Goal Structuring Notation (GSN)

Goal Structuring Notation is a graphical notation for laying out a safety case — a structured, evidence-backed argument that a system is safe enough — as an explicit tree of Goals, Strategies, Solutions, Justifications, and Context. It originated at the University of York's ASAM-II project in the early 1990s and was formalized into a systematic method by Tim Kelly's 1998 D.Phil thesis Arguing Safety; a community-consensus GSN Community Standard followed in 2011. It is a standard argument-rendering notation in nuclear, aviation, and autonomous-vehicle assurance, and is now proposed as the assurance backbone for frontier-AI safety cases.

Matters to this vault as the load-bearing concept the safety-case cluster orbits. Three threads each turn on GSN: its disputed ancestry (a conceptual — not vocabulary-level — debt to Stephen Toulmin's rejected 1958 argument model, narrowed by primary sources 2026-09-03); its actual origin (ASAM-II, predating and independent of the Toulmin engagement); and its documented failure mode (the Nimrod "tick-box" safety case). Tim Kelly's own vocabulary for it — Goal, Strategy, Solution, Justification, Context — is his invention, not Toulmin's claim/grounds/warrant.

References

• claim-gsn-originated-asam-ii-project-york-early-1990s — GSN's actual origin point (York, ASAM-II, early 1990s), per the GSN Community Standard.
• claim-toulmin-1958-argument-model-underlies-gsn-safety-cases — the Toulmin-influence lineage, confirmed and narrowed to a conceptual (not notational) debt by primary sources 2026-09-03.
• claim-safety-case-structured-argument-proposed-for-frontier-ai — the safety case GSN renders, now proposed for frontier-AI assurance ("typically rendered as GSN").
• claim-nimrod-safety-case-was-tick-box-compliance-exercise — the apparatus's documented failure mode when the argument is built to confirm rather than to test (names "GSN's diagrams" in commentary).