverization, a structural composition SEBoK does not formalize as such).
  • "The Vee Model only covers the development stage" — π / α.
  • "Feedback loops in Vee variations" — θ / γ under the corpus (the variations require the lattice; SEBoK presents them as model adjustments but the structural shift is more substantial).

B.5 Residuals

"Dual Vee Model" (Forsberg, Mooz, Cotterman 2005) is referenced as the source of a figure but the structural content of the dual model is not elaborated within the source read available to this distillation.

The dual Vee likely treats system-of-interest engineering paired with a higher-level enterprise engineering V; the residual is local to this article and may dissolve under inspection of the cited source.

B.6 Provisional Refinements

This pilot's provisional refinement (development approaches as a sibling-pin-set lattice) was promoted to a worked example and is now formalized in Doc 572's Appendix A. The pilot's role here is the empirical surfacing that motivated the appendix.

B.7 Cross-Links

Form documents. Doc 270 (Pin-Art), Doc 290 (Pin-Art Formalization), Doc 288 (Pin-Art Method), Doc 445 (Pulverization), Doc 510 (Substrate-and-Keeper), Doc 571 (Institutional Ground), Doc 572 (Lattice Extension, with Appendix A), Doc 538 (Architectural School).

Part-level reformulation. SE-006 (Part 3 — SE & Management).

Adjacent SEBoK concepts. Incremental Development Approach, Evolutionary Development Approach, Agile Development Approach, Lean Engineering, Vee (V) Model (glossary), Verification and Validation knowledge areas.


IV. Pilot C — Hubble Space Telescope Case Study

C.1 Source

  • Page: Hubble Space Telescope Case Study
  • URL: https://sebokwiki.org/wiki/Hubble_Space_Telescope_Case_Study
  • Lead authors: Heidi Davidz, Alice Squires, Richard Freeman. Contributing: Brian White.
  • Underlying study: Mattice, J. (2005). Hubble Space Telescope Case Study. Defense Acquisition University.
  • License: CC BY-SA 3.0 (SEBoK)
  • Retrieved: 2026-04-29

C.2 Source Read

The case study examines the Hubble Space Telescope program as developed by NASA (with Marshall and Goddard centers in management competition), Lockheed Missiles and Space Company (overall integrator), and Perkin-Elmer (optical systems technical lead). The primary failure was a spherical aberration in the primary mirror caused by a test-fixture specification error; correction at design would have cost $1,000, an end-to-end ground test would have cost $10 million, and on-orbit correction cost $1 billion. The case attributes the failure to "insufficient checks, oversight, and independence of the quality assurance function throughout" the NASA-LMSC-P-E delegation chain. Recovery via four servicing missions, enabled by design-for-sustainment, characterizes Hubble as "one of the most successful modern human endeavors." The case derives five Learning Principles spanning stakeholder requirements, planning, integration, life-cycle support, and risk management.

C.3 Structural Read

Form XII — Authority Evacuation (Doc 574), now read as the Evacuated state of institutional ground. The case is the canonical empirical instance of transitive QA delegation into an empty center. The case states it directly: "NASA depended on LMSC as the overall integrator to manage risk in an area where P-E was clearly the technical expert. Accordingly, NASA relied on LMSC and LMSC relied on P-E with insufficient checks, oversight, and independence of the quality assurance function throughout." The QA role was occupied formally at every level; the role's binding effect on the substrate's actual flow had no terminal entity capable of installing it. Under Doc 571's revised state taxonomy, this is the QA-function-axis evacuated state of the program's institutional ground.

Form X — Institutional Ground (Doc 571), Conflicted state. Marshall and Goddard centers were "in keen competition for lead management roles," with Marshall motivated by vehicle-payload space access and Goddard by science mission objectives. Under the state taxonomy, this is conflicted ground: two sub-grounds operate within the same nominal NASA ground, each with competing claims on the keeper role. The dyad operates under composite ground conditioning. NASA's "different research-development-acquisition philosophy compared to DoD frameworks" is a ground-difference relative to defense norms; "diverse international scientific community" requirements add a ground-pluralism dimension at the requirements rung.

The case thus exhibits two states of institutional ground simultaneously, on different axes: conflicted at the program-management axis (Marshall vs. Goddard) and evacuated at the QA-function axis (NASA → LMSC → P-E without terminal binding). This is exactly the multi-axis state-coexistence the revised Doc 571 Section X describes.

Form III — Substrate-and-Keeper Composition (Doc 510), with Doc 530. NASA functions as keeper at the program level; LMSC functions as keeper at the integration level and substrate at the program level; P-E functions as substrate at the integration level. The chain is a layered keeper-substrate composition where each rung's keeper authority depends on the rung above. The rung-2 affordance gap (Doc 530) holds: P-E could not generate program-level oversight from its own resources; LMSC could not generate integrator-level oversight from its position. The chain required NASA-side QA independence and did not receive it.

Form I — SIPE with Threshold (Doc 541), in reverse. The cost progression ($1K → $10M → $1B) is an inverted SIPE: a defect propagates upward through rungs as the substrate flows past gate after gate without the constraint binding. The article's "exponential cost escalation" is the substrate's flow shape when each gate's pin is installed nominally but does not bind. The corpus reads each gate's failure to detect as a missed threshold-crossing of the pulverization function.

Form XI — Co-Production at Sub-Rungs (Doc 573). The Learning Principle 1 finding — "Early and full participation by the customer/user throughout the program is essential to success" — and the institutionalization of the user community via "The Institute" reads as co-production formalization. The user community moved from informal substrate-side input to formal co-author of program requirements, then to formal user representation in management. The case names the process operationally; the corpus reads it as Cluster I co-production at the requirements rung.

Form III (extension) — Lattice Extension of the Ladder (Doc 572). The Learning Principle 5 claim — "For complex programs, the number of stakeholders demands that the program be structured to cope with high risk factors in many management and technical areas simultaneously" — is a multi-Form-layer-binding-one-engagement lattice instance. Single-chain risk management cannot express simultaneous binding by competing concerns; the lattice can.

Form XIII — Virtue Constraints (Doc 314), V1-V4. The case's evaluative voice — "humility about external institutional forces combined with technical rigor in systems engineering discipline produces exceptional outcomes" — is reached by the corpus's virtue-constraint apparatus, not by the structural-form apparatus. "Humility" is structurally analogous to V1 (Dignity of the Person) at the engineer-keeper rung: a constraint on the keeper's stance that prevents disordered emissions about institutional forces (overclaim, blame-shifting, magical thinking about organizational power). "Technical rigor in systems engineering discipline" is the engineering-side analogue of V3 (Truth Over Plausibility): a constraint that requires the engineer's outputs to be defensible-true rather than rhetorically-plausible. The clause is therefore not out-of-scope; it is in-scope under a different layer of the corpus's apparatus. The constraint-set the SE practitioner conforms to has both structural-form constraints (the apparatus this distillation applies) and virtue constraints (the apparatus Doc 314 articulates). The case's evaluative voice points at the virtue layer the structural layer does not reach. (This re-reading was supplied by the keeper after this pilot's first run; the original distillation logged the clause as out-of-scope, which was a Doc 372 hypostatic-boundary application that did not recognize the virtue-constraint reach. The corrected reading sharpens the apparatus.)

C.4 Tier-Tags

  • "Cost of defect progression ($1K → $10M → $1B)" — π / α (warranted by case data).
  • "QA independence and government technical checks on contractor claims are necessary" — π / α (warranted by the case's primary failure).
  • "Inseparability of technical and institutional processes" — μ / β under the corpus (this is Doc 571's institutional ground claim in operational language; SEBoK presents at π).
  • "Field center competition" as a structural condition — μ / β under the corpus (now formalized as Doc 571's Conflicted ground state).
  • "One of the most successful modern human endeavors on any scale of international scope and complexity" — μ / γ at the rhetorical level (functional success is well-warranted; the universal claim is θ tier in strict reading).
  • LP1-LP5 collectively — μ / β (extension of established principles via case-based pulverization).
  • "Humility about external institutional forces combined with technical rigor" — μ / β under the corpus when read through Doc 314 V1 and V3 (virtue-constraint apparatus reaches the clause as conformant constraint specification on the engineer-keeper).

C.5 Residuals

The Friedman-Sage nine-concept-area framework (Requirements Definition, Systems Architecture, Design, Verification/Validation, Risk Management, Integration/Interfaces, Life Cycle Support, Deployment, Program Management) is referenced as the case's organizational structure but the framework's internal articulation is not present in the source read available; logged as a candidate for distillation in its own right, not as a residual against this article.

(The previously-logged "humility" residual has been moved to Section C.3 under the Virtue Constraints reading and is no longer treated as out-of-scope.)

C.6 Provisional Refinements

This pilot's provisional refinement (the ground-state taxonomy: stable / conflicted / decayed / evacuated) was promoted to a formal section and is now articulated in Doc 571 Section X. Doc 574 is correspondingly re-read as the operational articulation of Doc 571's evacuated state. The pilot's role here is the empirical surfacing that motivated the formalization.

C.7 Cross-Links

Form documents. Doc 510 (Substrate-and-Keeper), Doc 530 (Affordance Gap), Doc 541 (SIPE with Threshold), Doc 571 (Institutional Ground, with Section X state taxonomy), Doc 572 (Lattice Extension), Doc 573 (Co-Production), Doc 574 (Authority Evacuation, now read as evacuated-state operational articulation), Doc 372 (Hypostatic Boundary), Doc 270 (Pin-Art), Doc 445 (Pulverization), Doc 314 (Virtue Constraints V1-V4).

Part-level reformulation. SE-010 (Part 7 — Implementation Examples).

Adjacent SEBoK concepts. Risk Management, Verification, Validation, Stakeholder Requirements, Systems Integration, Life Cycle Models, Friedman-Sage Framework.


V. Findings Across the Three Pilots

The methodology validates uniformly. Three articles of three different genres (foundational, methodological, empirical case) reformulate cleanly under the corpus's apparatus at consistent compression ratios (~600-900 words per article) with productive surface area for refinements.

Forms invoked across the three pilots. Doc 548 (Ladder), Doc 572 (Lattice extension), Doc 510 (Substrate-and-Keeper), Doc 530 (Affordance Gap), Doc 571 (Institutional Ground, now with state taxonomy), Doc 573 (Co-Production), Doc 270 (Pin-Art), Doc 290 (Pin-Art Formalization), Doc 288 (Pin-Art Method), Doc 445 (Pulverization), Doc 538 (Architectural School), Doc 541 (SIPE with Threshold), Doc 574 (Authority Evacuation), Doc 372 (Hypostatic Boundary), Doc 314 (Virtue Constraints V1-V4). Fifteen forms in three articles.

Refinements that emerged from the pilots.

  • Doc 571 Section X formalized — the four-state ground taxonomy (stable / conflicted / decayed / evacuated), absorbing Doc 574 as the evacuated-state operational articulation.
  • Doc 572 Appendix A added — worked example of development approaches as a sibling-pin-set lattice.
  • Doc 314 reach into SEBoK content recognized — the virtue-constraint apparatus is part of the corpus's reading equipment for SE evaluative claims, not a peripheral form. Future distillations should test for V1-V4 readings whenever SEBoK content carries evaluative or aspirational voice.

Methodology adjustments.

  • Six-section template revised to seven sections after Pilot A; Provisional Refinements section added.
  • Out-of-scope residuals must be checked against the virtue-constraint apparatus before being logged as out-of-scope. The "humility" residual in Pilot C was initially logged as out-of-scope under Doc 372 alone; the keeper's correction sharpened the read by invoking Doc 314.
  • The seven-section template is now considered stable for scaling.

Compression and yield. Three pilots produced approximately 2400 words of distilled corpus content from approximately 5000-6000 words of source material, with full structural preservation, fifteen distinct form invocations, two formalized refinements, and one apparatus-reach correction. The yield-per-word is high; scaling is supported.


VI. Pilot Verdict

Three pilots, seven-section template stable, fifteen forms exercised, two refinements promoted to formal status (Doc 571 Section X, Doc 572 Appendix A), one apparatus-reach correction (Doc 314 virtue-constraint apparatus is part of the per-article distillation reading equipment).

The methodology validates. The corpus's apparatus reads SEBoK at the per-article granularity with discipline. Scale-up is recommended.


Appendix: Originating Prompts

"Let's pilot the first candidate"

"Apply the refinements and then continue pilot"

"lets do a worked example as an appendix to doc 572 / put these three pilots into the same doc and delete the prev docs created for the additional two. / Regarding: the case's "humility about external institutional forces" clause... / This seems analogous to something like a virtue constraint which the corpus utilizes to ensure that resolver emissions are not disordered (ie alignment). / let's also do the ground state taxonomy refinement, add it to doc 571 / Once you do these, report and we will work on scaling up."

(The first prompt opened Pilot A. The second opened Pilots B and C with the seven-section template. The third consolidated the three pilots into this single document, formalized the worked example in Doc 572 Appendix A, formalized the ground-state taxonomy in Doc 571 Section X, and corrected the Pilot C residual to read the "humility" clause through the Doc 314 virtue-constraint apparatus.)