Bidirectional Consistency Mapping¶
Keep two independently changing representations meaningfully consistent by defining both directional mappings, controlling update propagation and echo, resolving conflict, and testing round-trip and convergence behavior.
Essence¶
Bidirectional Consistency Mapping keeps two independently mutable representations in a governed relationship. Each side can receive legitimate changes, but their schemas, local context, precision, timing, and authority may differ. The goal is not necessarily identical state. It is a declared correspondence that remains true within known latency, loss, and conflict boundaries.
Two-way synchronization is not two one-way copies placed back to back. A value transformed from A to B may return through the reverse transform in a different form. That return can be mistaken for a new update, bounce forever, erase information, or overwrite independent work. The archetype treats forward and reverse mapping, change identity, echo suppression, conflict, deletion, and convergence as one design system.
Its core artifact is a versioned consistency map: the paired scope and identity; the correspondence invariant; both directional transformations; information-loss and local-only boundaries; authority and propagation rules; conflict and exception classes; and the tests and health signals that show whether the pair stabilizes safely.
Compression statement¶
When two representations of the same or intentionally corresponding state can each change and neither can be treated as a passive read-only copy, establish an explicit bidirectional consistency map. Define the paired scope and invariants; specify forward and reverse transformations including lossy fields; capture changes with identity and causal context; propagate them under authority and latency rules; suppress echoes and duplicates; classify concurrent and noninvertible conflicts; preserve exceptions; verify round-trip, fixed-point, and convergence properties; expose lag and divergence; and govern schema, mapping, and authority migration.
Canonical formula: paired states A and B + relation R + transforms f:A→B and g:B→A + change identity C + authority/conflict policy P + echo guard E + convergence criterion K; valid iff intended invariants hold and repeated propagation reaches an acceptable fixed point without unbounded oscillation or silent loss
When This Archetype Applies¶
Complete catalog groundingAt least one sufficient condition set is fully represented by existing primes or domain-specific abstractions.
Diagnostic problem
Two records, models, systems, views, ledgers, plans, or physical/digital representations are expected to remain corresponding while either side can change. Their schemas, timing, precision, authority, and local rules differ. Naive two-way copying creates update loops, stale overwrite, duplicate effects, loss of fields that have no reverse representation, competing edits, ambiguous deletion, and false agreement. One side may appear synchronized even though the semantic relation has drifted or the mapping changed.
What this problem means
The structural problem begins with two kinds of autonomy. Representational autonomy means A and B use different schemas, units, categories, aggregation, or local fields because each serves a different task. Operational autonomy means each side can continue changing through different users, devices, institutions, or workflows. The system nevertheless needs a stable relation between them.
Naive synchronization hides this tension under transport. A connector moves a field, but it does not know whether the field is authoritative, derived, lossy, provisional, local-only, or rights-affecting. Running the connector in reverse doubles the ambiguity. Timestamps and last-write-wins produce apparent resolution while erasing intent and depending on clock and delivery assumptions.
The most characteristic failures are circular. Propagation creates another observation, the observation triggers reverse propagation, normalization changes the value, and the pair oscillates. Other failures are silent: a many-to-one category cannot be reconstructed, a stale update overwrites a newer local change, a retry duplicates an external effect, or a deletion is forgotten and later resurrected.
The intervention makes correspondence semantic rather than merely operational. It states what relation should hold, which differences are legitimate, how changes carry origin and version, what conflict means, and which evidence establishes an acceptable fixed point.
Applicability expression7 distinct conditions
′ context guard? connective not recorded∅ no catalog witness yet
groundedpartly groundedopen
7 conditions, all required.
7Required in every casenumbered 1–7
These hold no matter which pattern applies.
Uncoordinated shared-state updates · grounded
Multiple representations of shared state accept legitimate uncoordinated local updates.
The source archetype describes the situation as follows: Both representations accept legitimate local updates. The normalized requirement above isolates the load-bearing portion used in this condition set.
primeEventual Consistency— Distributed copies of shared state are allowed to diverge under local updates, with a deterministic merge guaranteeing they reconverge once updates stop.
Bounded propagation deadline · grounded
Changes must propagate across the relation within a bounded staleness window or before consequential action.
The source archetype describes the situation as follows: Changes must be reflected across the relation within a bounded delay or before consequential action. The normalized requirement above isolates the load-bearing portion used in this condition set.
primeEventual Consistency— Distributed copies of shared state are allowed to diverge under local updates, with a deterministic merge guaranteeing they reconverge once updates stop.
Asymmetric mapping directions · grounded
Forward and reverse mappings are structurally distinct rather than trivially identical.
The source archetype describes the situation as follows: Forward and reverse mappings are not trivially identical. The normalized requirement above isolates the load-bearing portion used in this condition set.
primePreimage— The set of all inputs that map to a given output under some mapping.
Lossy noninvertible mapping · grounded · any one of 4
Some information is lossy, local-only, or noninvertible across the mapping.
The source archetype describes the situation as follows: Some information is lossy, local-only, or noninvertible. The normalized requirement above isolates the load-bearing portion used in this condition set.
domainNear-equivalence Mapping— Bridge two concepts in different controlled vocabularies with a declared correspondence that carries an explicit, typed loss-risk on the bridge itself, so consumers can route each substitution on whether their use falls in the safe zone.
domainSchema Mapping Relation— Bridge two independently governed classification schemes with an explicit, typed assertion — source concept, target concept, and a fidelity grade (exact / close / broader / narrower / related) — so consumers know exactly what the bridge guarantees without merging the schemes.
context guardThe correspondence type on this mapping is broadMatch.
suppliesAt least some mapped information has the limitation. · A complete branch is that information is lost by the mapping.
domainHandoff Loss— Locate post-transition failures at the transfer relation itself: work crossing a boundary between actors arrives degraded because a bounded artifact cannot carry the sender's tacit state, so downstream decisions run on an impoverished reconstruction.
domainResponsive-Layout Breakage— Diagnose the silent UI failure where an interface's content survives a viewport, device, or locale transformation but its layout-encoded meaning — priority, adjacency, hierarchy, above-the-fold prominence — is lost, so a passing content-accessibility check actively conceals the defect.
How this was matched — 3 shared + 3 branches
A mapping contains information that cannot be preserved symmetrically and reversibly across its sides.
All of
- roleThe affected entity is information represented in a mapping.
- domainThe limitation holds across the mapping between representations.
- quantifierAt least some mapped information has the limitation.
…and any one of
- relationA complete branch is that information is lost by the mapping.
- relationA complete branch is that information exists only on one mapping side.
- relationA complete branch is that the mapping is noninvertible for the information.
Temporary concurrent divergence · grounded
Concurrent updates or delayed delivery can create temporary divergence.
The source archetype describes the situation as follows: Concurrent changes or delayed delivery are possible. The normalized requirement above isolates the load-bearing portion used in this condition set.
primeEventual Consistency— Distributed copies of shared state are allowed to diverge under local updates, with a deterministic merge guaranteeing they reconverge once updates stop.
Meaningful absence propagation · grounded
Deletion, revocation, or represented absence has operative meaning that must propagate.
The source archetype describes the situation as follows: Deletion, revocation, or absence has meaning. The normalized requirement above isolates the load-bearing portion used in this condition set.
domainStrong Consistency— Guarantee that every read of a replicated store reflects the most recently completed write and all clients see one real-time-consistent total order (linearizability), so the system can be reasoned about as a single copy — bought with a coordination round and partition-time unavailability.
context guardThe most recently completed write is an operative deletion.
suppliesThe source role is an operative negative or removal state in one representation. · The state has operative rather than merely descriptive meaning. · A complete branch uses deletion as the operative state.
How this was matched — 4 shared + 3 branches
An operative negative-state semantic must propagate between corresponding representations.
All of
- roleThe source role is an operative negative or removal state in one representation.
- roleThe destination role is the corresponding representation across the mapping.
- relationThe state has operative rather than merely descriptive meaning.
- modalityThe operative meaning must propagate to the counterpart.
…and any one of
- relationA complete branch uses deletion as the operative state.
- relationA complete branch uses revocation as the operative state.
- relationA complete branch uses represented absence as the operative state.
Evolving mapping governance · grounded · any one of 3
The mapping rules or authority to update either representation can evolve.
The source archetype describes the situation as follows: Mapping or authority can evolve. The normalized requirement above isolates the load-bearing portion used in this condition set.
domainDeclared Equivalence Mapping— An explicit, authoritative, versioned assertion that two concepts from different vocabularies are interchangeable for stated purposes — collapsing a cross-scheme distinction to zero for consumers who trust the declaration rather than re-verifying at use-time.
domainSchema Mapping Relation— Bridge two independently governed classification schemes with an explicit, typed assertion — source concept, target concept, and a fidelity grade (exact / close / broader / narrower / related) — so consumers know exactly what the bridge guarantees without merging the schemes.
domainReplacement Relation— Record that a distinct successor resource takes over a predecessor's canonical standing and flags it obsolete, as a bidirectional machine-routable link, so consumers read currency off the chain rather than inspecting the artifacts themselves.
context guardThe predecessor and successor resources are mapping rules.
suppliesThe changing regime governs a mapping between representations. · A complete branch is evolution of the mapping rules.
How this was matched — 3 shared + 2 branches
A bidirectional representation regime can change through its mapping rules or update authority.
All of
- domainThe changing regime governs a mapping between representations.
- modalityEvolution of the governing element is possible.
- timingThe asserted relation is evolution over time.
…and any one of
- relationA complete branch is evolution of the mapping rules.
- relationA complete branch is evolution of authority to update either representation.
Coverage
7 of 7 conditions grounded.
When to Use This Archetype¶
Use this archetype when A and B represent the same or deliberately corresponding reality and both can change legitimately. Typical cases include an editable view and domain model, local and central records, a subledger and general ledger, a physical asset and digital twin, a structured model and human document, or configuration intent and deployed state.
The key question is whether one side can become a read-only projection. If yes, prefer a simpler source-of-truth and one-way publication design. If no, identify why each side needs update authority and whether that authority can be scoped by field, operation, lifecycle state, or context.
Use Reconciliation After Drift when the pair is already inconsistent and needs a bounded repair, especially if ordinary propagation is paused. Use Shared State Consistency Contract Design when the system presents multiple clients with one logical shared state and the design object is legal histories, ordering, visibility, and partition behavior. Use Asynchronous Replica Convergence for a replica population receiving the same update evidence under homogeneous or merge-governed semantics.
Do not use bidirectional binding as an integration default. It introduces circular dependence and semantic migration cost. The pattern earns its complexity only when independent update authority and ongoing correspondence are both genuinely required.
Structural Problem¶
The structural problem begins with two kinds of autonomy. Representational autonomy means A and B use different schemas, units, categories, aggregation, or local fields because each serves a different task. Operational autonomy means each side can continue changing through different users, devices, institutions, or workflows. The system nevertheless needs a stable relation between them.
Naive synchronization hides this tension under transport. A connector moves a field, but it does not know whether the field is authoritative, derived, lossy, provisional, local-only, or rights-affecting. Running the connector in reverse doubles the ambiguity. Timestamps and last-write-wins produce apparent resolution while erasing intent and depending on clock and delivery assumptions.
The most characteristic failures are circular. Propagation creates another observation, the observation triggers reverse propagation, normalization changes the value, and the pair oscillates. Other failures are silent: a many-to-one category cannot be reconstructed, a stale update overwrites a newer local change, a retry duplicates an external effect, or a deletion is forgotten and later resurrected.
The intervention makes correspondence semantic rather than merely operational. It states what relation should hold, which differences are legitimate, how changes carry origin and version, what conflict means, and which evidence establishes an acceptable fixed point.
Intervention Logic¶
First bind identity and scope. A system cannot safely synchronize records it cannot reliably match. Define stable identifiers, versions, object and relation boundaries, and local state explicitly excluded from the pair. Test identity splits and merges, not only ordinary matches.
Next define correspondence. Some fields must be exactly equal; some are transformed by units or code mapping; some must remain within tolerance; some are derived; some are intentionally local. The invariant should be stated at the semantic level needed for action. Byte equality is often irrelevant and sometimes harmful.
Specify the two directional transforms separately. Forward mapping can collapse categories that reverse mapping cannot recover. Reverse mapping can fill defaults or infer state that was never present. Record error behavior and unknown, absent, deleted, and not-applicable semantics. Treat noninvertibility as designed information, not a test failure to suppress.
Capture changes with stable identity and origin. A propagating event needs object, operation, source side, version or causal predecessor, mapping version, and idempotency identity. This information lets the other side distinguish a new local edit from the echo of its earlier update.
Then govern authority and conflict. Authority may be field-specific or conditional. A local clinical system might govern narrative while a central registry governs program identity. Concurrent compatible edits can compose; stale edits can be rejected; noninvertible changes can become exceptions; rights-affecting disputes can require human review. Unresolved state should constrain consequential action rather than disappear behind a green connector status.
Finally verify and observe the relationship. Run A→B→A and B→A→B tests across boundary, missing, concurrent, delete, retry, reorder, and schema-version cases. Define the fixed-point relation, not merely one expected string. Monitor lag, oscillation, conflicts, lost-field warnings, tombstone age, transform failure, and mapping-version skew. Treat changes to mapping or authority as semantic migration with shadow execution, backfill, cutover, validation, and rollback.
Key Components¶
| Component | Description |
|---|---|
| Paired State Scope and Identity ↗ | This component defines both state spaces, versions, object boundaries, identities, relationships, and excluded local state. It must explain merges, splits, replacement identifiers, and identity uncertainty. A perfect mapping applied to the wrong entity is a severe integrity failure. |
| Bidirectional Correspondence Invariant ↗ | The invariant states which properties must agree exactly, correspond through transformation, remain within tolerance, or remain intentionally different. It also states the time or action boundary within which consistency is required. “Eventually synchronized” is not sufficient when a rights or safety decision occurs before eventual arrival. |
| Directional Transformation Pair ↗ | Forward and reverse mappings are separately named, reviewed, tested, and versioned. Each describes units, codes, normalization, aggregation, derived state, defaults, errors, and permission. Even if code generation produces both directions, governance must not assume invertibility. |
| Information-Loss and Locality Boundary ↗ | This component identifies many-to-one collapse, precision loss, local-only fields, transient edit state, restricted information, and unknown-versus-absent semantics. It lets a successful round trip mean “equivalent under declared loss” instead of encouraging hidden data fabrication. |
| Causal Change Identity and Origin ↗ | Every propagated change carries enough context to recognize duplicate delivery, stale precedence, concurrent work, echo, and the mapping semantics under which it was generated. Wall-clock timestamps alone rarely provide sufficient causality. |
| Scoped Authority and Propagation Policy ↗ | Authority is assigned by field, operation, lifecycle stage, or condition. The policy also defines triggers, latency, batching, write restrictions, and temporary one-way modes. Rejected changes should be visible to their origin; silent rejection creates false local belief. |
| Echo, Idempotence, and Fixed-Point Guard ↗ | The guard prevents a synchronization-generated change from being treated as new local intent and prevents retry from duplicating effects. It also defines whether normalization stabilizes after one cycle and detects oscillation across multiple values. |
| Bidirectional Conflict and Exception Policy ↗ | The policy distinguishes equivalent, composable, authority-resolved, stale, noninvertible, delete, rights-affecting, and human-decision conflicts. It preserves evidence and binds unresolved states to safe operating restrictions. |
| Round-Trip and Convergence Test Oracle ↗ | The oracle defines expected semantic results for both direction cycles and for retry, reorder, delay, concurrency, deletion, mapping change, and boundary values. It should compare equivalence under allowed loss, not only serialized equality. |
| Correspondence Health and Migration Control ↗ | This component monitors semantic health and governs mapping, schema, identity, and authority versions. It supplies shadow runs, backfill, coexistence, cutover, rollback, and historical interpretation so a mapping change cannot silently rewrite meaning. |
Common Mechanisms¶
Bidirectional change-data-capture adapters and dual-write outbox/inbox workflows move changes reliably. They need origin tags, stable identities, and idempotent application. Delivery reliability alone does not establish correspondence correctness.
Forward/reverse mapping specifications and field-level authority matrices externalize meaning and governance. They should record each field's transformation, loss, local status, authority, error behavior, and version. Generated connector configuration can be derived from them but should not replace reviewable semantics.
Synchronization origin tokens and deduplication ledgers prevent echo and replay. Origin tokens say where a change came from and which prior change it answers; deduplication ledgers remember what has already been applied. Value comparison is insufficient because two distinct intents can produce equal values.
Round-trip property tests generate values across ordinary and edge domains and run both cycles. Include unknown, null, absent, deleted, precision limits, unsupported categories, concurrent updates, old mapping versions, and reordering. Shadow sync runs a new mapping against live-like data without authoritative writes and exposes predicted diffs.
Conflict queues and lag/oscillation dashboards make nonconvergence operationally visible. A queue needs affected action, evidence, authority class, owner, age, and safe interim state. A dashboard should distinguish transport backlog from semantic failures, because an empty queue can coexist with silent dropped fields.
Tombstone and revocation propagation prevents delayed copies from recreating removed state. Mapping-version backfill and rollback plans govern historic data and coexistence. These mechanisms become critical when changes cross retention, legal, or safety boundaries.
12 documented mechanisms across 6 implementation forms.
The grouping reflects forms represented among the mechanisms currently documented for this archetype; an absent form is not necessarily an impossible implementation.
Control, Automation & Runtime · 4 mechanisms
- Bidirectional Change-Data-Capture Adapter — Captures origin-tagged changes from both sides and routes them through governed transforms.
- Dual-Write Outbox and Inbox Pattern — Persists intended changes and idempotent receipt so propagation survives partial failure.
- Synchronization Origin Token — Marks propagated changes so the reverse path can suppress echo without discarding independent edits.
- Tombstone and Revocation Propagation — Preserves deletion or revocation evidence long enough to prevent resurrection across delayed paths.
Decision, Gate & Allocation · 1 mechanism
- Synchronization Conflict Queue — Holds nonautomatic conflicts with evidence, authority class, affected action, owner, and resolution status.
Experiment, Test & Rehearsal · 2 mechanisms
- Round-Trip Property-Test Suite — Generates representative and boundary values and tests both directional cycles against allowed equivalence and loss.
- Shadow Sync and Diff Run — Executes a new mapping or policy without authoritative writes and compares predicted state before migration.
Monitoring, Sensing & Alerting · 1 mechanism
- Synchronization Lag and Oscillation Dashboard — Exposes frontier lag, repeated value bounce, conflicts, failed transforms, dropped fields, and stale tombstones.
Record, Log & Register · 1 mechanism
- Idempotency and Deduplication Ledger — Records applied change identities and outcomes so retry does not compound effects.
Representation, Specification & Plan · 3 mechanisms
- Field-Level Authority Matrix — States which side or decision rule governs each field and operation under defined conditions.
- Forward/Reverse Field-Mapping Specification — Records each directional mapping, loss, default, authority, and version.
- Mapping-Version Backfill and Rollback Plan — Governs coexistence, historical backfill, cutover, validation, and rollback for semantic mapping changes.
Parameter / Tuning Dimensions¶
Paired scope granularity¶
Choose whether consistency applies to whole objects, fields, relations, transactions, or derived views. Finer scope preserves local autonomy but increases mapping and authority complexity. Whole-object copying is simpler but can overwrite unrelated local changes.
Consistency latency¶
Define tolerated lag by field and action. Contact detail may tolerate minutes; revocation or safety setpoint may require immediate coordination or one authoritative write path. Connect thresholds to actual use restrictions rather than monitoring only.
Authority symmetry¶
Authority can be symmetric, field-partitioned, lifecycle-dependent, or conditional on evidence. Symmetry should not be assumed because both sides can write. Conversely, a global master label should not erase legitimate local ownership.
Loss tolerance¶
Specify which normalization, aggregation, precision, and local-only differences are allowed. Round-trip expectations should distinguish exact recovery, semantic equivalence, bounded tolerance, and deliberate nonreturn.
Conflict automation¶
Tune the share of conflicts resolved automatically, composed, rejected, compensated, or routed to people. High automation reduces backlog but raises the cost of a mistaken rule. Rights and irreversible effects demand stronger evidence and contestability.
Echo memory and tombstone retention¶
Origin and deletion evidence must outlive the maximum realistic delay and offline horizon. Longer retention improves safety but consumes storage and may conflict with minimization. Use bounded, auditable compaction rather than unreasoned expiry.
Coupling and failure independence¶
Decide whether either side can operate during partner outage, which operations queue, and when staleness makes local action unsafe. Tight real-time coupling may destroy the autonomy that justified separate representations.
Mapping migration strategy¶
Choose big-bang, dual-version, shadow, staged cohort, or field-by-field migration. Map version must travel with changes so old and new semantics can coexist safely during transition.
Invariants to Preserve¶
Identity must remain correct across both sides and versions. Matching errors are not ordinary conflicts; they can expose or overwrite another entity's state.
Source changes must remain distinguishable from synchronization-generated changes. Causal origin is necessary for echo suppression, audit, and preservation of independent intent.
Allowed difference must remain explicit. Local-only and lossy state should not be reported as corruption, while undeclared loss must never be normalized as success.
Duplicate delivery must be harmless and unresolved conflict visible. Retry is normal, and false convergence is not resolution. Consequential actions should know whether the state they consume is accepted, stale, conflicted, or migrating.
Deletion and revocation semantics must survive delay. A system must not recreate removed access, people, obligations, or objects because one path forgot the tombstone.
Every state transition should remain interpretable under the mapping and authority version that produced it. Without semantic provenance, later repair and audit cannot distinguish data error from rule change.
Target Outcomes¶
Successful bidirectional consistency mapping reduces bounce loops, duplicate effects, stale overwrite, resurrection, manual repair, and ambiguous sources of truth. Both representations retain legitimate local function while users can understand how and when they correspond.
Conflict becomes classifiable and governable. Automatic resolution is limited to cases with sound semantics; other cases remain visible with owners and safe interim behavior. Technical health becomes connected to semantic and user-visible risk.
Schema, mapping, and authority evolution becomes safer because it is treated as versioned migration. Teams can shadow, compare, backfill, roll back, and explain historical state rather than discovering a semantic change after silent rewrite.
Tradeoffs¶
Local autonomy competes with consistency. Every additional legitimate write path creates potential conflict, but eliminating local authority may damage responsiveness, context, and institutional legitimacy. Narrow the paired scope and authority rather than choosing false global symmetry.
Low latency competes with validation and failure independence. Immediate propagation reduces staleness but can create tight availability coupling and spread errors rapidly. Batching and review improve control but extend inconsistency windows.
Rich local representation competes with round-trip fidelity. A narrower side cannot preserve every distinction from a richer side. Explicit local-only and loss boundaries are preferable to inventing false reversibility.
Automation competes with intent and rights. Last-write-wins is fast, but it can discard a carefully considered local correction or make a technical clock decide a social question. Use automation where the conflict class is genuinely mechanical.
Tight mapping improves coherence but slows independent evolution. Every schema and policy change must consider both directions and historical states. Periodically ask whether two-way coupling is still justified or should be replaced by event publication, one-way projection, or a shared service.
Failure Modes¶
Echo loops arise when propagated updates look local. Use causal origin tokens and fixed-point tests. Do not suppress every equal value: equal independent intents can matter, while different serializations can be the same echo.
Round-trip loss arises when forward mapping collapses information and reverse mapping reconstructs a default or guess. Declare noninvertibility, preserve local state, and test both cycles. A green test should mean acceptable semantic equivalence under the loss contract.
Stale overwrite arises when delayed changes apply without causal comparison. Use versions or frontiers, preconditions, conflict classes, and explicit stale rejection. Notify the origin so local users do not believe their change succeeded.
Duplicate side effects arise under retry and replay. Stable change identity and an idempotency ledger protect state; irreversible external effects may require a separate side-effect boundary and compensation.
Deletion resurrection arises when tombstones expire too early or deletion authority differs. Treat deletion, revocation, restoration, and retention as operations with explicit propagation and conflict semantics.
False source-of-truth claims arise when authority is global in documentation but distributed in practice. Publish field- and operation-level authority, including who can change the matrix and how disputes are reviewed.
Semantic drift arises when mapping or defaults change as configuration. Version semantics, run shadow diffs, backfill under a plan, and preserve rollback. Historical records must remain interpretable.
False green health arises when transport succeeds but semantic correspondence fails. Monitor dropped fields, oscillation, round-trip properties, conflict age, tombstones, mapping skew, and action-relevant lag.
Neighbor Distinctions¶
source_of_truth_assignment chooses which representation governs a defined scope. This archetype starts when both sides retain legitimate update roles and a continuing two-way relationship must be maintained. It can still use field-level source authority as a component.
reconciliation_after_drift repairs an already-diverged set of representations. This archetype creates the continuing mapping and propagation controls meant to prevent and contain recurrence. Exceptional conflicts may invoke reconciliation.
data_integrity_preservation protects trusted record state across creation, mutation, validation, provenance, reconciliation, and recovery. Bidirectional Consistency Mapping is narrower and adds a stable pair, two directional transformations, loss boundaries, echo/idempotence, round-trip testing, and fixed-point control.
shared_state_consistency_contract_design defines legal observations of one shared logical state under concurrent histories and faults. Here A and B may be intentionally heterogeneous and not equivalent; the invariant is a transformed relation.
asynchronous_replica_convergence governs a replica set expected to reach semantically equivalent state after receiving the same evidence. Bidirectional mapping can preserve asymmetric representations, local-only fields, and different authority.
mapping_reconciliation resolves competing definitions of correspondence. Bidirectional Consistency Mapping assumes a chosen versioned mapping pair and governs ongoing change propagation through it.
traceability_linking records typed origins and consequences but does not require propagation, round trips, or state consistency.
round_trip_code_alignment couples encoding and decoding so content survives a code transformation, while round_trip_serialization_contract reconstructs one structured content model from a portable representation. Neither assumes independently mutable live states, authority on both sides, conflict, echo, local-only fields, or continuing semantic migration.
bidirectional_conceptual_translation builds and validates a meaning bridge between frameworks. It can define the semantic crosswalk used here, but it does not propagate causal state changes, suppress feedback, govern deletion or concurrent edits, or maintain an operational fixed point.
Cross-Domain Examples¶
In application software, an editable currency field and a decimal domain value synchronize both ways. The view preserves invalid draft text and formatting; the model preserves normalized numeric state. Origin tokens prevent validation updates from bouncing, and property tests define acceptable round trips.
In finance, subledger adjustments and general-ledger postings exchange changes under account and close-period authority. Posting identity prevents retry duplication, conflict queues preserve disputed intent, and close thresholds restrict action while lag remains unresolved.
In a digital twin, sensors and operators update a model while approved calibration and setpoints can affect equipment. Unit transforms, latency, uncertainty, and safety authority differ by direction. A transport-complete update is not sufficient if semantic or physical invariants fail.
In public administration, central and local eligibility records exchange status and evidence. Some fields are centrally governed, some locally governed, and adverse-action conflicts require human review and notice. Tombstones prevent removed household members or revoked permissions from returning.
In document systems, a structured content model and a human-edited document synchronize. Comments and layout can remain local, headings and identifiers map structurally, and nonroundtrippable edits become explicit exceptions rather than silent loss.
Non-Examples¶
A warehouse receiving immutable events from one production database is a one-way projection, not bidirectional consistency mapping.
A month-end ledger repair after balances differ is Reconciliation After Drift unless it also establishes the continuing two-way relation.
A homogeneous CRDT replica set with deterministic merge is Asynchronous Replica Convergence. It may use similar identity and idempotence mechanisms, but it does not translate between heterogeneous state spaces.
A committee resolving how two vocabularies correspond is Mapping Reconciliation. The mapping definition is the disputed object, not live state propagation.
A webhook pair without identity, loss, authority, echo, conflict, and round-trip semantics is merely an implementation mechanism and likely an unsafe one.
Related Abstractions¶
Abstractions this archetype builds on — directly (a source ingredient) or as a related pattern. Links follow the typed catalog namespace.
Built directly on (4)
- Feedback: Outputs influence inputs.
- Invariance: Properties unchanged under transformation.
- Relation: Describes associations or dependencies.
- State and State Transition: Captures system condition and evolution.
Also references 3 related abstractions
- Coupling: Interdependence among subsystems.
- Equivalence Relation: Groups elements into equivalence classes.
- Indirection: Introduces intermediary references.
Variants¶
Narrower or domain-specific specializations that share this archetype's core structure. Recognized variants are established; candidate variants are provisional.
Model–View Bidirectional Binding · domain variant · recognized
Maintains correspondence between an application model and an editable presentation or form state.
- Distinct from parent: The paired B state includes user-interaction state that should not all propagate into the domain model.
- Use when: users edit the view and program logic edits the model; formatting and validation differ; unsaved or invalid local state must remain visible.
- Typical domains: software interfaces, document editors, configuration consoles
- Common mechanisms: synchronization origin token, round trip property test suite
Master/Peer Record Synchronization · governance variant · recognized
Maintains paired records when authority is asymmetric for some fields but peer-like or local for others.
- Distinct from parent: Gives the scoped-authority matrix and rejected-write feedback greater weight.
- Use when: one system governs identity or lifecycle while local systems govern contextual fields; updates flow in both directions under field-level authority.
- Typical domains: master data, public administration, healthcare, supply chain
- Common mechanisms: field level authority matrix, synchronization conflict queue, bidirectional change data capture adapter
Physical–Digital Twin Consistency · domain variant · recognized
Maintains a governed correspondence between a physical asset or process and a digital twin that can also issue control or configuration changes.
- Distinct from parent: Adds measurement uncertainty, control authority, and physical safety boundaries.
- Use when: sensor and model states differ in units or cadence; digital actions can affect physical behavior; latency and safety determine authority.
- Typical domains: manufacturing, energy, infrastructure, robotics
- Common mechanisms: synchronization lag and oscillation dashboard, shadow sync and diff run
Rights-Affecting Record Consistency · risk or failure variant · recognized
Maintains paired eligibility, identity, entitlement, status, or compliance records with notice, evidence, and appeal for consequential conflicts.
- Distinct from parent: Raises governance and procedural requirements beyond technical convergence.
- Use when: synchronized values affect access benefits obligations or enforcement; automated conflict resolution can harm a person.
- Typical domains: benefits administration, healthcare, identity, education, compliance
- Common mechanisms: synchronization conflict queue, field level authority matrix
Near names: Two-Way Consistency Mapping, Paired State Binding, Two-Way Sync, Bidirectional Data Binding.
Editorial Notes¶
Problem Classification¶
Classification: Composition, Interface & Interoperability Failure → Distributed Consistency & Recombination Failure
Problem kernel: two mutable representations cannot remain corresponding
Rationale: Either side can change under different schemas and timing, so naive reciprocal copying creates loops, stale overwrite, duplication, and lost updates
Independent corroboration: The earliest necessary condition in the frozen evidence is: Two records, models, systems, views, ledgers, plans, or physical/digital representations are expected to remain corresponding while either side can change. That is a distributed consistency and recombination failure problem because Mutable stores, views, partial summaries, producers, and consumers cannot remain corresponding or recombine without loops, drift, information loss, ordering ambiguity, or unclear delivery state.
Review outcome: Independent reviewer agreement; high confidence.