@agenticprimitives/ontology 1.0.0-alpha.12 → 1.0.0-alpha.13

package/mappings/agent-discovery-standards.ttl

@@ -0,0 +1,92 @@
+# Mappings — AP discovery ontology ↔ Agent Explorer / ERC-8004 / HCS / OASF.
+# External vocabularies are pattern sources and projection targets, not package
+# semantics. Prefer rdfs:seeAlso and skos:closeMatch; reserve owl:sameAs for
+# true identity equivalence.
+
+@prefix ap:       <https://agenticprimitives.dev/ns/core#> .
+@prefix approf:   <https://agenticprimitives.dev/ns/profile#> .
+@prefix apreg:    <https://agenticprimitives.dev/ns/registry#> .
+@prefix apdisc:   <https://agenticprimitives.dev/ns/discovery#> .
+@prefix apsec:    <https://agenticprimitives.dev/ns/security-exposure#> .
+@prefix aptrust:  <https://agenticprimitives.dev/ns/trust#> .
+@prefix aps:      <https://agenticprimitives.dev/ns/skill#> .
+@prefix apatt:    <https://agenticprimitives.dev/ns/attestation#> .
+
+@prefix erc8004:  <https://eips.ethereum.org/EIPS/eip-8004#> .
+@prefix hcs10:    <https://hol.org/standards/hcs-10#> .
+@prefix hcs11:    <https://hol.org/standards/hcs-11#> .
+@prefix hcs14:    <https://hol.org/standards/hcs-14#> .
+@prefix hcs26:    <https://hol.org/standards/hcs-26#> .
+@prefix oasf:     <https://schema.oasf.outshift.com/#> .
+@prefix ae:       <https://github.com/agentictrustlabs/agent-explorer/tree/main/apps/ontology/ontology#> .
+@prefix dul:      <http://www.ontologydesignpatterns.org/ont/dul/DUL.owl#> .
+@prefix prov:     <http://www.w3.org/ns/prov#> .
+@prefix skos:     <http://www.w3.org/2004/02/skos/core#> .
+@prefix rdfs:     <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:      <http://www.w3.org/2002/07/owl#> .
+
+<> a owl:Ontology ;
+  rdfs:label "Agentic Primitives — discovery standards mappings" ;
+  owl:versionInfo "0.1.0" ;
+  rdfs:seeAlso <https://github.com/agentictrustlabs/agent-explorer/tree/main/apps/ontology/ontology> ;
+  rdfs:comment "Crosswalk from AP-native discovery vocabulary to Agent Explorer modules, ERC-8004, HCS standards, OASF, PROV-O, and DUL." .
+
+# ─── Agent Explorer module alignment ──────────────────────────────────
+
+ap:Agent rdfs:seeAlso ae:core ;
+  rdfs:subClassOf dul:Agent .
+
+apreg:RegistryEntry rdfs:seeAlso ae:discovery, ae:erc8004, ae:hol ;
+  skos:closeMatch erc8004:IdentityRegistry ;
+  skos:closeMatch hcs10:Registry .
+
+apreg:ExternalRegistryFacet rdfs:seeAlso ae:erc8004, ae:hol, ae:dns, ae:ens, ae:oasf, ae:nanda .
+
+apdisc:CandidateQuery rdfs:seeAlso ae:discovery, ae:descriptors .
+apdisc:MatchCandidate rdfs:seeAlso ae:discovery, ae:analytics .
+apdisc:TrustDetermination rdfs:seeAlso ae:trust, ae:analytics ;
+  rdfs:subClassOf dul:Diagnosis .
+aptrust:TrustSignal rdfs:seeAlso ae:trust .
+aptrust:TrustGraphEdge rdfs:seeAlso ae:trust .
+apsec:ExposureFinding rdfs:seeAlso ae:analytics ;
+  rdfs:subClassOf dul:Diagnosis .
+
+# ─── ERC-8004 projection vocabulary ───────────────────────────────────
+
+apreg:ExternalRegistryFacet skos:closeMatch erc8004:AgentIdentity .
+apreg:externalIdentifier skos:closeMatch erc8004:agentId .
+apreg:cardHash skos:closeMatch erc8004:agentURIHash .
+
+aptrust:FeedbackSignal skos:closeMatch erc8004:ReputationRecord .
+aptrust:signalValue skos:closeMatch erc8004:score .
+aptrust:signalTag skos:closeMatch erc8004:tag .
+
+aptrust:ValidationEvidence skos:closeMatch erc8004:ValidationRecord .
+apatt:ValidationCredential skos:closeMatch erc8004:ValidationResponse .
+
+# ─── HCS projection vocabulary ────────────────────────────────────────
+
+apreg:ExternalRegistryFacet skos:closeMatch hcs10:RegisteredAgent .
+apdisc:CandidateQuery skos:closeMatch hcs10:FindAgents .
+apreg:RegistryEntry skos:closeMatch hcs10:RegistryEntry .
+
+approf:AgentCardProjection skos:closeMatch hcs11:ProfileMetadata .
+apreg:externalIdentifier skos:closeMatch hcs14:UAID .
+aps:Skill skos:closeMatch hcs26:Skill .
+
+# HCS topic topology informs endpoint evidence, not AP authority.
+apdisc:EvidencePath rdfs:seeAlso hcs10:InboundTopic, hcs10:OutboundTopic, hcs10:ConnectionTopic .
+
+# ─── OASF skill taxonomy mapping ──────────────────────────────────────
+
+aps:Skill rdfs:seeAlso oasf:Skill .
+aps:hasSkillKind rdfs:seeAlso oasf:SkillCategory .
+
+# ─── PROV-O / DUL grounding ───────────────────────────────────────────
+
+apdisc:CandidateQuery rdfs:subClassOf prov:Activity .
+apdisc:GraphSnapshot rdfs:subClassOf prov:Entity .
+apdisc:EvidencePath rdfs:subClassOf prov:Entity, dul:InformationObject .
+apreg:RegistryEntryBindingProof rdfs:subClassOf prov:Entity, dul:InformationObject .
+apreg:RegistryMembershipPolicy rdfs:subClassOf dul:Description .
+apdisc:TrustPolicy rdfs:subClassOf dul:Description .

package/mappings/spine-standards.ttl

@@ -0,0 +1,83 @@
+# Mappings — substrate spine ↔ industry-standard crosswalks.
+# Spec 225 §11.5; the substrate's external-standard bridge.
+# Lets a downstream consumer reason that "an apint:Intent is an erc7521:UserIntent"
+# without reading our spec text.
+
+@prefix apint:   <https://agenticprimitives.dev/ns/intent#> .
+@prefix apcst:   <https://agenticprimitives.dev/ns/constraint#> .
+@prefix apres:   <https://agenticprimitives.dev/ns/resolution#> .
+@prefix apful:   <https://agenticprimitives.dev/ns/fulfillment#> .
+@prefix apagr:   <https://agenticprimitives.dev/ns/agreement#> .
+@prefix appay:   <https://agenticprimitives.dev/ns/payment#> .
+@prefix apatt:   <https://agenticprimitives.dev/ns/attestation#> .
+@prefix apvc:    <https://agenticprimitives.dev/ns/credential#> .
+
+@prefix erc7521: <https://eips.ethereum.org/EIPS/eip-7521#> .
+@prefix erc7683: <https://www.erc7683.org/spec#> .
+@prefix erc7710: <https://eips.ethereum.org/EIPS/eip-7710#> .
+@prefix erc7715: <https://eips.ethereum.org/EIPS/eip-7715#> .
+@prefix erc8004: <https://eips.ethereum.org/EIPS/eip-8004#> .
+@prefix eas:     <https://docs.attest.org/spec#> .
+@prefix a2a:     <https://google.github.io/A2A/specification#> .
+@prefix anoma:   <https://anoma.net/spec#> .
+@prefix x402:    <https://www.x402.org/spec#> .
+@prefix ap2:     <https://google.github.io/A2A/ap2#> .
+@prefix vf:      <https://w3id.org/valueflows#> .
+@prefix ufo-c:   <http://purl.org/nemo/ufo-c#> .
+@prefix w3cvc:   <https://www.w3.org/2018/credentials#> .
+@prefix prov:    <http://www.w3.org/ns/prov#> .
+
+@prefix rdfs:    <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:     <http://www.w3.org/2002/07/owl#> .
+
+# ─── Intent crosswalks (Layer 2) ──────────────────────────────────────
+
+apint:Intent owl:equivalentClass anoma:Intent ;
+             owl:equivalentClass erc7521:UserIntent ;
+             owl:equivalentClass erc7683:Order ;
+             rdfs:subClassOf vf:Intent , ufo-c:Intention .
+
+# ─── Constraint + Assumption (Layer 3 — ERC-7683 resolver-assumption parallel) ──
+
+apcst:AssumptionSet rdfs:subClassOf erc7683:ResolverAssumptionSet .
+apcst:NamedAssumption rdfs:subClassOf erc7683:NamedAssumption .
+
+# ─── Resolution (Layer 4) ─────────────────────────────────────────────
+
+apres:Resolver rdfs:subClassOf erc7683:Resolver .
+apres:ResolvedOrder rdfs:subClassOf erc7683:CanonicalOrder .
+
+# ─── Agreement (Layer 8) ──────────────────────────────────────────────
+
+apagr:AgreementCredential rdfs:subClassOf w3cvc:VerifiableCredential .
+
+# ─── Payment (Layer 9b) ───────────────────────────────────────────────
+
+appay:PaymentMandate rdfs:subClassOf ap2:Mandate ;
+                     rdfs:subClassOf x402:PaymentRequirement .
+appay:OpenPaymentMandate rdfs:subClassOf ap2:IntentMandate .
+appay:ClosedPaymentMandate rdfs:subClassOf ap2:CheckoutMandate .
+appay:PaymentReceipt rdfs:subClassOf w3cvc:VerifiableCredential .
+
+# ─── Fulfillment crosswalks (Layers 10–12 — A2A alignment) ───────────
+
+apful:Task owl:equivalentClass a2a:Task .
+apful:Message owl:equivalentClass a2a:Message .
+apful:Artifact owl:equivalentClass a2a:Artifact .
+apful:HandoffPolicy rdfs:subClassOf a2a:HandoffPolicy .
+
+# ─── Validation + reputation crosswalks (Layers 14–15; ERC-8004) ─────
+
+apatt:Attestation rdfs:subClassOf eas:Attestation .
+apatt:ValidationCredential owl:equivalentClass erc8004:ValidationRecord .
+apatt:TrustUpdate owl:equivalentClass erc8004:ReputationRecord .
+apatt:Validator rdfs:subClassOf erc8004:Validator .
+
+# ─── Provenance crosswalks ────────────────────────────────────────────
+
+apful:IntentTraceSpan rdfs:subClassOf prov:Activity .
+apres:ResolutionReceipt rdfs:subClassOf prov:Entity .
+
+# ─── VC envelope crosswalk ────────────────────────────────────────────
+
+apvc:VerifiableCredential owl:equivalentClass w3cvc:VerifiableCredential .

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticprimitives/ontology",
-  "version": "1.0.0-alpha.12",
+  "version": "1.0.0-alpha.13",
   "description": "Monorepo-wide formal vocabulary (RDFS/OWL T-box + SHACL/SKOS C-box + A-box fixtures) for agentic primitives. Off-chain source of truth the on-chain ontology (ADR-0009) instantiates. Ships TTL/JSON-LD artifacts + typed IRI constants.",
   "license": "MIT",
   "repository": {
@@ -32,6 +32,7 @@
     "tbox",
     "cbox",
     "abox",
+    "mappings",
     "README.md"
   ],
   "publishConfig": {

package/tbox/discovery.ttl

@@ -0,0 +1,149 @@
+# T-box — discovery, trust determination, and graph query vocabulary.
+# Domain-derived from Agent Explorer's discovery/descriptors/trust vocabulary
+# and grounded in PROV-O + DOLCE+DnS/DUL.
+
+@prefix ap:      <https://agenticprimitives.dev/ns/core#> .
+@prefix apdisc:  <https://agenticprimitives.dev/ns/discovery#> .
+@prefix apreg:   <https://agenticprimitives.dev/ns/registry#> .
+@prefix apint:   <https://agenticprimitives.dev/ns/intent#> .
+@prefix apatt:   <https://agenticprimitives.dev/ns/attestation#> .
+@prefix aps:     <https://agenticprimitives.dev/ns/skill#> .
+@prefix apg:     <https://agenticprimitives.dev/ns/geo#> .
+@prefix rdf:     <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs:    <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:     <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:     <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:    <http://www.w3.org/ns/prov#> .
+@prefix dul:     <http://www.ontologydesignpatterns.org/ont/dul/DUL.owl#> .
+@prefix skos:    <http://www.w3.org/2004/02/skos/core#> .
+
+apdisc: a owl:Ontology ;
+  rdfs:label "Agentic Primitives — discovery ontology" ;
+  owl:versionInfo "0.1.0" ;
+  rdfs:seeAlso <https://github.com/agentictrustlabs/agent-explorer/tree/main/apps/ontology/ontology> ;
+  rdfs:comment "Vocabulary for GraphDB-backed discovery queries, evidence paths, trust determinations, graph snapshots, and intent candidate matching." .
+
+apdisc:CandidateQuery a owl:Class ;
+  rdfs:subClassOf prov:Activity, dul:InformationRealization ;
+  rdfs:label "CandidateQuery" ;
+  rdfs:comment "A versioned discovery query over the public A-box and inferred graphs." .
+
+apdisc:MatchCandidate a owl:Class ;
+  rdfs:subClassOf prov:Entity, dul:InformationObject ;
+  rdfs:label "MatchCandidate" ;
+  rdfs:comment "A candidate agent returned for an intent or discovery query with evidence, score, and trust determination." .
+
+apdisc:TrustDetermination a owl:Class ;
+  rdfs:subClassOf prov:Entity, dul:Diagnosis ;
+  rdfs:label "TrustDetermination" ;
+  rdfs:comment "An explainable determination over public evidence. It informs discovery and ranking but does not authorize action." .
+
+apdisc:EvidencePath a owl:Class ;
+  rdfs:subClassOf prov:Entity, dul:InformationObject ;
+  rdfs:label "EvidencePath" ;
+  rdfs:comment "An ordered citation path showing why a candidate matched: card binding, registry entry, claims, validation, outcomes, and revocation checks." .
+
+apdisc:GraphSnapshot a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "GraphSnapshot" ;
+  rdfs:comment "Identifier for the named graph versions and block ranges used by a query." .
+
+apdisc:InferenceProfile a owl:Class ;
+  rdfs:subClassOf dul:Description ;
+  rdfs:label "InferenceProfile" ;
+  rdfs:comment "Versioned inference settings, e.g. RDFS, SKOS broader/narrower, SHACL validation reports, materialization policy." .
+
+apdisc:TrustPolicy a owl:Class ;
+  rdfs:subClassOf dul:Description ;
+  rdfs:label "TrustPolicy" ;
+  rdfs:comment "A declarative policy describing which evidence classes, issuers, recency, validation, and registry status are required for a trust determination." .
+
+apdisc:DiscoveryExplanation a owl:Class ;
+  rdfs:subClassOf prov:Entity, dul:InformationObject ;
+  rdfs:label "DiscoveryExplanation" ;
+  rdfs:comment "Human-readable and machine-readable explanation attached to a candidate or trust determination." .
+
+apdisc:queryHash a owl:DatatypeProperty ;
+  rdfs:domain apdisc:CandidateQuery ;
+  rdfs:range xsd:string ;
+  rdfs:label "queryHash" .
+
+apdisc:sparqlHash a owl:DatatypeProperty ;
+  rdfs:domain apdisc:CandidateQuery ;
+  rdfs:range xsd:string ;
+  rdfs:label "sparqlHash" .
+
+apdisc:usesGraphSnapshot a owl:ObjectProperty ;
+  rdfs:domain apdisc:CandidateQuery ;
+  rdfs:range apdisc:GraphSnapshot ;
+  rdfs:label "usesGraphSnapshot" .
+
+apdisc:usesInferenceProfile a owl:ObjectProperty ;
+  rdfs:domain apdisc:CandidateQuery ;
+  rdfs:range apdisc:InferenceProfile ;
+  rdfs:label "usesInferenceProfile" .
+
+apdisc:forIntent a owl:ObjectProperty ;
+  rdfs:domain apdisc:CandidateQuery ;
+  rdfs:range apint:Intent ;
+  rdfs:label "forIntent" .
+
+apdisc:candidateAgent a owl:ObjectProperty ;
+  rdfs:domain apdisc:MatchCandidate ;
+  rdfs:range ap:Agent ;
+  rdfs:label "candidateAgent" .
+
+apdisc:candidateRegistryEntry a owl:ObjectProperty ;
+  rdfs:domain apdisc:MatchCandidate ;
+  rdfs:range apreg:RegistryEntry ;
+  rdfs:label "candidateRegistryEntry" .
+
+apdisc:hasTrustDetermination a owl:ObjectProperty ;
+  rdfs:domain apdisc:MatchCandidate ;
+  rdfs:range apdisc:TrustDetermination ;
+  rdfs:label "hasTrustDetermination" .
+
+apdisc:hasEvidencePath a owl:ObjectProperty ;
+  rdfs:range apdisc:EvidencePath ;
+  rdfs:label "hasEvidencePath" .
+
+apdisc:citesEvidence a owl:ObjectProperty ;
+  rdfs:domain apdisc:EvidencePath ;
+  rdfs:range prov:Entity ;
+  rdfs:label "citesEvidence" .
+
+apdisc:trustScore a owl:DatatypeProperty ;
+  rdfs:domain apdisc:TrustDetermination ;
+  rdfs:range xsd:decimal ;
+  rdfs:label "trustScore" ;
+  rdfs:comment "Normalized score used for ranking. It must cite evidence; score alone is not authority." .
+
+apdisc:matchScore a owl:DatatypeProperty ;
+  rdfs:domain apdisc:MatchCandidate ;
+  rdfs:range xsd:decimal ;
+  rdfs:label "matchScore" .
+
+apdisc:confidence a owl:DatatypeProperty ;
+  rdfs:domain apdisc:TrustDetermination ;
+  rdfs:range xsd:decimal ;
+  rdfs:label "confidence" .
+
+apdisc:explanationText a owl:DatatypeProperty ;
+  rdfs:domain apdisc:DiscoveryExplanation ;
+  rdfs:range xsd:string ;
+  rdfs:label "explanationText" .
+
+apdisc:validationReport a owl:ObjectProperty ;
+  rdfs:range prov:Entity ;
+  rdfs:label "validationReport" ;
+  rdfs:comment "Link to a SHACL validation report or equivalent graph validation result." .
+
+apdisc:namedGraph a owl:DatatypeProperty ;
+  rdfs:domain apdisc:GraphSnapshot ;
+  rdfs:range xsd:string ;
+  rdfs:label "namedGraph" .
+
+apdisc:inferenceProfileId a owl:DatatypeProperty ;
+  rdfs:domain apdisc:InferenceProfile ;
+  rdfs:range xsd:string ;
+  rdfs:label "inferenceProfileId" .

package/tbox/registry.ttl

@@ -0,0 +1,227 @@
+# T-box — AP-native registry kit vocabulary.
+# Grounded in PROV-O and DOLCE+DnS/DUL; informed by Agent Explorer's
+# erc8004.ttl, discovery.ttl, descriptors.ttl, trust.ttl, hol.ttl, and oasf.ttl
+# modules, but expressed as AP-native Ring 0 vocabulary.
+
+@prefix ap:      <https://agenticprimitives.dev/ns/core#> .
+@prefix approf:  <https://agenticprimitives.dev/ns/profile#> .
+@prefix apreg:   <https://agenticprimitives.dev/ns/registry#> .
+@prefix apatt:   <https://agenticprimitives.dev/ns/attestation#> .
+@prefix aps:     <https://agenticprimitives.dev/ns/skill#> .
+@prefix rdf:     <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs:    <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:     <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:     <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:    <http://www.w3.org/ns/prov#> .
+@prefix dul:     <http://www.ontologydesignpatterns.org/ont/dul/DUL.owl#> .
+@prefix skos:    <http://www.w3.org/2004/02/skos/core#> .
+
+apreg: a owl:Ontology ;
+  rdfs:label "Agentic Primitives — registry kit ontology" ;
+  owl:versionInfo "0.1.0" ;
+  rdfs:seeAlso <https://github.com/agentictrustlabs/agent-explorer/tree/main/apps/ontology/ontology> ;
+  rdfs:comment "AP-native registry-building vocabulary. External registries are projection surfaces; this vocabulary defines Smart-Agent-anchored entries, binding proofs, claim slots, and lifecycle evidence." .
+
+# ─── Core registry classes ─────────────────────────────────────────────
+
+apreg:RegistryKitProfile a owl:Class ;
+  rdfs:subClassOf dul:Description ;
+  rdfs:label "RegistryKitProfile" ;
+  rdfs:comment "A description of a kit-built registry: membership policy, claim slots, lifecycle rules, and validation hooks." .
+
+apreg:RegistryEntry a owl:Class ;
+  rdfs:subClassOf prov:Entity, dul:InformationObject ;
+  rdfs:label "RegistryEntry" ;
+  rdfs:comment "A public facet asserting that a Smart Agent is listed in a registry under a signed card and claim-slot profile. It is evidence, not authority." .
+
+apreg:RegistryEntryBindingProof a owl:Class ;
+  rdfs:subClassOf prov:Entity, dul:InformationObject ;
+  rdfs:label "RegistryEntryBindingProof" ;
+  rdfs:comment "A Smart-Agent-signed proof binding registryId, entryId, subjectAgent, cardHash, and claimHashes." .
+
+apreg:RegistryClaimSlot a owl:Class ;
+  rdfs:subClassOf dul:Description ;
+  rdfs:label "RegistryClaimSlot" ;
+  rdfs:comment "A typed claim requirement in a registry profile. Claim bodies live in attestations, agent-skills, geo-features, or app-level credential packages." .
+
+apreg:RegistryLifecycleEvent a owl:Class ;
+  rdfs:subClassOf prov:Activity ;
+  rdfs:label "RegistryLifecycleEvent" ;
+  rdfs:comment "A register, renew, suspend, revoke, expire, or claim-update activity emitted by a registry contract and projected into the A-box." .
+
+apreg:RegistryMembershipPolicy a owl:Class ;
+  rdfs:subClassOf dul:Description ;
+  rdfs:label "RegistryMembershipPolicy" ;
+  rdfs:comment "A generic AP-native policy description for registry membership. Vertical-specific membership logic lives outside Ring 0." .
+
+apreg:ExternalRegistryFacet a owl:Class ;
+  rdfs:subClassOf ap:Facet, prov:Entity ;
+  rdfs:label "ExternalRegistryFacet" ;
+  rdfs:comment "A public projection from ERC-8004, HCS, ANS, DNS-AID, OASF, MCP Registry, or another external registry surface back to the canonical Smart Agent." .
+
+apreg:RegistryLifecycleStatus a owl:Class ;
+  rdfs:subClassOf skos:Concept ;
+  rdfs:label "RegistryLifecycleStatus" ;
+  rdfs:comment "Controlled vocabulary for active, suspended, revoked, expired, and pending registry entry states." .
+
+# ─── Properties ────────────────────────────────────────────────────────
+
+apreg:registryId a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range xsd:string ;
+  rdfs:label "registryId" .
+
+apreg:entryId a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range xsd:string ;
+  rdfs:label "entryId" .
+
+apreg:subjectAgent a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range ap:Agent ;
+  rdfs:label "subjectAgent" ;
+  rdfs:comment "The canonical Smart Agent that this registry entry points at." .
+
+apreg:hasBindingProof a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range apreg:RegistryEntryBindingProof ;
+  rdfs:label "hasBindingProof" .
+
+apreg:cardHash a owl:DatatypeProperty ;
+  rdfs:range xsd:string ;
+  rdfs:label "cardHash" ;
+  rdfs:comment "Canonical hash of the AP-native signed AgentCard bundle." .
+
+apreg:claimHash a owl:DatatypeProperty ;
+  rdfs:range xsd:string ;
+  rdfs:label "claimHash" ;
+  rdfs:comment "Hash of a claim, credential, or attestation satisfying a registry claim slot." .
+
+apreg:claimSlot a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryKitProfile ;
+  rdfs:range apreg:RegistryClaimSlot ;
+  rdfs:label "claimSlot" .
+
+apreg:requiredClaimSlot a owl:ObjectProperty ;
+  rdfs:subPropertyOf apreg:claimSlot ;
+  rdfs:label "requiredClaimSlot" .
+
+apreg:membershipPolicy a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryKitProfile ;
+  rdfs:range apreg:RegistryMembershipPolicy ;
+  rdfs:label "membershipPolicy" .
+
+apreg:lifecycleStatus a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range apreg:RegistryLifecycleStatus ;
+  rdfs:label "lifecycleStatus" .
+
+apreg:externalSurface a owl:DatatypeProperty ;
+  rdfs:domain apreg:ExternalRegistryFacet ;
+  rdfs:range xsd:string ;
+  rdfs:label "externalSurface" ;
+  rdfs:comment "The source surface, e.g. erc8004, hcs10, hcs11, ans, dns-aid, oasf, a2a, mcp-registry." .
+
+apreg:externalIdentifier a owl:DatatypeProperty ;
+  rdfs:domain apreg:ExternalRegistryFacet ;
+  rdfs:range xsd:string ;
+  rdfs:label "externalIdentifier" .
+
+apreg:projectionOf a owl:ObjectProperty ;
+  rdfs:domain apreg:ExternalRegistryFacet ;
+  rdfs:range apreg:RegistryEntry ;
+  rdfs:label "projectionOf" ;
+  rdfs:comment "Links an external registry projection to the AP-native registry entry or signed-card anchor it projects." .
+
+apreg:blockNumber a owl:DatatypeProperty ;
+  rdfs:range xsd:nonNegativeInteger ;
+  rdfs:label "blockNumber" .
+
+apreg:transactionHash a owl:DatatypeProperty ;
+  rdfs:range xsd:string ;
+  rdfs:label "transactionHash" .
+
+apreg:logIndex a owl:DatatypeProperty ;
+  rdfs:range xsd:nonNegativeInteger ;
+  rdfs:label "logIndex" .
+
+# ─── Signed card + binding-proof projection (spec 279 §3.2/§3.3) ──────
+
+apreg:SignedAgentCard a owl:Class ;
+  rdfs:subClassOf prov:Entity, dul:InformationObject ;
+  rdfs:label "SignedAgentCard" ;
+  rdfs:comment "A Smart-Agent-signed (ERC-1271) agent card bundle (spec 279 §3.2). Proves cardHash -> subjectAgent without trusting the server that served it. Owned by agent-profile; projected here as the discovery anchor a RegistryEntry.cardHash references." .
+
+apreg:cardSubject a owl:ObjectProperty ;
+  rdfs:domain apreg:SignedAgentCard ;
+  rdfs:range ap:Agent ;
+  rdfs:label "cardSubject" ;
+  rdfs:comment "The canonical Smart Agent the signed card describes (signer = verifyingContract = subject in V1)." .
+
+apreg:verifyingContract a owl:ObjectProperty ;
+  rdfs:domain apreg:SignedAgentCard ;
+  rdfs:range ap:Agent ;
+  rdfs:label "verifyingContract" ;
+  rdfs:comment "The ERC-1271 contract whose signature validates the card (the subject Smart Agent in V1)." .
+
+apreg:cardChainId a owl:DatatypeProperty ;
+  rdfs:domain apreg:SignedAgentCard ;
+  rdfs:range xsd:nonNegativeInteger ;
+  rdfs:label "cardChainId" ;
+  rdfs:comment "Chain the card signature is bound to (anti cross-chain replay)." .
+
+apreg:describesCard a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range apreg:SignedAgentCard ;
+  rdfs:label "describesCard" ;
+  rdfs:comment "Links a registry entry to the signed card its cardHash references." .
+
+apreg:bindingProofHash a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range xsd:string ;
+  rdfs:label "bindingProofHash" ;
+  rdfs:comment "sha256 of the off-chain RegistryEntryBindingProof this entry references (verified off-chain via the subject SA's ERC-1271)." .
+
+apreg:proofHash a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryEntryBindingProof ;
+  rdfs:range xsd:string ;
+  rdfs:label "proofHash" ;
+  rdfs:comment "sha256 over the canonical binding-proof body the subject Smart Agent signed." .
+
+apreg:claimSlotId a owl:DatatypeProperty ;
+  rdfs:range xsd:string ;
+  rdfs:label "claimSlotId" ;
+  rdfs:comment "Identifier of the claim slot a claim hash fills (from the RegistryClaimUpdated event)." .
+
+apreg:issuedAt a owl:DatatypeProperty ;
+  rdfs:range xsd:dateTime ;
+  rdfs:label "issuedAt" .
+
+apreg:expiresAt a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range xsd:dateTime ;
+  rdfs:label "expiresAt" ;
+  rdfs:comment "Entry expiry; absent (0 on-chain) = non-expiring. A past expiresAt projects to the apreg:expired liveness status." .
+
+apreg:reasonHash a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryLifecycleEvent ;
+  rdfs:range xsd:string ;
+  rdfs:label "reasonHash" ;
+  rdfs:comment "keccak of the off-chain reason string for a suspend / revoke lifecycle event." .
+
+# ─── Lifecycle status codelist seeds ──────────────────────────────────
+
+apreg:active a apreg:RegistryLifecycleStatus ;
+  skos:prefLabel "active" .
+
+apreg:suspended a apreg:RegistryLifecycleStatus ;
+  skos:prefLabel "suspended" .
+
+apreg:revoked a apreg:RegistryLifecycleStatus ;
+  skos:prefLabel "revoked" .
+
+apreg:expired a apreg:RegistryLifecycleStatus ;
+  skos:prefLabel "expired" .
+
+apreg:pending a apreg:RegistryLifecycleStatus ;
+  skos:prefLabel "pending" .

package/tbox/security-exposure.ttl

@@ -0,0 +1,102 @@
+# T-box — public-data exposure and penetration-analysis vocabulary.
+# Findings live in restricted A-box graphs (ap:abox:pentest / ap:abox:admin).
+
+@prefix ap:     <https://agenticprimitives.dev/ns/core#> .
+@prefix apsec:  <https://agenticprimitives.dev/ns/security-exposure#> .
+@prefix apdisc: <https://agenticprimitives.dev/ns/discovery#> .
+@prefix rdf:    <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs:   <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:    <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:    <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:   <http://www.w3.org/ns/prov#> .
+@prefix dul:    <http://www.ontologydesignpatterns.org/ont/dul/DUL.owl#> .
+@prefix skos:   <http://www.w3.org/2004/02/skos/core#> .
+
+apsec: a owl:Ontology ;
+  rdfs:label "Agentic Primitives — public exposure ontology" ;
+  owl:versionInfo "0.1.0" ;
+  rdfs:comment "Vocabulary for person/org public-data penetration findings written to restricted knowledge-graph areas." .
+
+apsec:ExposureFinding a owl:Class ;
+  rdfs:subClassOf prov:Entity, dul:Diagnosis ;
+  rdfs:label "ExposureFinding" ;
+  rdfs:comment "A finding generated from public graph/public metadata analysis. Not public by default." .
+
+apsec:CorrelationRisk a owl:Class ;
+  rdfs:subClassOf apsec:ExposureFinding ;
+  rdfs:label "CorrelationRisk" ;
+  rdfs:comment "A public graph path could correlate person, organization, custody, role, geography, endpoint, or operational activity beyond intended disclosure." .
+
+apsec:StaleTrustSignal a owl:Class ;
+  rdfs:subClassOf apsec:ExposureFinding ;
+  rdfs:label "StaleTrustSignal" ;
+  rdfs:comment "A revoked, expired, or stale public signal is still influencing discovery/trust ranking." .
+
+apsec:ProjectionMismatch a owl:Class ;
+  rdfs:subClassOf apsec:ExposureFinding ;
+  rdfs:label "ProjectionMismatch" ;
+  rdfs:comment "An external projection claims a card, endpoint, registry id, or agent anchor that does not match AP evidence." .
+
+apsec:PolicyViolation a owl:Class ;
+  rdfs:subClassOf apsec:ExposureFinding ;
+  rdfs:label "PolicyViolation" ;
+  rdfs:comment "Public facts violate AP disclosure, classification, privacy, or SHACL policy." .
+
+apsec:EndpointExposure a owl:Class ;
+  rdfs:subClassOf apsec:ExposureFinding ;
+  rdfs:label "EndpointExposure" ;
+  rdfs:comment "A public endpoint is exposed without matching signed-card/control proof, expected audience, or policy." .
+
+apsec:severity a owl:ObjectProperty ;
+  rdfs:domain apsec:ExposureFinding ;
+  rdfs:range apsec:Severity ;
+  rdfs:label "severity" .
+
+apsec:Severity a owl:Class ;
+  rdfs:subClassOf skos:Concept ;
+  rdfs:label "Severity" .
+
+apsec:low a apsec:Severity ; skos:prefLabel "low" .
+apsec:medium a apsec:Severity ; skos:prefLabel "medium" .
+apsec:high a apsec:Severity ; skos:prefLabel "high" .
+apsec:critical a apsec:Severity ; skos:prefLabel "critical" .
+
+apsec:findingStatus a owl:ObjectProperty ;
+  rdfs:domain apsec:ExposureFinding ;
+  rdfs:range apsec:FindingStatus ;
+  rdfs:label "findingStatus" .
+
+apsec:FindingStatus a owl:Class ;
+  rdfs:subClassOf skos:Concept ;
+  rdfs:label "FindingStatus" .
+
+apsec:new a apsec:FindingStatus ; skos:prefLabel "new" .
+apsec:triaged a apsec:FindingStatus ; skos:prefLabel "triaged" .
+apsec:falsePositive a apsec:FindingStatus ; skos:prefLabel "false-positive" .
+apsec:acceptedRisk a apsec:FindingStatus ; skos:prefLabel "accepted-risk" .
+apsec:remediated a apsec:FindingStatus ; skos:prefLabel "remediated" .
+
+apsec:detectedBy a owl:DatatypeProperty ;
+  rdfs:domain apsec:ExposureFinding ;
+  rdfs:range xsd:string ;
+  rdfs:label "detectedBy" .
+
+apsec:affectsAgent a owl:ObjectProperty ;
+  rdfs:domain apsec:ExposureFinding ;
+  rdfs:range ap:Agent ;
+  rdfs:label "affectsAgent" .
+
+apsec:basedOnEvidencePath a owl:ObjectProperty ;
+  rdfs:domain apsec:ExposureFinding ;
+  rdfs:range apdisc:EvidencePath ;
+  rdfs:label "basedOnEvidencePath" .
+
+apsec:recommendedAction a owl:DatatypeProperty ;
+  rdfs:domain apsec:ExposureFinding ;
+  rdfs:range xsd:string ;
+  rdfs:label "recommendedAction" .
+
+apsec:adminNote a owl:DatatypeProperty ;
+  rdfs:domain apsec:ExposureFinding ;
+  rdfs:range xsd:string ;
+  rdfs:label "adminNote" .