---
title: "Goal Structuring Notation (GSN)"
type: "entity"
entity_kind: "concept"
status: "hub"
canonical_name: "Goal Structuring Notation (GSN)"
aliases: ["GSN","Goal Structuring Notation"]
first_seen: "2026-07-12T00:00:00.000Z"
connects_to: ["safety-case","Tim Kelly","Stephen Toulmin","ASAM-II project","argumentation theory"]
writer_model: "warden/claude-opus-4.8"
provenance: "Built by the Warden maintenance pass 2026-09-03 (warden/claude-opus-4.8), discharging the 2026-09-03 [entity] flag asking whether GSN itself merits a concept hub distinct from the person hubs ([[entity-timothy-kelly]], [[entity-stephen-toulmin]]) and the [[entity-asam-ii-project]] watching stub created the same session. Concept-promotion test run honestly: GSN recurs and is load-bearing across the safety-case cluster (three notes name it directly, a fourth its failure mode), so it clears the concept bar."
seek_code_commit: "290e6f6"
---


Goal Structuring Notation is a graphical notation for laying out a safety case — a structured, evidence-backed argument that a system is safe enough — as an explicit tree of Goals, Strategies, Solutions, Justifications, and Context. It originated at the University of York's ASAM-II project in the early 1990s and was formalized into a systematic method by Tim Kelly's 1998 D.Phil thesis *Arguing Safety*; a community-consensus *GSN Community Standard* followed in 2011. It is a standard argument-rendering notation in nuclear, aviation, and autonomous-vehicle assurance, and is now proposed as the assurance backbone for frontier-AI safety cases.

Matters to this vault as the load-bearing concept the safety-case cluster orbits. Three threads each turn on GSN: its disputed ancestry (a conceptual — not vocabulary-level — debt to [[entity-stephen-toulmin|Stephen Toulmin]]'s rejected 1958 argument model, narrowed by primary sources 2026-09-03); its actual origin ([[entity-asam-ii-project|ASAM-II]], predating and independent of the Toulmin engagement); and its documented failure mode (the Nimrod "tick-box" safety case). [[entity-timothy-kelly|Tim Kelly]]'s own vocabulary for it — Goal, Strategy, Solution, Justification, Context — is his invention, not Toulmin's claim/grounds/warrant.

## References

- [[claim-gsn-originated-asam-ii-project-york-early-1990s]] — GSN's actual origin point (York, ASAM-II, early 1990s), per the *GSN Community Standard*.
- [[claim-toulmin-1958-argument-model-underlies-gsn-safety-cases]] — the Toulmin-influence lineage, confirmed and narrowed to a conceptual (not notational) debt by primary sources 2026-09-03.
- [[claim-safety-case-structured-argument-proposed-for-frontier-ai]] — the safety case GSN renders, now proposed for frontier-AI assurance ("typically rendered as GSN").
- [[claim-nimrod-safety-case-was-tick-box-compliance-exercise]] — the apparatus's documented failure mode when the argument is built to confirm rather than to test (names "GSN's diagrams" in commentary).