Behavioral Authority in Sealed Models: Execution Semantics and Governed Evolution
Author: Bhash Ganti (aka Bachi) (c) 2026 Bhash Ganti. All rights reserved. Released under the Apache-2.0 License. bachipeachy@gmail.com · ORCID 0009-0007-3810-6520 Submitted to: Springer, Software and Systems Modeling — under review. No preprint DOI; this page is the Author’s Original Version as submitted. Abstract Model-driven systems execute models, but the model does not always determine every behavior. A generator, build step or runtime may supply a default, route or recovery path that the model never declared. This paper asks whether a sealed model can be the authority for all domain-visible decisions, leaving construction and execution only to realize what the model specifies. We define six classes of domain-visible decision and introduce the sealed behavioral model as their authoritative source. We give a step-level execution semantics: the runtime reads routes and effects from the sealed model and refuses when the model is silent. We state three properties for a conforming realization—determination closure, non-addition and recoverability—and derive checkable obligations for construction, the runtime and the trace. As supporting context, we describe a discipline for changing models by deriving each successor from a named, frozen predecessor. ...