@agenticprimitives/ontology 1.0.0-alpha.12 → 1.0.0-alpha.14
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -2
- package/cbox/discovery-graph-shapes.shacl.ttl +234 -0
- package/context.jsonld +6 -0
- package/dist/artifacts.d.ts +3 -3
- package/dist/artifacts.d.ts.map +1 -1
- package/dist/artifacts.js +11 -1
- package/dist/artifacts.js.map +1 -1
- package/dist/index.d.ts +67 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +71 -1
- package/dist/index.js.map +1 -1
- package/mappings/agent-discovery-standards.ttl +106 -0
- package/mappings/spine-standards.ttl +83 -0
- package/package.json +2 -1
- package/tbox/attestation.ttl +2 -2
- package/tbox/core.ttl +16 -4
- package/tbox/discovery.ttl +149 -0
- package/tbox/identity.ttl +2 -6
- package/tbox/registry.ttl +227 -0
- package/tbox/resolution.ttl +2 -2
- package/tbox/security-exposure.ttl +102 -0
- package/tbox/trust.ttl +90 -0
|
@@ -0,0 +1,102 @@
|
|
|
1
|
+
# T-box — public-data exposure and penetration-analysis vocabulary.
|
|
2
|
+
# Findings live in restricted A-box graphs (ap:abox:pentest / ap:abox:admin).
|
|
3
|
+
|
|
4
|
+
@prefix ap: <https://agenticprimitives.dev/ns/core#> .
|
|
5
|
+
@prefix apsec: <https://agenticprimitives.dev/ns/security-exposure#> .
|
|
6
|
+
@prefix apdisc: <https://agenticprimitives.dev/ns/discovery#> .
|
|
7
|
+
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
|
|
8
|
+
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
|
|
9
|
+
@prefix owl: <http://www.w3.org/2002/07/owl#> .
|
|
10
|
+
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
|
|
11
|
+
@prefix prov: <http://www.w3.org/ns/prov#> .
|
|
12
|
+
@prefix dul: <http://www.ontologydesignpatterns.org/ont/dul/DUL.owl#> .
|
|
13
|
+
@prefix skos: <http://www.w3.org/2004/02/skos/core#> .
|
|
14
|
+
|
|
15
|
+
apsec: a owl:Ontology ;
|
|
16
|
+
rdfs:label "Agentic Primitives — public exposure ontology" ;
|
|
17
|
+
owl:versionInfo "0.1.0" ;
|
|
18
|
+
rdfs:comment "Vocabulary for person/org public-data penetration findings written to restricted knowledge-graph areas." .
|
|
19
|
+
|
|
20
|
+
apsec:ExposureFinding a owl:Class ;
|
|
21
|
+
rdfs:subClassOf prov:Entity, dul:Diagnosis ;
|
|
22
|
+
rdfs:label "ExposureFinding" ;
|
|
23
|
+
rdfs:comment "A finding generated from public graph/public metadata analysis. Not public by default." .
|
|
24
|
+
|
|
25
|
+
apsec:CorrelationRisk a owl:Class ;
|
|
26
|
+
rdfs:subClassOf apsec:ExposureFinding ;
|
|
27
|
+
rdfs:label "CorrelationRisk" ;
|
|
28
|
+
rdfs:comment "A public graph path could correlate person, organization, custody, role, geography, endpoint, or operational activity beyond intended disclosure." .
|
|
29
|
+
|
|
30
|
+
apsec:StaleTrustSignal a owl:Class ;
|
|
31
|
+
rdfs:subClassOf apsec:ExposureFinding ;
|
|
32
|
+
rdfs:label "StaleTrustSignal" ;
|
|
33
|
+
rdfs:comment "A revoked, expired, or stale public signal is still influencing discovery/trust ranking." .
|
|
34
|
+
|
|
35
|
+
apsec:ProjectionMismatch a owl:Class ;
|
|
36
|
+
rdfs:subClassOf apsec:ExposureFinding ;
|
|
37
|
+
rdfs:label "ProjectionMismatch" ;
|
|
38
|
+
rdfs:comment "An external projection claims a card, endpoint, registry id, or agent anchor that does not match AP evidence." .
|
|
39
|
+
|
|
40
|
+
apsec:PolicyViolation a owl:Class ;
|
|
41
|
+
rdfs:subClassOf apsec:ExposureFinding ;
|
|
42
|
+
rdfs:label "PolicyViolation" ;
|
|
43
|
+
rdfs:comment "Public facts violate AP disclosure, classification, privacy, or SHACL policy." .
|
|
44
|
+
|
|
45
|
+
apsec:EndpointExposure a owl:Class ;
|
|
46
|
+
rdfs:subClassOf apsec:ExposureFinding ;
|
|
47
|
+
rdfs:label "EndpointExposure" ;
|
|
48
|
+
rdfs:comment "A public endpoint is exposed without matching signed-card/control proof, expected audience, or policy." .
|
|
49
|
+
|
|
50
|
+
apsec:severity a owl:ObjectProperty ;
|
|
51
|
+
rdfs:domain apsec:ExposureFinding ;
|
|
52
|
+
rdfs:range apsec:Severity ;
|
|
53
|
+
rdfs:label "severity" .
|
|
54
|
+
|
|
55
|
+
apsec:Severity a owl:Class ;
|
|
56
|
+
rdfs:subClassOf skos:Concept ;
|
|
57
|
+
rdfs:label "Severity" .
|
|
58
|
+
|
|
59
|
+
apsec:low a apsec:Severity ; skos:prefLabel "low" .
|
|
60
|
+
apsec:medium a apsec:Severity ; skos:prefLabel "medium" .
|
|
61
|
+
apsec:high a apsec:Severity ; skos:prefLabel "high" .
|
|
62
|
+
apsec:critical a apsec:Severity ; skos:prefLabel "critical" .
|
|
63
|
+
|
|
64
|
+
apsec:findingStatus a owl:ObjectProperty ;
|
|
65
|
+
rdfs:domain apsec:ExposureFinding ;
|
|
66
|
+
rdfs:range apsec:FindingStatus ;
|
|
67
|
+
rdfs:label "findingStatus" .
|
|
68
|
+
|
|
69
|
+
apsec:FindingStatus a owl:Class ;
|
|
70
|
+
rdfs:subClassOf skos:Concept ;
|
|
71
|
+
rdfs:label "FindingStatus" .
|
|
72
|
+
|
|
73
|
+
apsec:new a apsec:FindingStatus ; skos:prefLabel "new" .
|
|
74
|
+
apsec:triaged a apsec:FindingStatus ; skos:prefLabel "triaged" .
|
|
75
|
+
apsec:falsePositive a apsec:FindingStatus ; skos:prefLabel "false-positive" .
|
|
76
|
+
apsec:acceptedRisk a apsec:FindingStatus ; skos:prefLabel "accepted-risk" .
|
|
77
|
+
apsec:remediated a apsec:FindingStatus ; skos:prefLabel "remediated" .
|
|
78
|
+
|
|
79
|
+
apsec:detectedBy a owl:DatatypeProperty ;
|
|
80
|
+
rdfs:domain apsec:ExposureFinding ;
|
|
81
|
+
rdfs:range xsd:string ;
|
|
82
|
+
rdfs:label "detectedBy" .
|
|
83
|
+
|
|
84
|
+
apsec:affectsAgent a owl:ObjectProperty ;
|
|
85
|
+
rdfs:domain apsec:ExposureFinding ;
|
|
86
|
+
rdfs:range ap:Agent ;
|
|
87
|
+
rdfs:label "affectsAgent" .
|
|
88
|
+
|
|
89
|
+
apsec:basedOnEvidencePath a owl:ObjectProperty ;
|
|
90
|
+
rdfs:domain apsec:ExposureFinding ;
|
|
91
|
+
rdfs:range apdisc:EvidencePath ;
|
|
92
|
+
rdfs:label "basedOnEvidencePath" .
|
|
93
|
+
|
|
94
|
+
apsec:recommendedAction a owl:DatatypeProperty ;
|
|
95
|
+
rdfs:domain apsec:ExposureFinding ;
|
|
96
|
+
rdfs:range xsd:string ;
|
|
97
|
+
rdfs:label "recommendedAction" .
|
|
98
|
+
|
|
99
|
+
apsec:adminNote a owl:DatatypeProperty ;
|
|
100
|
+
rdfs:domain apsec:ExposureFinding ;
|
|
101
|
+
rdfs:range xsd:string ;
|
|
102
|
+
rdfs:label "adminNote" .
|
package/tbox/trust.ttl
ADDED
|
@@ -0,0 +1,90 @@
|
|
|
1
|
+
# T-box — trust evidence and reputation vocabulary.
|
|
2
|
+
# Refines Agent Explorer trust/analytics vocabulary into AP-native evidence.
|
|
3
|
+
|
|
4
|
+
@prefix ap: <https://agenticprimitives.dev/ns/core#> .
|
|
5
|
+
@prefix aptrust: <https://agenticprimitives.dev/ns/trust#> .
|
|
6
|
+
@prefix apatt: <https://agenticprimitives.dev/ns/attestation#> .
|
|
7
|
+
@prefix apdisc: <https://agenticprimitives.dev/ns/discovery#> .
|
|
8
|
+
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
|
|
9
|
+
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
|
|
10
|
+
@prefix owl: <http://www.w3.org/2002/07/owl#> .
|
|
11
|
+
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
|
|
12
|
+
@prefix prov: <http://www.w3.org/ns/prov#> .
|
|
13
|
+
@prefix dul: <http://www.ontologydesignpatterns.org/ont/dul/DUL.owl#> .
|
|
14
|
+
@prefix skos: <http://www.w3.org/2004/02/skos/core#> .
|
|
15
|
+
|
|
16
|
+
aptrust: a owl:Ontology ;
|
|
17
|
+
rdfs:label "Agentic Primitives — trust ontology" ;
|
|
18
|
+
owl:versionInfo "0.1.0" ;
|
|
19
|
+
rdfs:seeAlso <https://github.com/agentictrustlabs/agent-explorer/tree/main/apps/ontology/ontology> ;
|
|
20
|
+
rdfs:comment "Vocabulary for public trust signals, reputation evidence, validations, and trust determinations used by discovery." .
|
|
21
|
+
|
|
22
|
+
aptrust:TrustSignal a owl:Class ;
|
|
23
|
+
rdfs:subClassOf prov:Entity, dul:InformationObject ;
|
|
24
|
+
rdfs:label "TrustSignal" ;
|
|
25
|
+
rdfs:comment "A public signal that may influence trust determination: validation, outcome, feedback, issuer standing, graph relationship, or exposure finding." .
|
|
26
|
+
|
|
27
|
+
aptrust:ReputationEvidence a owl:Class ;
|
|
28
|
+
rdfs:subClassOf aptrust:TrustSignal ;
|
|
29
|
+
rdfs:label "ReputationEvidence" ;
|
|
30
|
+
rdfs:comment "A normalized reputation signal. ERC-8004 feedback is one external projection source, not AP authority." .
|
|
31
|
+
|
|
32
|
+
aptrust:ValidationEvidence a owl:Class ;
|
|
33
|
+
rdfs:subClassOf aptrust:TrustSignal ;
|
|
34
|
+
rdfs:label "ValidationEvidence" ;
|
|
35
|
+
rdfs:comment "Evidence from an independent validation process, validator credential, or validation registry projection." .
|
|
36
|
+
|
|
37
|
+
aptrust:OutcomeEvidence a owl:Class ;
|
|
38
|
+
rdfs:subClassOf aptrust:TrustSignal ;
|
|
39
|
+
rdfs:label "OutcomeEvidence" ;
|
|
40
|
+
rdfs:comment "Evidence that work completed with a cited artifact/outcome credential." .
|
|
41
|
+
|
|
42
|
+
aptrust:FeedbackSignal a owl:Class ;
|
|
43
|
+
rdfs:subClassOf aptrust:ReputationEvidence ;
|
|
44
|
+
rdfs:label "FeedbackSignal" ;
|
|
45
|
+
rdfs:comment "Feedback from a client/human/agent interaction. Must include provenance and anti-spam/authorization evidence if used for ranking." .
|
|
46
|
+
|
|
47
|
+
aptrust:TrustGraphEdge a owl:Class ;
|
|
48
|
+
rdfs:subClassOf prov:Entity ;
|
|
49
|
+
rdfs:label "TrustGraphEdge" ;
|
|
50
|
+
rdfs:comment "An evidence-backed edge between agents or facets in the public trust graph." .
|
|
51
|
+
|
|
52
|
+
aptrust:TrustScore a owl:Class ;
|
|
53
|
+
rdfs:subClassOf dul:Parameter ;
|
|
54
|
+
rdfs:label "TrustScore" ;
|
|
55
|
+
rdfs:comment "A computed score over evidence under a named policy and graph snapshot. Score is derived evidence, not authority." .
|
|
56
|
+
|
|
57
|
+
aptrust:signalSubject a owl:ObjectProperty ;
|
|
58
|
+
rdfs:domain aptrust:TrustSignal ;
|
|
59
|
+
rdfs:range ap:Agent ;
|
|
60
|
+
rdfs:label "signalSubject" .
|
|
61
|
+
|
|
62
|
+
aptrust:signalIssuer a owl:ObjectProperty ;
|
|
63
|
+
rdfs:domain aptrust:TrustSignal ;
|
|
64
|
+
rdfs:range ap:Agent ;
|
|
65
|
+
rdfs:label "signalIssuer" .
|
|
66
|
+
|
|
67
|
+
aptrust:signalValue a owl:DatatypeProperty ;
|
|
68
|
+
rdfs:domain aptrust:TrustSignal ;
|
|
69
|
+
rdfs:range xsd:decimal ;
|
|
70
|
+
rdfs:label "signalValue" .
|
|
71
|
+
|
|
72
|
+
aptrust:signalTag a owl:DatatypeProperty ;
|
|
73
|
+
rdfs:domain aptrust:TrustSignal ;
|
|
74
|
+
rdfs:range xsd:string ;
|
|
75
|
+
rdfs:label "signalTag" .
|
|
76
|
+
|
|
77
|
+
aptrust:derivedUnderPolicy a owl:ObjectProperty ;
|
|
78
|
+
rdfs:domain aptrust:TrustScore ;
|
|
79
|
+
rdfs:range apdisc:TrustPolicy ;
|
|
80
|
+
rdfs:label "derivedUnderPolicy" .
|
|
81
|
+
|
|
82
|
+
aptrust:usesTrustSignal a owl:ObjectProperty ;
|
|
83
|
+
rdfs:domain apdisc:TrustDetermination ;
|
|
84
|
+
rdfs:range aptrust:TrustSignal ;
|
|
85
|
+
rdfs:label "usesTrustSignal" .
|
|
86
|
+
|
|
87
|
+
aptrust:hasTrustScore a owl:ObjectProperty ;
|
|
88
|
+
rdfs:domain apdisc:TrustDetermination ;
|
|
89
|
+
rdfs:range aptrust:TrustScore ;
|
|
90
|
+
rdfs:label "hasTrustScore" .
|