@agenticprimitives/ontology 1.0.0-alpha.16 → 1.0.0-alpha.17

package/tbox/skills.ttl

@@ -1,7 +1,6 @@
-# T-box — generic skills substrate (spec 251). Class + property definitions for the
-# definition-vs-claim model. The DEFINITION is a public on-chain anchor
-# (SkillDefinitionRegistry); the CLAIM is an off-chain vault credential pointing to a
-# definition. NEUTRAL substrate — no domain/faith vocabulary.
+# T-box — capability substrate (spec 251 on-chain anchor + spec 325 semantic profile; ADR-0051).
+# Canonical noun: CapabilityDefinition. Standards "skill" objects are projections only.
+# IDE Agent Skill packages (SKILL.md) live in apguide: — see tbox/guidance.ttl (ADR-0050).
 
 @prefix aps:  <https://agenticprimitives.dev/ns/skill#> .
 @prefix ap:   <https://agenticprimitives.dev/ns/core#> .
@@ -11,20 +10,113 @@
 
 aps:Skill a rdfs:Class ;
     rdfs:label "Skill" ;
-    rdfs:comment "A versioned, PUBLIC, generic capability definition. Anchored on chain by SkillDefinitionRegistry (id, version, steward, kind, conceptHash, ontologyMerkleRoot, metadataURI, validity)." .
+    rdfs:comment "On-chain public capability definition anchor (SkillDefinitionRegistry). Legacy label retained for spec 251 ABI; prose prefers capability definition anchor." .
 
 aps:SkillClaim a rdfs:Class ;
     rdfs:label "SkillClaim" ;
-    rdfs:comment "An OFF-CHAIN verifiable credential asserting a subject Smart Agent's relation to an aps:Skill (pinned definitionId+version). Lives in the subject's private vault; never an on-chain row." .
+    rdfs:comment "OFF-CHAIN capability claim credential asserting a subject's relation to an aps:Skill (definitionId+version). Private vault — not an Agent Skill package." .
 
 aps:definitionId a rdf:Property ; rdfs:domain aps:SkillClaim ; rdfs:range aps:Skill ;
     rdfs:comment "The on-chain (skillId, version) this claim credential references." .
 aps:hasSkillKind a rdf:Property ; rdfs:domain aps:Skill ;
     rdfs:comment "An aps:skillKind value (C-box codelist; on-chain-bound)." .
-aps:claimSubject a rdf:Property ; rdfs:domain aps:SkillClaim ; rdfs:range ap:CanonicalAgentId ;
-    rdfs:comment "The subject Smart Agent (Address) the claim is about." .
+aps:claimSubject a rdf:Property ; rdfs:domain aps:SkillClaim ; rdfs:range ap:CanonicalAgentId .
 aps:claimIssuer a rdf:Property ; rdfs:domain aps:SkillClaim ; rdfs:range ap:CanonicalAgentId .
-aps:claimRelation a rdf:Property ; rdfs:domain aps:SkillClaim ;
-    rdfs:comment "An aps:skillRelation value (C-box codelist)." .
-aps:claimVisibilityMode a rdf:Property ; rdfs:domain aps:SkillClaim ;
-    rdfs:comment "An aps:claimVisibility value (C-box codelist)." .
+aps:claimRelation a rdf:Property ; rdfs:domain aps:SkillClaim .
+aps:claimVisibilityMode a rdf:Property ; rdfs:domain aps:SkillClaim .
+
+# ─── Canonical semantic capability (spec 325 §4.5; ADR-0051) ─────────────────
+
+aps:CapabilityDefinition a owl:Class ;
+    rdfs:label "CapabilityDefinition" ;
+    rdfs:comment "Stable AP semantic capability — source of truth. OASF taxon, A2A AgentSkill, Agent Skill package, and MCP tool are projections via crosswalk — not equivalent IDs." .
+
+aps:AgentSkillDefinition a owl:Class ;
+    owl:deprecated true ;
+    rdfs:subClassOf aps:CapabilityDefinition ;
+    rdfs:label "AgentSkillDefinition (deprecated)" ;
+    rdfs:comment "Deprecated alias for aps:CapabilityDefinition (ADR-0051)." .
+
+aps:CapabilityGrounding a owl:Class ;
+    rdfs:label "CapabilityGrounding" ;
+    rdfs:comment "Protocol-specific invocation binding (MCP tool, A2A endpoint, HTTP, WoT Form)." .
+
+aps:SkillGrounding a owl:Class ;
+    owl:deprecated true ;
+    rdfs:subClassOf aps:CapabilityGrounding ;
+    rdfs:label "SkillGrounding (deprecated)" .
+
+aps:CapabilityProtocolProjection a owl:Class ;
+    rdfs:label "CapabilityProtocolProjection" ;
+    rdfs:comment "Adapter output: A2A AgentSkill descriptor, OASF skill taxon ref, MCP tool ref — never canonical." .
+
+aps:SkillProtocolProjection a owl:Class ;
+    owl:deprecated true ;
+    rdfs:subClassOf aps:CapabilityProtocolProjection ;
+    rdfs:label "SkillProtocolProjection (deprecated)" .
+
+aps:IntentCapabilityMatch a owl:Class ;
+    rdfs:label "IntentCapabilityMatch" ;
+    rdfs:comment "Resolver evidence linking an Intent to a CapabilityDefinition (WSMO Mediator pattern)." .
+
+aps:IntentSkillMatch a owl:Class ;
+    owl:deprecated true ;
+    rdfs:subClassOf aps:IntentCapabilityMatch ;
+    rdfs:label "IntentSkillMatch (deprecated)" .
+
+aps:offeredByAgent a owl:ObjectProperty ;
+    rdfs:domain aps:CapabilityDefinition ; rdfs:range ap:CanonicalAgentId ;
+    rdfs:label "offeredByAgent" .
+
+aps:onChainAnchor a owl:ObjectProperty ;
+    rdfs:domain aps:CapabilityDefinition ; rdfs:range aps:Skill ;
+    rdfs:label "onChainAnchor" ;
+    rdfs:comment "Optional link to public SkillDefinitionRegistry anchor." .
+
+aps:semanticType a owl:ObjectProperty ;
+    rdfs:domain aps:CapabilityDefinition ;
+    rdfs:label "semanticType" .
+
+aps:hasInputShape a owl:ObjectProperty ; rdfs:domain aps:CapabilityDefinition ; rdfs:label "hasInputShape" .
+aps:hasOutputShape a owl:ObjectProperty ; rdfs:domain aps:CapabilityDefinition ; rdfs:label "hasOutputShape" .
+aps:hasPrecondition a owl:ObjectProperty ; rdfs:domain aps:CapabilityDefinition ; rdfs:label "hasPrecondition" .
+aps:hasEffect a owl:ObjectProperty ; rdfs:domain aps:CapabilityDefinition ; rdfs:label "hasEffect" .
+aps:hasCapabilityGrounding a owl:ObjectProperty ;
+    rdfs:domain aps:CapabilityDefinition ; rdfs:range aps:CapabilityGrounding ;
+    rdfs:label "hasCapabilityGrounding" .
+
+aps:hasSkillGrounding a owl:ObjectProperty ;
+    owl:deprecated true ;
+    rdfs:subPropertyOf aps:hasCapabilityGrounding ;
+    rdfs:domain aps:CapabilityDefinition ; rdfs:range aps:CapabilityGrounding ;
+    rdfs:label "hasSkillGrounding (deprecated)" .
+
+aps:groundingProtocol a owl:DatatypeProperty ;
+    rdfs:domain aps:CapabilityGrounding ;
+    rdfs:label "groundingProtocol" .
+
+aps:requiredDelegationScope a owl:DatatypeProperty ;
+    rdfs:domain aps:CapabilityDefinition ;
+    rdfs:label "requiredDelegationScope" .
+
+aps:requiredEntitlement a owl:ObjectProperty ;
+    rdfs:domain aps:CapabilityDefinition ;
+    rdfs:label "requiredEntitlement" .
+
+aps:projectsTo a owl:ObjectProperty ;
+    rdfs:domain aps:CapabilityDefinition ; rdfs:range aps:CapabilityProtocolProjection ;
+    rdfs:label "projectsTo" .
+
+aps:matchedIntent a owl:ObjectProperty ;
+    rdfs:domain aps:IntentCapabilityMatch ;
+    rdfs:label "matchedIntent" .
+
+aps:matchedCapability a owl:ObjectProperty ;
+    rdfs:domain aps:IntentCapabilityMatch ; rdfs:range aps:CapabilityDefinition ;
+    rdfs:label "matchedCapability" .
+
+aps:matchedSkill a owl:ObjectProperty ;
+    owl:deprecated true ;
+    rdfs:subPropertyOf aps:matchedCapability ;
+    rdfs:domain aps:IntentCapabilityMatch ; rdfs:range aps:CapabilityDefinition ;
+    rdfs:label "matchedSkill (deprecated)" .

package/tbox/verification-receipt.ttl

@@ -0,0 +1,127 @@
+# T-box — verification-receipt provenance vocabulary (spec 303).
+# The provenance layer is GROUNDED IN W3C PROV-O: verification is a
+# prov:Activity, its artifacts are prov:Entity, the verifier is the
+# associated prov:SoftwareAgent, and delegated authority is PROV's own
+# relation for it — prov:actedOnBehalfOf (delegate acts on behalf of
+# principal).
+#
+# THE PRIVACY SPLIT, IN PROV TERMS (ADR-0010 amendment 2026-07-07):
+# the PUBLIC receipt entity carries COMMITMENTS — it deliberately has NO
+# prov:actedOnBehalfOf / prov:wasAttributedTo edge to a person principal
+# (that edge would rebuild the correlation graph in the provenance layer).
+# The agent-linkage lives ONLY on the PRIVATE detail entity (vault-resident,
+# DecryptGrant-gated): there, apvr:onBehalfOf ⊑ prov:actedOnBehalfOf binds
+# delegate → principal, and prov:wasAttributedTo names the principal.
+# Opening the commitments (dispute path) is what re-attaches the public
+# receipt to the private PROV agent graph.
+#
+# Consumers: spec 303 receipts (packages/verification-receipts wire shapes
+# project onto these terms); any future A-box projection MUST respect
+# ADR-0040 (public KB rows only from public data — i.e. only the PUBLIC
+# receipt projection, never the detail).
+
+@prefix apvr:   <https://agenticprimitives.dev/ns/verification-receipt#> .
+@prefix ap:     <https://agenticprimitives.dev/ns/core#> .
+@prefix apdel:  <https://agenticprimitives.dev/ns/delegation#> .
+@prefix rdfs:   <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:    <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:    <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:   <http://www.w3.org/ns/prov#> .
+
+apvr: a owl:Ontology ;
+    rdfs:label "Agentic Primitives — verification-receipt provenance ontology" ;
+    owl:versionInfo "0.1.0" ;
+    rdfs:comment "Spec 303: execution-time verification as PROV-O provenance. Public receipt = commitment entity; private detail = the PROV agent-linkage, vault-resident." .
+
+# ─── The activity ─────────────────────────────────────────────────────
+
+apvr:VerificationActivity a owl:Class ;
+    rdfs:subClassOf prov:Activity ;
+    rdfs:label "Verification Activity" ;
+    rdfs:comment "One execution-time verification: signature check, transaction-parameters-vs-scope comparison, current-revocation check (the verifier duties). prov:wasAssociatedWith the verifying service agent; prov:used the delegation, invocation proof, and chain status evidence." .
+
+# ─── The artifacts (prov:Entity) ──────────────────────────────────────
+
+apvr:VerificationReceipt a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Verification Receipt (public)" ;
+    rdfs:comment "The commitment-only public artifact (VerificationReceiptV1). prov:wasGeneratedBy a VerificationActivity; prov:wasAttributedTo the VERIFIER only (Mode-1 public service agent). Person-linked values appear ONLY as HMAC commitments — no PROV edge to the principal here, by design." .
+
+apvr:VerificationReceiptDetail a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Verification Receipt Detail (private)" ;
+    rdfs:comment "The vault-resident opening material (VerificationReceiptDetailV1). Carries the PROV agent-linkage the public receipt withholds: prov:wasAttributedTo the principal, and the delegate apvr:onBehalfOf the principal. DecryptGrant-gated; destroying it (with the receiptKey) is the erasure path." .
+
+apvr:ChainStatusEvidence a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Chain Status Evidence" ;
+    rdfs:comment "Duty-3 evidence prov:used by the activity: revocation status at (chainId, blockNumber, blockHash). Produced by the chain-state authority reader (spec 289)." .
+
+# ─── Delegation grounding ─────────────────────────────────────────────
+# First PROV declaration of the delegation artifact (the apdel namespace
+# existed as a TS constant only). The EIP-712 delegation IS a prov:Entity;
+# the AUTHORITY RELATION it encodes is prov:actedOnBehalfOf between the
+# delegate and the principal — PROV-O's native modeling of exactly the
+# "acting on behalf" problem the receipts layer exists to evidence.
+
+apdel:Delegation a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Delegation" ;
+    rdfs:comment "An EIP-712 caveat-scoped delegation (the @agenticprimitives/delegation grant). As provenance: the entity whose verification licenses an apvr:onBehalfOf (⊑ prov:actedOnBehalfOf) relation between delegate and principal." .
+
+# ─── PROV property specializations ────────────────────────────────────
+
+apvr:onBehalfOf a owl:ObjectProperty ;
+    rdfs:subPropertyOf prov:actedOnBehalfOf ;
+    rdfs:label "on behalf of" ;
+    rdfs:domain prov:Agent ;
+    rdfs:range prov:Agent ;
+    rdfs:comment "The delegated-authority relation the receipt attests: the delegate (session key / service agent) acted on behalf of the principal Smart Agent, under a verified delegation. PRIVATE-detail projection only for person principals (ADR-0010 amendment)." .
+
+apvr:usedDelegation a owl:ObjectProperty ;
+    rdfs:subPropertyOf prov:used ;
+    rdfs:label "used delegation" ;
+    rdfs:domain apvr:VerificationActivity ;
+    rdfs:range apdel:Delegation ;
+    rdfs:comment "The activity consumed this delegation as its authority input (referenced by EIP-712 hash on the wire)." .
+
+apvr:usedStatusEvidence a owl:ObjectProperty ;
+    rdfs:subPropertyOf prov:used ;
+    rdfs:label "used status evidence" ;
+    rdfs:domain apvr:VerificationActivity ;
+    rdfs:range apvr:ChainStatusEvidence .
+
+apvr:opensReceipt a owl:ObjectProperty ;
+    rdfs:label "opens receipt" ;
+    rdfs:domain apvr:VerificationReceiptDetail ;
+    rdfs:range apvr:VerificationReceipt ;
+    rdfs:comment "The detail's receiptKey opens the receipt's commitments (the dispute path). Deliberately NOT a prov:wasDerivedFrom — both entities are co-generated by the activity; this is the opening relation." .
+
+# ─── Datatype properties (wire-shape projection) ──────────────────────
+
+apvr:decision a owl:DatatypeProperty ;
+    rdfs:domain apvr:VerificationReceipt ; rdfs:range xsd:string ;
+    rdfs:comment "'allow' | 'deny'." .
+
+apvr:reasonCode a owl:DatatypeProperty ;
+    rdfs:domain apvr:VerificationReceipt ; rdfs:range xsd:string ;
+    rdfs:comment "Coarse public taxonomy only — never the private deny detail." .
+
+apvr:scopeDecision a owl:DatatypeProperty ;
+    rdfs:domain apvr:VerificationReceipt ; rdfs:range xsd:string ;
+    rdfs:comment "'in_scope' | 'out_of_scope' | 'not_evaluated' — never a verdict that wasn't computed." .
+
+apvr:verifiedAtBucket a owl:DatatypeProperty ;
+    rdfs:domain apvr:VerificationReceipt ; rdfs:range xsd:date ;
+    rdfs:comment "UTC-day bucket. The exact prov:generatedAtTime lives on the PRIVATE detail only (timestamp coarsening is part of the privacy split)." .
+
+apvr:principalCommitment a owl:DatatypeProperty ;
+    rdfs:domain apvr:VerificationReceipt ; rdfs:range xsd:string ;
+    rdfs:comment "HMAC-SHA256(receiptKey, principal) — the public stand-in for the withheld prov:actedOnBehalfOf target." .
+
+apvr:argsCommitment a owl:DatatypeProperty ;
+    rdfs:domain apvr:VerificationReceipt ; rdfs:range xsd:string .
+
+apvr:receiptHash a owl:DatatypeProperty ;
+    rdfs:domain apvr:VerificationReceipt ; rdfs:range xsd:string ;
+    rdfs:comment "sha256 over the canonical body; the verifier's signature is over this." .