@agenticprimitives/ontology 1.0.0-alpha.18 → 1.0.0-alpha.20

package/tbox/context.ttl

@@ -0,0 +1,124 @@
+# T-box — orthogonal context facets + capability-map views (spec 330 W0 §4; spec 331).
+#
+# Implements docs/architecture/capability-architecture.md §3. The governing rule:
+#
+#   A capability participates in SEVERAL facets of SEVERAL kinds. There is no forced
+#   single-parent hierarchy, and a capability MAP is a VIEW projected from the graph —
+#   never the class hierarchy. Presentation level lives on a CapabilityMapEntry, never
+#   on the capability.
+#
+# "Vertical" and "horizontal" are diagram orientations, not ontology. Nothing here
+# authorizes anything: a facet is classification, and classification is never possession
+# and never permission (capability-architecture.md §2 axiom 4).
+
+@prefix apctx: <https://agenticprimitives.dev/ns/context#> .
+@prefix aps:   <https://agenticprimitives.dev/ns/skill#> .
+@prefix rdf:   <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs:  <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:   <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:   <http://www.w3.org/2001/XMLSchema#> .
+@prefix skos:  <http://www.w3.org/2004/02/skos/core#> .
+
+apctx: a owl:Ontology ;
+  rdfs:label "Agentic Primitives — context facet ontology" ;
+  owl:versionInfo "0.1.0" ;
+  rdfs:seeAlso <https://agenticprimitives.dev/docs/architecture/capability-architecture.md> ;
+  rdfs:comment "Orthogonal classification facets for capabilities and executions, plus the capability-map VIEW vocabulary. Classification only — never identity, never authority." .
+
+# ─── The facets (orthogonal; a capability may bear many of many kinds) ──────
+
+apctx:ContextFacet a owl:Class ;
+  rdfs:label "ContextFacet" ;
+  rdfs:comment "Abstract parent of the orthogonal classification facets. NOT a taxonomy root: facets of different kinds are independent axes, and bearing one never implies bearing another." .
+
+apctx:IndustryDomain a owl:Class ; rdfs:subClassOf apctx:ContextFacet ;
+  rdfs:label "IndustryDomain" ;
+  rdfs:comment "Economic or professional field (e.g. family-office advisory; agent-trust infrastructure)." .
+
+apctx:KnowledgeDomain a owl:Class ; rdfs:subClassOf apctx:ContextFacet ;
+  rdfs:label "KnowledgeDomain" ;
+  rdfs:comment "Subject-matter partition (e.g. taxation; wealth transfer; discovery). A SUBJECT domain is never a capability — conflating them re-opens ADR-0051. This is the facet atl:focusAreas projects onto." .
+
+apctx:ValueStreamStage a owl:Class ; rdfs:subClassOf apctx:ContextFacet ;
+  rdfs:label "ValueStreamStage" ;
+  rdfs:comment "Stage in an outcome lifecycle (assess → design → implement → monitor). A stage is never a separate capability from the ability it stages." .
+
+apctx:BoundedContext a owl:Class ; rdfs:subClassOf apctx:ContextFacet ;
+  rdfs:label "BoundedContext" ;
+  rdfs:comment "Boundary of a consistent model + vocabulary with ONE accountable owner. Every capability has exactly one owning bounded context (architecture invariant 2) and may participate in many others." .
+
+apctx:SharedSemanticDomain a owl:Class ; rdfs:subClassOf apctx:ContextFacet ;
+  rdfs:label "SharedSemanticDomain" ;
+  rdfs:comment "Semantics reused across most contexts: party, money/units, time, agreements, provenance." .
+
+# The ONE bounded context THIS repo owns. Every capability needs exactly one accountable owner
+# (invariant 2), and the substrate's own capabilities — Member Consultation, Consultation Routing,
+# and the advisory-consult realization PARAMETER — are owned here, not by any downstream domain
+# catalog. Advisory capabilities (adv:*) are owned by the New City catalog's own context, declared
+# in that downstream repo (architecture §4, §9); they never point here.
+apctx:SubstrateContext a apctx:BoundedContext ;
+  rdfs:label "Agentic-primitives substrate" ;
+  rdfs:comment "The bounded context of this repo's own coordination-substrate capabilities (spec 329 consult path and its realization machinery). Distinct from any downstream domain catalog: the substrate ships the machinery, a domain catalog owns its own capabilities in its own context." .
+
+apctx:ControlDomain a owl:Class ; rdfs:subClassOf apctx:ContextFacet ;
+  rdfs:label "ControlDomain" ;
+  rdfs:comment "Cross-cutting governance: privacy (ADR-0040), audit, authority separation. A control domain constrains realizations; it never grants them." .
+
+apctx:JurisdictionFacet a owl:Class ; rdfs:subClassOf apctx:ContextFacet ;
+  rdfs:label "JurisdictionFacet" ;
+  rdfs:comment "The legal/regulatory space a realization is scoped to, drawn from the GeoFeatureRegistry controlled vocabulary (spec 251). A jurisdiction is a CONTEXT of a capability, never a specialization of it: 'Spanish wealth tax' is wealth-and-transfer-tax analysis IN the ES jurisdiction facet, not a distinct ability." .
+
+apctx:LanguageFacet a owl:Class ; rdfs:subClassOf apctx:ContextFacet ;
+  rdfs:label "LanguageFacet" ;
+  rdfs:comment "A natural language a realization can be conducted in, as a BCP-47 tag. Delivery context, never an ability: an advisor does not have a 'Spanish' capability." .
+
+apctx:ContextProfile a owl:Class ;
+  rdfs:label "ContextProfile" ;
+  rdfs:comment "A named composition of facets scoping a capability or an execution (e.g. jurisdiction + knowledge domains + controls)." .
+
+apctx:composedOfFacet a owl:ObjectProperty ;
+  rdfs:domain apctx:ContextProfile ; rdfs:range apctx:ContextFacet ;
+  rdfs:label "composedOfFacet" .
+
+# ─── Classification (navigational; NEVER structural) ────────────────────────
+
+apctx:classifiedBy a owl:ObjectProperty ;
+  rdfs:range apctx:ContextFacet ;
+  rdfs:label "classifiedBy" ;
+  rdfs:comment "Subject → facet. Navigational/reporting classification. Deliberately NOT rdfs:subClassOf: a capability bearing a facet is not a subclass of anything, and stacking facets must never produce a hierarchy." .
+
+apctx:inJurisdiction a owl:ObjectProperty ;
+  rdfs:subPropertyOf apctx:classifiedBy ; rdfs:range apctx:JurisdictionFacet ;
+  rdfs:label "inJurisdiction" .
+
+apctx:inLanguage a owl:ObjectProperty ;
+  rdfs:subPropertyOf apctx:classifiedBy ; rdfs:range apctx:LanguageFacet ;
+  rdfs:label "inLanguage" .
+
+apctx:ownedByContext a owl:ObjectProperty ;
+  rdfs:range apctx:BoundedContext ;
+  rdfs:label "ownedByContext" ;
+  rdfs:comment "The ONE accountable owning bounded context. Exactly one per capability; sh:maxCount 1 in cbox/capability-catalog-shapes.shacl.ttl." .
+
+# ─── Capability maps are VIEWS ──────────────────────────────────────────────
+
+apctx:CapabilityMap a owl:Class ;
+  rdfs:label "CapabilityMap" ;
+  rdfs:comment "A named view projected from the architecture graph for presentation or reporting. A map is never the class hierarchy and never the source of composition." .
+
+apctx:CapabilityMapEntry a owl:Class ;
+  rdfs:label "CapabilityMapEntry" ;
+  rdfs:comment "One capability's placement in ONE map. apctx:levelInMap lives HERE — the same capability may sit at different levels in different maps." .
+
+apctx:hasMapEntry a owl:ObjectProperty ;
+  rdfs:domain apctx:CapabilityMap ; rdfs:range apctx:CapabilityMapEntry ;
+  rdfs:label "hasMapEntry" .
+
+apctx:entryCapability a owl:ObjectProperty ;
+  rdfs:domain apctx:CapabilityMapEntry ; rdfs:range aps:Capability ;
+  rdfs:label "entryCapability" .
+
+apctx:levelInMap a owl:DatatypeProperty ;
+  rdfs:domain apctx:CapabilityMapEntry ; rdfs:range xsd:integer ;
+  rdfs:label "levelInMap" ;
+  rdfs:comment "Presentation level within one map. Asserting this on an aps:Capability is a SHACL violation (cbox/capability-catalog-shapes.shacl.ttl NoLevelOnCapabilityShape)." .

package/tbox/coordination.ttl

@@ -0,0 +1,216 @@
+# T-box — coordination vocabulary (spec 332 §3; ADR-0054).
+#
+# The Endeavor is the durable, multi-principal coordination Situation — the thing a person or org
+# posts as a request ("issue", "work item", "case", "project" in product vocabulary) and a group
+# coordinates to satisfy. Everything around it is REUSED, never re-minted: goals are apint:Intent,
+# capability requirements are aps:Capability + assertion strengths (ADR-0053), execution is
+# apful:Task / apexec:ServiceExecution, evidence is apatt:, conversation is fabric. What is new is
+# the durable middle: shared plan, participation, allocation, commitment.
+#
+# ── W0 SUBSET (the execution.ttl rule) ───────────────────────────────────────────────────────────
+# This module declares EXACTLY the spec-332 core subset — the classes the wave-1 package, the
+# provenance projection, and the coverage ledger reference — PLUS apcoord:Recommendation, whose
+# reader shipped with the spec-334 W4 agent-triage slice. The REST of the spec-333 vocabulary
+# (DecisionRequest, Risk, CapacityOffer, EndeavorCollection, …) is SPECIFIED but NOT declared here:
+# vocabulary minted ahead of a reader is a named mistake, and the coverage ledger carries each
+# term's honest status instead. When spec 333's wave lands, it EXTENDS this file.
+#
+# ── The doctrine that governs everything below (ADR-0054 §4) ─────────────────────────────────────
+# ALLOCATION IS NEVER AUTHORITY. capable / available / allocated / committed / authorized /
+# performing / satisfied are SEVEN separate facts. No gate reads an apcoord: term; a Recommendation,
+# a plan step, a participation role, or a commitment grants nothing — authority remains
+# delegation ∩ entitlement ∩ policy, evaluated at the gate at the moment of use.
+
+@prefix apcoord: <https://agenticprimitives.dev/ns/coordination#> .
+@prefix apsit:   <https://agenticprimitives.dev/ns/situation#> .
+@prefix apint:   <https://agenticprimitives.dev/ns/intent#> .
+@prefix ap:      <https://agenticprimitives.dev/ns/core#> .
+@prefix p-plan:  <http://purl.org/net/p-plan#> .
+@prefix prov:    <http://www.w3.org/ns/prov#> .
+@prefix rdfs:    <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:     <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:     <http://www.w3.org/2001/XMLSchema#> .
+@prefix skos:    <http://www.w3.org/2004/02/skos/core#> .
+
+apcoord: a owl:Ontology ;
+    rdfs:label "Agentic Primitives — coordination ontology (spec 332 core subset)" ;
+    owl:versionInfo "0.1.0" ;
+    rdfs:comment "The durable coordination plane: Endeavor (a multi-principal Situation pursuing an outcome), its intake, shared plan, and participation lifecycle. Runtime record shapes live in @agenticprimitives/coordination. Spec 333 extends this module in its own wave." ;
+    skos:scopeNote "BETWEEN-AGENTS plane (coordination-vs-orchestration.md). Coordination schedules work between agents: participants are resolved through DISCOVERY (agent-naming, registry-kit, apdisc: capability-level matching) and needs are stated as aps:Capability requirements — never MCP tool ids or SKILL.md content. Distinct from apexec: (the WITHIN-AGENT orchestration plane); the only seam is compilation provenance in plan.ttl." .
+
+# ═══ Intake + the Endeavor itself ════════════════════════════════════════════
+
+apcoord:EndeavorRequest a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "EndeavorRequest" ;
+    rdfs:comment "Structured intake BEFORE adoption: goal statement, requester, target principal, entry-point context. Not yet a commitment by anyone. One engine, many doors (ADR-0054 §2): a Home request, a discussion @ask, a 1:1 inbox ask, and an A2A intent response all produce this same entity — the door sets intake context and default profile, never a different model." .
+
+apcoord:Endeavor a owl:Class ;
+    rdfs:subClassOf apsit:Situation ;
+    rdfs:label "Endeavor" ;
+    rdfs:comment "A PERSISTENT, MULTI-PRINCIPAL Situation pursuing a desired outcome — the durable coordination object products call issue/work item/case/project. Distinct from the run-specific execution it spawns and from the conversation about it. Vault-resident, managing-principal single-writer in V1." .
+
+apcoord:OutcomeSpecification a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "OutcomeSpecification" ;
+    rdfs:comment "The OBSERVABLE success definition for an Endeavor; versioned (revisions are new entities). Satisfaction is evidenced through apatt: Outcome/Validation attestations, never asserted by fiat." .
+
+apcoord:OutcomeCriterion a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "OutcomeCriterion" ;
+    rdfs:comment "One measurable, attestable, or reviewable success condition inside an OutcomeSpecification. Also the definition substance of milestones — a milestone is criteria, not merely a date." .
+
+apcoord:EndeavorRelation a owl:Class ;
+    rdfs:label "EndeavorRelation" ;
+    rdfs:comment "Reified TYPED link between Endeavors: depends-on | blocks | contributes-to | duplicates | supersedes | related-to | child-of (composite Endeavors). Never one overloaded 'related' edge; hierarchy (child-of) is distinct from collection membership (spec 333) and from PlanStep decomposition." .
+
+# ═══ The shared plan (P-Plan-grounded; see plan.ttl for the trichotomy) ═══════
+
+apcoord:CoordinationPlan a owl:Class ;
+    rdfs:subClassOf p-plan:Plan ;
+    rdfs:label "CoordinationPlan" ;
+    rdfs:comment "The DURABLE, VERSIONED, SHARED plan of an Endeavor. Revisions are new entities (prov:wasRevisionOf chains); adoption is an explicit decision, never implicit. COMPILES INTO run-specific apexec:ExecutionPlans — never a synonym for one (ADR-0054 §3). Content-hashed: commitments and executions bind the exact revision hash." .
+
+apcoord:PlanStep a owl:Class ;
+    rdfs:subClassOf p-plan:Step ;
+    rdfs:label "PlanStep" ;
+    rdfs:comment "One prescribed contribution, interaction, decision, aggregation, or validation inside a CoordinationPlan (p-plan:isStepOfPlan). Executed activities point back via p-plan:correspondsToStep. May carry capability requirements (aps:Capability + minimum assertion strength) — a requirement, never a permission." .
+
+apcoord:PlanEdge a owl:Class ;
+    rdfs:label "PlanEdge" ;
+    rdfs:comment "Reified typed step relation: precedes (projects onto p-plan:isPrecededBy) | depends-on | alternative | condition | compensates | refines." .
+
+apcoord:MilestoneDefinition a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "MilestoneDefinition" ;
+    rdfs:comment "A named convergence point DEFINED BY CRITERIA (OutcomeCriterion refs), not merely a date." .
+
+apcoord:MilestoneAchievement a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "MilestoneAchievement" ;
+    rdfs:comment "Evidence that a milestone's criteria became true — references apatt: evidence; never a checkbox." .
+
+# ═══ Participation lifecycle: proposal → allocation → commitment ══════════════
+
+apcoord:EndeavorParticipation a owl:Class ;
+    rdfs:subClassOf apsit:Situation ;
+    rdfs:label "EndeavorParticipation" ;
+    rdfs:comment "A participant's relationship to an Endeavor: role + scope + validity. Generalizes the apmsg:DiscussionParticipation pattern — asserted through invitation-acceptance or allocation-commitment, never implied. The role (sponsor | coordinator | contributor | validator | beneficiary | observer) is an apsit:SituationRole: capacity, not permission." .
+
+apcoord:ContributionProposal a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ContributionProposal" ;
+    rdfs:comment "An offer to perform bounded PlanSteps. An offer binds nobody." .
+
+apcoord:AllocationDecision a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "AllocationDecision" ;
+    rdfs:comment "The Endeavor's SELECTION of a participant for a contribution. GRANTS NOTHING — 'allocated' is the third of the seven separate facts (ADR-0054 §4), and no gate reads it. The product-familiar 'assignee' is a projection over allocation + commitment." .
+
+apcoord:ContributionCommitment a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ContributionCommitment" ;
+    rdfs:comment "The participant's SIGNED acceptance of bounded responsibility, binding the EXACT adopted plan revision hash. Signed via the universal signature paths (ERC-1271/6492/ECDSA/WebAuthn), fail-closed. STILL grants nothing: authorized remains a separate fact evaluated at the gate." .
+
+# ═══ Agent triage (spec 333 §3 — W4 minimal slice; reader: @agenticprimitives/coordination /decisions) ═══
+
+apcoord:Recommendation a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Recommendation" ;
+    rdfs:comment "AGENT-GENERATED, NON-AUTHORITATIVE proposed change: TYPED proposed commands + confidence + explanation + evidence, targeting a pending EndeavorRequest (triage, spec 334 §10) or an Endeavor. Lifecycle proposed → accepted | rejected, decided by the managing principal / a steward — NEVER auto-applied without an explicit CoordinationRule naming the class (spec 333 §5). Acceptance replays the proposed commands through ORDINARY command validation; a Recommendation grants nothing and no gate reads it." .
+
+# ═══ Execution context + adapter boundary ═════════════════════════════════════
+
+apcoord:CoordinationContextSnapshot a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "CoordinationContextSnapshot" ;
+    rdfs:comment "The IMMUTABLE, ENTITLEMENT-FILTERED, hash-addressed execution context handed to any executor: exact Endeavor revision, adopted plan hash, PlanStep, selected messages, selected artifacts, profiles, capability requirements, privacy filtering applied. Executions prov:used it by hash — reproducibility never requires handing anyone the whole discussion history." .
+
+apcoord:ExternalObjectBinding a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ExternalObjectBinding" ;
+    rdfs:comment "Stable mapping to an EXTERNAL product object + revision (Linear/Jira/Asana/…): provider, external id/revision, sync mode, provider-extension schema/payload refs. The adapters themselves live in sibling repos (ADR-0037); an imported vendor 'task' must be semantically classified (Request | PlanStep | Task | DecisionRequest | Risk | Impediment | …), never a generic WorkItem." .
+
+# ═══ Properties ═══════════════════════════════════════════════════════════════
+
+apcoord:adoptedFrom a owl:ObjectProperty ;
+    rdfs:domain apcoord:Endeavor ; rdfs:range apcoord:EndeavorRequest ;
+    rdfs:label "adoptedFrom" ;
+    rdfs:comment "Provenance back to intake: which request this Endeavor was adopted from." .
+
+apcoord:hasOutcomeSpecification a owl:ObjectProperty ;
+    rdfs:domain apcoord:Endeavor ; rdfs:range apcoord:OutcomeSpecification ;
+    rdfs:label "hasOutcomeSpecification" .
+
+apcoord:hasCriterion a owl:ObjectProperty ;
+    rdfs:domain apcoord:OutcomeSpecification ; rdfs:range apcoord:OutcomeCriterion ;
+    rdfs:label "hasCriterion" .
+
+apcoord:hasRelation a owl:ObjectProperty ;
+    rdfs:domain apcoord:Endeavor ; rdfs:range apcoord:EndeavorRelation ;
+    rdfs:label "hasRelation" .
+
+apcoord:relatedEndeavor a owl:ObjectProperty ;
+    rdfs:domain apcoord:EndeavorRelation ; rdfs:range apcoord:Endeavor ;
+    rdfs:label "relatedEndeavor" .
+
+apcoord:relationKind a owl:ObjectProperty ;
+    rdfs:domain apcoord:EndeavorRelation ; rdfs:range skos:Concept ;
+    rdfs:label "relationKind" ;
+    rdfs:comment "depends-on | blocks | contributes-to | duplicates | supersedes | related-to | child-of (C-box codelist)." .
+
+apcoord:plansEndeavor a owl:ObjectProperty ;
+    rdfs:domain apcoord:CoordinationPlan ; rdfs:range apcoord:Endeavor ;
+    rdfs:label "plansEndeavor" .
+
+apcoord:edgeFrom a owl:ObjectProperty ;
+    rdfs:domain apcoord:PlanEdge ; rdfs:range apcoord:PlanStep ;
+    rdfs:label "edgeFrom" .
+
+apcoord:edgeTo a owl:ObjectProperty ;
+    rdfs:domain apcoord:PlanEdge ; rdfs:range apcoord:PlanStep ;
+    rdfs:label "edgeTo" .
+
+apcoord:edgeKind a owl:ObjectProperty ;
+    rdfs:domain apcoord:PlanEdge ; rdfs:range skos:Concept ;
+    rdfs:label "edgeKind" ;
+    rdfs:comment "precedes | depends-on | alternative | condition | compensates | refines (C-box codelist)." .
+
+apcoord:achieves a owl:ObjectProperty ;
+    rdfs:domain apcoord:MilestoneAchievement ; rdfs:range apcoord:MilestoneDefinition ;
+    rdfs:label "achieves" .
+
+apcoord:participatesIn a owl:ObjectProperty ;
+    rdfs:domain apcoord:EndeavorParticipation ; rdfs:range apcoord:Endeavor ;
+    rdfs:label "participatesIn" .
+
+apcoord:proposesSteps a owl:ObjectProperty ;
+    rdfs:domain apcoord:ContributionProposal ; rdfs:range apcoord:PlanStep ;
+    rdfs:label "proposesSteps" .
+
+apcoord:selectsProposal a owl:ObjectProperty ;
+    rdfs:domain apcoord:AllocationDecision ; rdfs:range apcoord:ContributionProposal ;
+    rdfs:label "selectsProposal" .
+
+apcoord:acceptsAllocation a owl:ObjectProperty ;
+    rdfs:domain apcoord:ContributionCommitment ; rdfs:range apcoord:AllocationDecision ;
+    rdfs:label "acceptsAllocation" .
+
+apcoord:bindsPlanRevision a owl:ObjectProperty ;
+    rdfs:domain apcoord:ContributionCommitment ; rdfs:range apcoord:CoordinationPlan ;
+    rdfs:label "bindsPlanRevision" ;
+    rdfs:comment "The EXACT adopted revision the commitment was signed against; a stale hash is a rejected commitment, never coerced forward." .
+
+apcoord:planContentHash a owl:DatatypeProperty ;
+    rdfs:domain apcoord:CoordinationPlan ; rdfs:range xsd:string ;
+    rdfs:label "planContentHash" ;
+    rdfs:comment "Hash of steps+edges+milestones — the adoption, commitment, and adapter-provenance key. Same load-bearing role apexec:usedPlanContentHash plays for playbooks." .
+
+apcoord:snapshotHash a owl:DatatypeProperty ;
+    rdfs:domain apcoord:CoordinationContextSnapshot ; rdfs:range xsd:string ;
+    rdfs:label "snapshotHash" .
+
+apcoord:entryPoint a owl:ObjectProperty ;
+    rdfs:domain apcoord:EndeavorRequest ; rdfs:range skos:Concept ;
+    rdfs:label "entryPoint" ;
+    rdfs:comment "home-request | discussion-ask | inbox-ask | a2a-intent (C-box codelist). The door, recorded for provenance — never a different semantic model per door." .

package/tbox/discovery.ttl

@@ -19,7 +19,7 @@
 
 apdisc: a owl:Ontology ;
   rdfs:label "Agentic Primitives — discovery ontology" ;
-  owl:versionInfo "0.1.0" ;
+  owl:versionInfo "0.2.0" ;
   rdfs:seeAlso <https://github.com/agentictrustlabs/agent-explorer/tree/main/apps/ontology/ontology> ;
   rdfs:comment "Vocabulary for GraphDB-backed discovery queries, evidence paths, trust determinations, graph snapshots, and intent candidate matching." .
 
@@ -147,3 +147,127 @@ apdisc:inferenceProfileId a owl:DatatypeProperty ;
   rdfs:domain apdisc:InferenceProfile ;
   rdfs:range xsd:string ;
   rdfs:label "inferenceProfileId" .
+
+# ═══════════════════════════════════════════════════════════════════════════════════════════════
+# Offerings (spec 286; ADR-0040 amended) — the crawled, HOST-ASSERTED service surface.
+#
+# WHY THIS BLOCK EXISTS. `apdisc:Offering` and its thirteen properties were written into the
+# production knowledge graph by apps/demo-discovery-indexer and read back by
+# apps/demo-discovery-mcp's `getOfferings` SPARQL — while being declared in NO T-box file. This is
+# the same gap `tbox/profile.ttl` closed for `approf:`, and it is closed the same way: NOTHING IS
+# MINTED HERE. Every IRI below is verbatim what the indexer already emits and the MCP already
+# selects, because both are already in the live graph. Renaming any of them would be a migration,
+# not an edit (ADR-0009; ADR-0013 — no read path for an undeclared term).
+#
+# ── What an Offering IS, and what it is NOT (capability-architecture.md §1) ─────────────────────
+# An Offering is an `aps:CapabilityProtocolProjection`: ONE agent's public ADVERTISEMENT of ONE
+# skill, crawled from that agent's own `GET /offerings?view=public` card. It is:
+#   · host-asserted, therefore the WEAKEST assertion strength (declared, never claimed, never
+#     demonstrated) — `apdisc:hasOffering` carries exactly as much authority as `atl:skills` does,
+#     which is none;
+#   · provenance-bearing by construction (sourceEndpoint + observedAt + cardDigest), because a
+#     crawled assertion whose observation point and time are unrecorded cannot be aged out or
+#     challenged;
+#   · NEVER an `apguide:AgentSkillPackage` reference. An Offering names no playbook (architecture
+#     §2 axiom 1: the `implementedBy exactly-1` error), and no gate may read one (axiom 4).
+# ═══════════════════════════════════════════════════════════════════════════════════════════════
+
+apdisc:Offering a owl:Class ;
+  rdfs:subClassOf prov:Entity , dul:InformationObject ;
+  rdfs:label "Offering" ;
+  rdfs:comment "One crawled, host-asserted public skill advertisement of ONE agent (spec 286). A projection of a capability, never the capability and never a plan. Its A-box IRI is deterministic per (chain, agent, skillId) — `urn:ap:offering:eip155:<chain>:<sa>:<skillId>` — so a re-crawl converges on the same subject instead of accumulating duplicates." ;
+  # NOT rdfs:subClassOf aps:CapabilityProtocolProjection, and the reason is load-bearing rather
+  # than fussy. An Offering plays the projection ROLE — it is an advertisement and nothing more —
+  # but `aps:CapabilityProtocolProjectionShape` requires `aps:declaresCapability` exactly once, and
+  # an Offering declares NOTHING resolvable: its `skillId` is whatever string the host put on its
+  # own card. Subclassing would make RDFS entailment sweep every crawled offering into that shape's
+  # target set, and the production graph would report thousands of violations that describe the
+  # ontology's wishful thinking rather than any defect in the data. When a host publishes a
+  # catalog capability id, the honest edge is an explicit `aps:declaresCapability` triple on the
+  # offering node — asserted per offering, never entailed from its class.
+  skos:related aps:CapabilityProtocolProjection .
+
+# ── The two link predicates (agent ↔ child node) ────────────────────────────
+
+apdisc:hasOffering a owl:ObjectProperty ;
+  rdfs:domain ap:Agent ;
+  rdfs:range apdisc:Offering ;
+  rdfs:label "hasOffering" ;
+  rdfs:comment "Agent → its crawled Offerings. FRESHNESS IS PER LINK PREDICATE: a crawl that fails returns no children at all and the indexer PRESERVES the existing offerings; only a successful crawl (possibly of zero offerings) refreshes them. Crawl failure is not zero offerings (ADR-0013)." .
+
+apdisc:ofAgent a owl:ObjectProperty ;
+  rdfs:range ap:Agent ;
+  rdfs:label "ofAgent" ;
+  rdfs:comment "The child-node → agent backlink the projection store writes for EVERY first-class child node — Offerings, aptrust:TrustGraphEdge, apatt:Attestation. Deliberately left with NO rdfs:domain: constraining it to apdisc:Offering would, under RDFS entailment, type every attestation and every trust edge as an Offering. It is a generic backlink that happens to live in the apdisc: namespace because the offerings projector coined it first." .
+
+# ── The thirteen Offering-node properties ───────────────────────────────────
+# Order matches apps/demo-discovery-indexer/src/ontology.ts so the two files can be diffed by eye.
+
+apdisc:skillId a owl:DatatypeProperty ;
+  rdfs:domain apdisc:Offering ; rdfs:range xsd:string ;
+  rdfs:label "skillId" ;
+  rdfs:comment "The host's own id for the advertised skill, verbatim from its card. It is the offering's identity component (the A-box IRI derives from it), NOT a resolvable `aps:capabilityId` and NOT the on-chain keccak256 skillId — a host may advertise anything it likes here. An offering without one is not projected at all." .
+
+apdisc:offeringName a owl:DatatypeProperty ;
+  rdfs:domain apdisc:Offering ; rdfs:range xsd:string ;
+  rdfs:label "offeringName" ;
+  rdfs:comment "The card's human label for this skill." .
+
+apdisc:offeringDescription a owl:DatatypeProperty ;
+  rdfs:domain apdisc:Offering ; rdfs:range xsd:string ;
+  rdfs:label "offeringDescription" ;
+  rdfs:comment "The card's per-skill blurb. Its OWN term, and G8's third writer: this was emitted under `approf:description`, whose rdfs:domain is `approf:AgentProfile`, so every crawled Offering entailed itself to be an agent profile and an 'agent self-description' query that dropped its subject filter would sweep up host-asserted skill blurbs. A skill's blurb is not an agent's bio (agent-metadata-tiers.md: same field name ≠ same field)." .
+
+apdisc:offeringVersion a owl:DatatypeProperty ;
+  rdfs:domain apdisc:Offering ; rdfs:range xsd:string ;
+  rdfs:label "offeringVersion" ;
+  rdfs:comment "The host's version string for this skill, opaque and uninterpreted — never parsed, never ordered, never compared." .
+
+apdisc:effect a owl:DatatypeProperty ;
+  rdfs:domain apdisc:Offering ; rdfs:range xsd:string ;
+  rdfs:label "effect" ;
+  rdfs:comment "The card's self-declared effect class (e.g. read/write). AN OPEN VALUE SPACE ON PURPOSE: it is a host's claim about its own skill, so no codelist here could be authoritative, and pinning one would make an unrecognised value indistinguishable from an absent one. It informs presentation and ranking; it never gates anything (authority is delegation ∩ entitlement ∩ policy, at the gate)." .
+
+apdisc:exposure a owl:DatatypeProperty ;
+  rdfs:domain apdisc:Offering ; rdfs:range xsd:string ;
+  rdfs:label "exposure" ;
+  rdfs:comment "The card's self-declared exposure class. Same posture as apdisc:effect: host-asserted, open, advisory, never an authorization input." .
+
+apdisc:family a owl:DatatypeProperty ;
+  rdfs:domain apdisc:Offering ; rdfs:range xsd:string ;
+  rdfs:label "family" ;
+  rdfs:comment "The card's grouping label for related skills. A NAVIGATIONAL category (apctx:classifiedBy in spirit), never `aps:specializesCapability` — a host's grouping is not a statement that one ability is a narrower form of another." .
+
+apdisc:requiredCapability a owl:DatatypeProperty ;
+  rdfs:domain apdisc:Offering ; rdfs:range xsd:string ;
+  rdfs:label "requiredCapability" ;
+  rdfs:comment "MULTIVALUED — one triple per entry (`requiredCapabilities[]` on the card), which is why the MCP's getOfferings groups rows by offering node. What the host says a CALLER must present to invoke this skill. It is a published precondition, not a grant and not a check: the caller's actual authority is decided at the gate." .
+
+apdisc:hasInputSchema a owl:DatatypeProperty ;
+  rdfs:domain apdisc:Offering ; rdfs:range xsd:string ;
+  rdfs:label "hasInputSchema" ;
+  rdfs:comment "Whether the card advertises an input schema for this skill. STRING-TYPED, NOT BOOLEAN, and deliberately so: the indexer writes `String(o.hasInputSchema)` and the MCP reads `value === 'true'`, so the live value space is exactly the two lexical forms 'true' and 'false'. The C-box shape pins that set, because any third value reads as false in the MCP and would be a silent miss (ADR-0013). Declaring it xsd:boolean here would describe a graph that does not exist." .
+
+apdisc:offeringStatus a owl:DatatypeProperty ;
+  rdfs:domain apdisc:Offering ; rdfs:range xsd:string ;
+  rdfs:label "offeringStatus" ;
+  rdfs:comment "The card's lifecycle label for this skill. Host-asserted and open — an agent taking a skill down is a fact about its card, observable only at the next crawl." .
+
+# ── Provenance of the crawl itself (ADR-0040 amended) ───────────────────────
+# A host-asserted fact with no observation point and no observation time cannot be aged, diffed or
+# challenged — it is a rumour with a subject IRI. These three are what make an Offering evidence.
+
+apdisc:sourceEndpoint a owl:DatatypeProperty ;
+  rdfs:range xsd:string ;
+  rdfs:label "sourceEndpoint" ;
+  rdfs:comment "The `a2aEndpoint` the card was crawled from — the spec-280 node-keyed endpoint record, not a profile property. Also emitted on the agent's own offerings facet, hence NO rdfs:domain. The crawl requires the card's self-reported agentId to equal the SA being crawled: a host may never project offerings for a different agent." .
+
+apdisc:observedAt a owl:DatatypeProperty ;
+  rdfs:range xsd:integer ;
+  rdfs:label "observedAt" ;
+  rdfs:comment "Unix SECONDS at which the card was observed (the card's own `observedAt` when it states one, else crawl time). Written as a bare Turtle integer, hence xsd:integer, not xsd:dateTime — declared as it is emitted, not as one might wish it were. Also emitted on the agent's offerings facet, hence no rdfs:domain." .
+
+apdisc:cardDigest a owl:DatatypeProperty ;
+  rdfs:domain apdisc:Offering ; rdfs:range xsd:string ;
+  rdfs:label "cardDigest" ;
+  rdfs:comment "`sha256:<64 lowercase hex>` over the RAW card body the offering was parsed from. It is what makes 'did this host's advertisement change?' answerable without having stored the card: every offering crawled in one pass shares one digest, so a changed digest scopes exactly which advertisements must be re-examined. Same load-bearing role the pinned playbook content hash plays for a realization contract." .

package/tbox/execution.ttl

@@ -0,0 +1,131 @@
+# T-box — the EXECUTION plane: what actually happened (spec 330 §8, W0 remainder;
+# capability-architecture.md §5). PROV-O-grounded throughout.
+#
+# ── Why this file exists now, and why it is SMALL ───────────────────────────────────────────────
+# `cbox/capability-catalog-shapes.shacl.ttl` has shipped two realization contracts since spec 331,
+# and both of them target classes that were declared NOWHERE:
+# `apexec:MemberConsultationActivity`, `apexec:ConsultationSynthesisActivity`, `apexec:AgentRuntime`,
+# `apexec:completionState`, `apexec:usedPlanContentHash`, `aprole:ConsultResponder`,
+# `aprole:ConsultRouter`. Spec 330's checklist records the gap in as many words — "referenced by IRI
+# in the contracts but not yet declared". A contract whose `sh:targetClass` names a class no module
+# declares does not validate anything: it has an empty target set, and it passes by vacuity. That is
+# precisely the "unenforceable contract" the catalog's own governing rule forbids.
+#
+# So this module declares EXACTLY the terms the shipped contracts reference, plus the one new term
+# the parameterised advisory contract needs — and NOT the rest of spec 330 §8. The other twelve
+# `apexec:` classes and the six environment specializations stay parked with W1, because nothing
+# references them yet and a vocabulary minted ahead of a reader is the other half of the same
+# mistake. When W1 lands its emission records, it extends this file; it does not rewrite it.
+#
+# ── The doctrine that governs everything below (architecture §2 axioms 5–6, §6) ─────────────────
+# Provenance is EVIDENCE, never an authorization input. No gate may branch on an `apexec:` record.
+# A role (`prov:hadRole`) is a CAPACITY, not a permission: `aprole:ConsultResponder` says what the
+# runtime was doing, never that it was allowed to. Authority is delegation ∩ entitlement ∩ policy,
+# evaluated at the gate at the moment of use, and it reads none of these terms.
+
+@prefix apexec:  <https://agenticprimitives.dev/ns/execution#> .
+@prefix aprole:  <https://agenticprimitives.dev/ns/role#> .
+@prefix ap:      <https://agenticprimitives.dev/ns/core#> .
+@prefix aps:     <https://agenticprimitives.dev/ns/skill#> .
+@prefix apguide: <https://agenticprimitives.dev/ns/guidance#> .
+@prefix rdfs:    <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:     <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:     <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:    <http://www.w3.org/ns/prov#> .
+@prefix dul:     <http://www.ontologydesignpatterns.org/ont/dul/DUL.owl#> .
+@prefix skos:    <http://www.w3.org/2004/02/skos/core#> .
+
+apexec: a owl:Ontology ;
+  rdfs:label "Agentic Primitives — execution ontology (W0 subset)" ;
+  owl:versionInfo "0.1.0" ;
+  rdfs:comment "The execution plane: activities that realize capabilities, the runtimes that bore responsibility, and the completion conditions that separate a realization from an attempt. W0 SUBSET — only the terms the shipped realization contracts reference. Spec 330 W1 extends it." ;
+  skos:scopeNote "WITHIN-AGENT plane (coordination-vs-orchestration.md). Orchestration sequences one agent's run: the executor's knowledge is local — harness-activated Agent Skill packages (apguide:AgentSkillPackage / SKILL.md, pinned by apexec:usedPlanContentHash) and injected tools — and the loop never queries naming/registry/apdisc: discovery. Distinct from apcoord: (the BETWEEN-AGENTS coordination plane); an apexec:ExecutionPlan compiles FROM an apcoord:PlanStep (plan.ttl), it never is one." .
+
+aprole: a owl:Ontology ;
+  rdfs:label "Agentic Primitives — execution roles" ;
+  owl:versionInfo "0.1.0" ;
+  rdfs:comment "prov:Role individuals naming the CAPACITY an agent functioned in during an activity. A role is never an authorization (architecture §6): it answers 'what was it doing', not 'what was it allowed to do'." .
+
+# ═══ Runtimes ═══════════════════════════════════════════════════════════════
+
+apexec:AgentRuntime a owl:Class ;
+  rdfs:subClassOf prov:SoftwareAgent ;
+  rdfs:label "AgentRuntime" ;
+  rdfs:comment "The durable, IDENTIFIED runtime that bore responsibility for an activity — in this substrate, one Smart Agent's A2aTaskDO + InteractionsDO pair. NOT the environment it runs in, and NOT the model it called: a model is swapped without changing who is answerable. It `prov:actedOnBehalfOf` the ap:Agent whose authority it acted under, and that edge is what lets a realization be attributed to a party rather than to a process." .
+
+# ═══ Activities ═════════════════════════════════════════════════════════════
+
+apexec:ServiceExecution a owl:Class ;
+  rdfs:subClassOf prov:Activity , dul:Action ;
+  rdfs:label "ServiceExecution" ;
+  rdfs:comment "The externally meaningful activity that REALIZES a capability: an A2A task fulfillment, an assistant turn, an automation run. Distinct from the apful:Task that TRACKS it (architecture §2 axiom 3) and from the SkillExecutions it contains." .
+
+apexec:SkillExecution a owl:Class ;
+  rdfs:subClassOf prov:Activity , dul:Action ;
+  rdfs:label "SkillExecution" ;
+  rdfs:comment "Work performed under ONE activated playbook, with a prov:qualifiedAssociation whose prov:hadPlan is that playbook. A sub-activity of a ServiceExecution, and never evidence of authority — activating a plan grants nothing (ADR-0050)." .
+
+apexec:MemberConsultationActivity a owl:Class ;
+  rdfs:subClassOf apexec:SkillExecution ;
+  rdfs:label "MemberConsultationActivity" ;
+  rdfs:comment "ONE member agent's turn answering ONE routed consultation (spec 329 §3.2): it prov:used the ConsultRequestV1 and the member's own vault playbook, and prov:generated the answered-XOR-declined ConsultAnswerV1 with the actor pinned to the member. Depth-1 by construction — a member never re-routes. This is the target class of aps:MemberConsultationRealizationContract, and — when the turn carries apexec:routedOnCapability — also of the parameterised advisory contract: ONE activity, TWO realizations, which is the whole point of separating capability identity from activity type." .
+
+apexec:ConsultationSynthesisActivity a owl:Class ;
+  rdfs:subClassOf apexec:ServiceExecution ;
+  rdfs:label "ConsultationSynthesisActivity" ;
+  rdfs:comment "The ORG side of a routed consultation (spec 329 §4/§6): structural eligibility, spec-281 ranking, fan-out, and the synthesis post whose attribution names each contributing member. A ServiceExecution rather than a SkillExecution because it composes several member turns plus its own playbook-guided synthesis." .
+
+# ═══ Completion — the part that makes a contract about REALIZATION ══════════
+# A capability is not a prov:Activity: the capability is what COULD be achieved, an activity is an
+# occurrence that attempted it. Without a terminal state and an end time, a contract validates
+# attempts and calls them realizations.
+
+apexec:CompletionState a owl:Class ;
+  rdfs:subClassOf skos:Concept ;
+  rdfs:label "CompletionState" ;
+  rdfs:comment "The TERMINAL state of an activity. A closed codelist per contract (the contract pins which members it accepts with sh:in) — never an open string, because an unrecognised terminal state would read as 'not completed' in some consumers and 'completed' in others." .
+
+apexec:Answered a apexec:CompletionState ;
+  rdfs:label "Answered" ;
+  rdfs:comment "The consulted member produced answer text attributed to itself." .
+
+apexec:Declined a apexec:CompletionState ;
+  rdfs:label "Declined" ;
+  rdfs:comment "The consulted member explicitly declined. A CONFORMING REALIZATION, not a failure: the contract governs shape, not outcome, and treating a decline as non-realization would create an incentive to answer outside one's documented positions — the opposite of what the consult path exists for. `buildConsultAnswer` already makes answered-xor-declined structural." .
+
+apexec:NoEligibleMember a apexec:CompletionState ;
+  rdfs:label "NoEligibleMember" ;
+  rdfs:comment "The ORG side terminated with an empty eligible set — nobody held both the consultability hint and the grant. A conforming realization of routing: correctly finding nobody is a result, and a router that hid it would be a router that guessed." .
+
+apexec:completionState a owl:ObjectProperty ;
+  rdfs:domain prov:Activity ; rdfs:range apexec:CompletionState ;
+  rdfs:label "completionState" ;
+  rdfs:comment "The activity's terminal state. Required by every realization contract, together with prov:endedAtTime: an activity with neither is an attempt in progress, and crediting it as a realization is how a demonstrated-capability signal starts counting abandonments." .
+
+apexec:usedPlanContentHash a owl:DatatypeProperty ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:string ;
+  rdfs:label "usedPlanContentHash" ;
+  rdfs:comment "The content hash of the playbook AS PINNED AT ACTIVATION — not as it reads now. LOAD-BEARING, NOT BOOKKEEPING: without it, 'which realizations must be re-examined now this playbook changed?' is unanswerable, and any demonstrated-capability signal computed over unpinned plans is unfalsifiable. Same role apdisc:cardDigest plays for a crawled advertisement." .
+
+# ═══ The routing parameter — what an advisory realization is a realization OF ═══
+#
+# READ THIS BEFORE USING IT. This term is DECLARED, and is NOT EMITTED by anything today. It is the
+# single datum that stands between the parameterised advisory realization contract and
+# enforceability, and it is declared here so that the gap is a named, testable, one-field gap
+# rather than a paragraph of prose. See cbox/capability-catalog-shapes.shacl.ttl §4.
+
+apexec:routedOnCapability a owl:ObjectProperty ;
+  rdfs:subPropertyOf apexec:realizesCapability ;
+  rdfs:domain prov:Activity ; rdfs:range aps:Capability ;
+  rdfs:label "routedOnCapability" ;
+  rdfs:comment "The capability the ORG's routing selected this responder ON — the intersection of the question's resolved need and the responder's declared ids, which `rankConsultCandidates` already computes and then discards into a free-text evidence line. WHY IT MUST BE THE ROUTED-ON ID AND NOT MERELY A DECLARED ONE: an agent may declare up to twelve capabilities, so crediting a realization to every id it happens to declare would let one answered question realize twelve capabilities at once — turning the only assertion strength that cannot be faked by writing a string into one that can. A subproperty of apexec:realizesCapability because it is a realization claim with a stated basis, not a second kind of claim." .
+
+# ═══ Roles — capacity, never permission ═════════════════════════════════════
+
+aprole:ConsultResponder a prov:Role ;
+  rdfs:label "ConsultResponder" ;
+  rdfs:comment "The capacity a member's runtime functioned in while answering a routed consultation. The AUTHORITY for that turn is the consultability delegation checked at the member's gate; this term records what was done, and no gate reads it." .
+
+aprole:ConsultRouter a prov:Role ;
+  rdfs:label "ConsultRouter" ;
+  rdfs:comment "The capacity an org's runtime functioned in while selecting members and synthesizing their attributed answers." .