@agenticprimitives/ontology 1.0.0-alpha.20 → 1.0.0-alpha.22

package/tbox/engagement.ttl

@@ -0,0 +1,349 @@
+# T-box — intent engagement vocabulary (spec 336; design input: agentic-trust §20b–§20e).
+#
+# THE GAP THIS MODULE OWNS: discovery ends with "this provider appears relevant"; fulfillment
+# begins with "an authorized provider is performing the work". Skipping the middle is the single
+# most common mistake in current agent registries and brokers — candidate found → invoke candidate.
+# A discovery result does NOT say "this provider has read this exact intent and agrees to fulfil
+# it on these terms". Different claims, by different parties, and only the second is something a
+# principal can sensibly authorize.
+#
+# THE SPINE, END TO END (nine of the ten steps grant nothing):
+#   apint:Intent                    canonical, principal-owned                — grants NOTHING
+#     -> apeng:DiscoveryProjection  MINIMIZED view, only what finding needs   — grants NOTHING
+#       -> apdisc:CandidateQuery    the citable question                      — grants NOTHING
+#         -> apdisc:MatchCandidate  a RESOLVER'S ASSERTION, not a fact        — grants NOTHING
+#           -> apeng:EngagementProbe / apeng:EngagementResponse   pre-task    — grants NOTHING
+#             -> apeng:FulfillmentOffer  the provider's commitment    — commits, does NOT authorize
+#               -> apeng:Mandate         the principal's authorization        — GRANTS, bounded
+#                 -> apeng:ExecutionCredential  short-lived attenuation       — the wire artifact
+#                   -> apful:Task          the work                           — grants NOTHING
+#                     -> apeng:FulfillmentReceipt  signed evidence            — binds the digests
+#
+# WHY EACH SEPARATION EARNS ITS KEEP:
+#   Intent vs DiscoveryProjection — the intent holds identity, address, payment limits and
+#     relationships. Finding a provider needs almost none of that. Broadcasting the whole intent
+#     to every candidate is a privacy leak dressed as a search.
+#   MatchCandidate vs truth — a resolver ranked something: a claim BY the resolver, with
+#     provenance. A vector score must never decide who receives sensitive data.
+#   apdisc:Offering vs FulfillmentOffer — "we generally provide this" is a capability claim;
+#     "we will fulfil THIS intent on THESE terms until THIS time" is a commitment. Registries
+#     publish the first and act as if they had the second.
+#   Offer vs Mandate — the provider commits; the PRINCIPAL authorizes. Two parties, two artifacts.
+#   Mandate vs ExecutionCredential — the durable authority record stays home; a short-lived
+#     attenuation goes on the wire, so a leaked credential expires while the authority survives.
+#
+# A fulfillment apful:Task is created ONLY AFTER: the intent is understood, an acceptable offer
+# exists, the mandate is present and unexpired, and trust/policy have passed.
+#
+# ── W0 SUBSET (the coordination.ttl rule) ────────────────────────────────────────────────────────
+# This module declares EXACTLY the spec-336 chain artifacts + the probe's three axes + the spec-337
+# offer algebra (abstract Offer, StandingOffer, the cart edge) — the classes the specs' normative
+# sections and the wave-1 package will reference. The REST of the spec-336/337 vocabulary
+# (ClarificationMode, HumanInteractionChannel, EvaluationEffect, QuestionSet,
+# IntentAmendmentProposal, FulfillmentAgreement, state codelists, QualificationStage,
+# DiscoverySignalKind, auction/cart-item/refund codelists, SHACL shapes) is SPECIFIED but NOT
+# declared here: vocabulary minted ahead of a reader is a named mistake. The package wave EXTENDS
+# this file. Marketplace words (listing, cart, bid, auction) are PROJECTIONS of these classes
+# (spec 337 §2), never classes of their own.
+
+@prefix apeng:  <https://agenticprimitives.dev/ns/engagement#> .
+@prefix apint:  <https://agenticprimitives.dev/ns/intent#> .
+@prefix apdisc: <https://agenticprimitives.dev/ns/discovery#> .
+@prefix apful:  <https://agenticprimitives.dev/ns/fulfillment#> .
+@prefix apdel:  <https://agenticprimitives.dev/ns/delegation#> .
+@prefix apsit:  <https://agenticprimitives.dev/ns/situation#> .
+@prefix ap:     <https://agenticprimitives.dev/ns/core#> .
+@prefix prov:   <http://www.w3.org/ns/prov#> .
+@prefix rdfs:   <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:    <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:    <http://www.w3.org/2001/XMLSchema#> .
+@prefix skos:   <http://www.w3.org/2004/02/skos/core#> .
+
+apeng: a owl:Ontology ;
+    rdfs:label "Agentic Primitives — intent engagement ontology (spec 336 W0 subset)" ;
+    owl:versionInfo "0.1.0" ;
+    rdfs:comment "Pre-task provider qualification: the artifacts between a discovery match and an authorized fulfillment task — intent projections, engagement probes and responses, fulfillment offers, mandates, execution credentials, receipts. Runtime record shapes land in @agenticprimitives/intent-engagement (spec 336 §8)." ;
+    skos:scopeNote "PRE-TASK plane between discovery (apdisc:) and fulfillment (apful:). AN ENGAGEMENT PROBE IS A COMMUNICATIVE ACT ABOUT AN INTENT — not the intent, not a task, not authorization. Of the whole chain only apeng:Mandate grants authority (a per-intent projection of a standing apdel:Delegation, never wider); apeng:FulfillmentOffer commits the provider but authorizes nothing; everything else is description or evidence. Engagement facts (willingness, terms, price, availability NOW) are per-viewer state and NEVER enter the public discovery KB (ADR-0040)." .
+
+# ─── The projection ladder: disclosure widens in steps, never by accident ────────────────────────
+
+apeng:IntentProjection a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Intent Projection" ;
+    rdfs:comment "A PURPOSE- AND AUDIENCE-BOUND view derived from a canonical apint:Intent. Disclosure widens in three deliberate steps — discovery (broadcast, minimal), engagement (one named candidate, enough to quote), execution (the selected provider, released only once a mandate exists). Each carries its own digest, and THE OFFER BINDS TO THE PROJECTION IT REVIEWED (apeng:basisOfOffer), not to undisclosed facts in the intent: a provider that never saw a field cannot be held to it, and cannot claim it either. Derived, never edited: change the intent and the projection is regenerated." .
+
+apeng:DiscoveryProjection a owl:Class ;
+    rdfs:subClassOf apeng:IntentProjection ;
+    rdfs:label "Discovery Projection" ;
+    rdfs:comment "The MINIMIZED broadcast view — intent type, coarse region, time window, hard requirements, price ceiling. NEVER the whole intent: exact address, identity, payment credentials are disclosed LATER, to ONE selected provider, under a mandate. apeng:projectionWithholds records what was held back, so minimization is auditable rather than merely claimed." .
+
+apeng:EngagementProjection a owl:Class ;
+    rdfs:subClassOf apeng:IntentProjection ;
+    rdfs:label "Engagement Projection" ;
+    rdfs:comment "Audience-bound to ONE candidate and sufficient to judge feasibility or quote — a postal area rather than an address. More than discovery saw, less than execution needs, authorized for that provider alone. THE NORMATIVE BASIS OF ANY OFFER IT RECEIVES." .
+
+apeng:ExecutionProjection a owl:Class ;
+    rdfs:subClassOf apeng:IntentProjection ;
+    rdfs:label "Execution Projection" ;
+    rdfs:comment "Released ONLY after an offer is selected and the mandate exists — exact locations, contact channel, approved payment, operational instructions. The mandate authorizes exactly the fields the offer named as required inputs, and nothing else." .
+
+# ─── Campaign above conversation ─────────────────────────────────────────────────────────────────
+
+apeng:EngagementCampaign a owl:Class ;
+    rdfs:subClassOf apsit:Situation ;
+    rdfs:label "Engagement Campaign" ;
+    rdfs:comment "ONE INTENT, MANY CANDIDATES — the aggregate above the per-candidate conversations. Owns the intent version and digest being resolved, the candidate matches probed, concurrency and deadline, the disclosure budget (apeng:maxCandidates — every probe is a disclosure to one more party), how many offers are wanted, and the final selection. Without it a single provider conversation quietly becomes the cross-provider coordination object, and 'which offers did we compare, and why this one?' has nowhere to live." .
+
+apeng:EngagementSituation a owl:Class ;
+    rdfs:subClassOf apsit:Situation ;
+    rdfs:label "Engagement Situation" ;
+    rdfs:comment "ONE requester–candidate conversation about one intent, before any task exists — probes sent, clarifications asked, offers made or declined. A Situation because it holds while the parties negotiate, and it may end with no task at all. Transport correlators (A2A contextId) are per-provider opaque state stored against this, never canonical ids. CONTRAST apful:Task, which starts only once an acceptable offer and a mandate exist." .
+
+# ─── The probe, its three independent axes, and the answers ─────────────────────────────────────
+
+apeng:EngagementObjective a owl:Class ;
+    rdfs:label "Engagement objective" ;
+    rdfs:comment "AXIS A — the result a probe asks for: availability-check | accept-or-decline | indicative-proposal | firm-offer | negotiation. Only firm-offer asks for something acceptance-capable. 'direct' is deliberately renamed accept-or-decline: it read as 'begin execution', the one thing a probe must never do." .
+
+apeng:InteractionPolicy a owl:Class ;
+    rdfs:subClassOf apsit:Description ;
+    rdfs:label "Interaction Policy" ;
+    rdfs:comment "AXIS B — the channels a requester will permit during an engagement (clarification mode, human-interaction channels) and the round limit. A Description: it constrains the conversation without being part of it. structured-only clarification is the safe default — the provider asks for named claims instead of its model asking open questions against a private vault." .
+
+apeng:ProbeProcessingModel a owl:Class ;
+    rdfs:label "Probe processing model" ;
+    rdfs:comment "AXIS C — how the answer arrives: direct-message | evaluation-task | reciprocal-a2a. Business semantics separated from timing and transport, so a provider that needs ten minutes to price something is not forced to look like one that declined." .
+
+apeng:EngagementProbe a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Engagement Probe" ;
+    rdfs:comment "The pre-task question put to a candidate: here is a minimized projection of an intent — will you take it, and on what terms? Carries the projection (NEVER the canonical intent), the intent digest, the objective, the interaction policy, acceptable processing models, a reply-by deadline and a single-use nonce. DELIBERATELY NOT A TASK: creating a business task to ask whether work is acceptable pollutes the provider's lifecycle with speculation. Lineage: FIPA cfp; TMF921 ProbeIntent; ETSI ZSM feasibility check (crosswalk doc)." .
+
+apeng:EngagementAcknowledgement a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Engagement Acknowledgement" ;
+    rdfs:comment "'I received the probe and will evaluate it' — AND NOTHING MORE. Its own artifact rather than a seventh response kind, because an acknowledgement is not an answer, and a requester that treats it as one has mistaken receipt for acceptance. Names the processing model chosen and when a real response is expected." .
+
+apeng:EngagementResponse a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Engagement Response" ;
+    rdfs:comment "What a candidate answers a probe with, typed by apeng:EngagementResponseKind: an offer, a request for clarification, a demand that the human enter its own UX, a referral elsewhere, a decline, or temporarily-unavailable. EVERY ONE IS A LEGITIMATE, RECORDABLE OUTCOME — a resolver that can only handle 'yes' silently treats 'not right now' as 'no such provider'." .
+
+apeng:EngagementResponseKind a owl:Class ;
+    rdfs:label "Engagement response kind" ;
+    rdfs:comment "offer | needs-clarification | human-ux-required | referral | decline | temporarily-unavailable. The last two are NOT failures — a decline is a fact about fit (FIPA refuse ≠ failure), and temporarily-unavailable is a fact about time that must not be cached as absence. A response kind is an EVENT, recorded off the engagement state machine." .
+
+apeng:EngagementEvaluationTask a owl:Class ;
+    rdfs:subClassOf apful:Task ;
+    rdfs:label "Engagement Evaluation Task" ;
+    rdfs:comment "A restricted task for work that PRECEDES commitment — feasibility, pricing, policy. HARD LIMITS: must not be read as acceptance, must not exercise a fulfillment mandate, must not perform the requested outcome. It produces an apeng:EngagementResponse or a technical failure. A DECLINE IS A SUCCESSFUL COMPLETION — the evaluation worked; its business conclusion was no. Evaluation side effects (read-only / temporary-hold / billable) must be declared: a provider that reserves inventory to quote has taken an action nobody authorized." .
+
+# ─── Offers: commitment without authority (spec 337 — one offer algebra, both arenas) ────────────
+# THE TWO-FLIP PRINCIPLE (spec 337 §1.1): intent workflows and commerce marketplaces are ONE
+# algebra with exactly two parameters flipped — WHO MOVES FIRST (intent-first: requester probes,
+# provider quotes; offer-first: a standing offer pre-exists and a later intent finds it) and WHICH
+# WAY THE RESOURCE FLOWS (apint:GiveIntent/ReceiveIntent). BOTH FLIPS ARE DATA ON RECORDS, NEVER
+# ARCHITECTURE: one abstract Offer, no arena-specific class trees, and NO FLIP EVER FLIPS
+# AUTHORITY — only the principal's Mandate grants, in either arena, in either direction.
+# Marketplace words are PROJECTIONS, never classes: a "listing" IS a StandingOffer; a "cart" IS a
+# FulfillmentOffer composed from StandingOffers; a "bid" is a StandingOffer with direction
+# flipped; an "auction" is an EngagementCampaign profile. The ADR-0051 move, applied to commerce.
+
+apeng:Offer a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Offer" ;
+    rdfs:comment "THE CANONICAL COMMERCE NOUN (spec 337): a SIGNED, EXPIRING, DIGEST-PINNED, ACCEPTANCE-CAPABLE commitment. Abstract — concrete offers are either per-intent (apeng:FulfillmentOffer, the workflow arena) or standing (apeng:StandingOffer, the marketplace arena). The arenas differ ONLY by the two-flip parameters (who moves first; resource direction) — data on records, never architecture (spec 337 §1.1). ISSUED OFFERS ARE IMMUTABLE: a change mints a superseding revision, and an acceptance pins the revision digest it accepted. An offer COMMITS its maker; it never authorizes — authority is the principal's apeng:Mandate, whichever arena. CONTRAST apeng:IndicativeFulfillmentProposal, which is deliberately NOT under this class: an estimate and an acceptance-capable instrument must not be confusable at a glance." .
+
+apeng:IndicativeFulfillmentProposal a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Indicative Fulfillment Proposal" ;
+    rdfs:comment "A NON-BINDING estimate — likely terms, probable price, an approximate window. Its own class OUTSIDE the apeng:Offer hierarchy, because an acceptance-capable instrument and an estimate must not be confusable at a glance: only apeng:Offer subclasses can be accepted." .
+
+apeng:StandingOffer a owl:Class ;
+    rdfs:subClassOf apeng:Offer ;
+    rdfs:label "Standing Offer" ;
+    rdfs:comment "An acceptance-capable commitment that PRECEDES any specific intent — 'anyone matching these conditions may take THIS resource at THESE terms until expiry'. The marketplace primitive: a listing IS a StandingOffer with broadcast audience; a buyer-side bid is the same class with direction flipped (the Seaport lesson — offer[]/consideration[] are one order struct). A Dutch auction is a StandingOffer repriced by superseding revisions; first acceptance wins. THE THREE-WAY DISTINCTION THAT KEEPS THE ALGEBRA HONEST: apdisc:Offering says 'we generally provide this' (a claim, NOT acceptance-capable); a StandingOffer is take-it-or-leave-it acceptable; a FulfillmentOffer is a commitment about ONE intent. Registries conflate the first two; brokers conflate all three." .
+
+apeng:FulfillmentOffer a owl:Class ;
+    rdfs:subClassOf apeng:Offer ;
+    rdfs:label "Fulfillment Offer" ;
+    rdfs:comment "A provider's SIGNED, EXPIRING, CONDITIONAL commitment to fulfil ONE specific intent on stated terms — scope accepted, assumptions and exclusions, required inputs (the fields the projection withheld, now NAMED so the mandate can authorize exactly them and no more), expected artifacts, price, jurisdiction, data handling, the mandate requirement, revision. THE ARTIFACT MOST REGISTRIES ARE MISSING. A merchant CART is this class: standing per-item terms composed (apeng:composesOffer) into one intent-bound, digest-pinned, acceptance-capable commitment — exact items, price, tax, shipping (the UCP cart / AP2 Cart-Mandate target: what you see is what you pay for). CONTRAST apdisc:Offering, the standing advertisement: that is a capability claim, this is a commitment about one intent, and treating the first as the second is how brokers invoke providers that never agreed to the job. Still not authority: the provider commits here; the PRINCIPAL authorizes by apeng:Mandate. On acceptance the pair flows into the spine's agreement layer (apint:Commitment → apagr:)." .
+
+apeng:OfferSelection a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Offer Selection" ;
+    rdfs:comment "The campaign's decision that one offer won the comparison, with the reasons AND the offers it beat. Local and private: the provider learns of it only through an apeng:OfferAcceptance, and the losers are recorded rather than silently dropped — a comparison must be reviewable, not taken on trust." .
+
+apeng:OfferAcceptance a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Offer Acceptance" ;
+    rdfs:comment "The requester's acceptance of ONE offer, pinned to that offer's digest. IT CANNOT BROADEN OR MODIFY THE TERMS — an acceptance that differs from the offer it names is a counter-proposal and belongs in a new offer revision. Separate from apeng:OfferSelection, the private comparison decision." .
+
+# ─── The authority seam: requirement → mandate → wire credential ─────────────────────────────────
+
+apeng:MandateRequirement a owl:Class ;
+    rdfs:subClassOf apsit:Description ;
+    rdfs:label "Mandate Requirement" ;
+    rdfs:comment "The authority that MUST EXIST before work proceeds — actor, audience, permitted actions, constraints, ceilings, the intent digest it is bound to. Expressed in OAuth RAR (RFC 9396) shape: a collision-resistant authorization-detail type, locations, actions, limits — and RFC 9396 is explicit that NO UNIVERSAL narrower-than algorithm exists, so each type needs its own subset handler (implemented against delegation + tool-policy). A Description: IT GRANTS NOTHING — it is the proposal a mandate is derived FROM, which is exactly why an offer can state its requirements openly." .
+
+apeng:Mandate a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Mandate" ;
+    rdfs:comment "The principal's APPROVED, BOUNDED, EXPIRING authorization of one selected offer — the FIRST artifact in the chain that grants anything. A per-intent PROJECTION of a standing apdel:Delegation (apeng:derivedFromDelegation): it can never exceed it, and it binds BY DIGEST to the intent, the engagement projection disclosed, and the accepted offer — so a captured mandate cannot be replayed against a different intent, and a materially changed intent or offer mints a SUCCESSOR mandate rather than silently widening this one. CONTRAST apeng:ExecutionCredential: A MANDATE IS NOT AN ACCESS TOKEN — the durable authority record stays home. UX RULE: the approval surface shows the EFFECTIVE AUTHORITY (actions, audience, limits, validity window), never the friendly sentence." .
+
+apeng:ExecutionCredential a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Execution Credential" ;
+    rdfs:comment "A short-lived, ATTENUATED credential derived from a mandate (apeng:derivedFromMandate) and presented at call time — THE ONLY THING THAT GOES ON THE WIRE. It can only narrow what the mandate allows, never widen it, and it expires long before the mandate does: separating them is what makes a leaked wire credential expire while the authority survives. Same discipline as ADR-0041's ingress-envelope rule — the gates re-verify against the substrate at the moment of use; the credential is never trusted AS the grant." .
+
+# ─── Evidence ────────────────────────────────────────────────────────────────────────────────────
+
+apeng:FulfillmentReceipt a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Fulfillment Receipt" ;
+    rdfs:comment "The SIGNED record of what actually happened, binding intent digest, offer digest, mandate, executing agent, action, outcome status, evidence references and a timestamp. A BROWSER REDIRECT IS NOT A RECEIPT, and neither is a successful poll: both prove a surface responded, not that authorized work occurred. Sibling of apvr:VerificationReceipt (which evidences a verification activity); this binds the ENGAGEMENT chain end to end and is what a third party who was not present can check." .
+
+# ─── Properties: projections ─────────────────────────────────────────────────────────────────────
+
+apeng:projectionOf a owl:ObjectProperty ; rdfs:domain apeng:IntentProjection ; rdfs:range apint:Intent ;
+    rdfs:label "projection of" ; rdfs:comment "The canonical intent this view derives from. Derived, never edited independently." .
+apeng:projectionAudience a owl:ObjectProperty ; rdfs:domain apeng:IntentProjection ; rdfs:range ap:Agent ;
+    rdfs:label "projection audience" ; rdfs:comment "WHO this view was prepared for. An audience-less projection is a broadcast, whatever it was intended as." .
+apeng:projectionPurpose a owl:DatatypeProperty ; rdfs:domain apeng:IntentProjection ; rdfs:range xsd:string ;
+    rdfs:label "projection purpose" ; rdfs:comment "What disclosing this much is FOR. Purpose-binding is what makes reuse in another context a violation rather than a convenience." .
+apeng:projectionDigest a owl:DatatypeProperty ; rdfs:domain apeng:IntentProjection ; rdfs:range xsd:string ;
+    rdfs:label "projection digest" ; rdfs:comment "Digest over exactly what was shown. What an offer binds to." .
+apeng:projectionWithholds a owl:DatatypeProperty ; rdfs:domain apeng:IntentProjection ; rdfs:range xsd:string ;
+    rdfs:label "projection withholds" ; rdfs:comment "A field deliberately NOT exposed. Recorded so minimization is auditable and a later disclosure under mandate can be checked against it. The detailed redaction manifest stays local — naming omitted categories on the wire can itself leak." .
+
+# ─── Properties: campaign + engagement ───────────────────────────────────────────────────────────
+
+apeng:campaignForIntent a owl:ObjectProperty ; rdfs:domain apeng:EngagementCampaign ; rdfs:range apint:Intent ;
+    rdfs:label "campaign for intent" ; rdfs:comment "The one intent version this campaign resolves." .
+apeng:campaignCandidate a owl:ObjectProperty ; rdfs:domain apeng:EngagementCampaign ; rdfs:range apdisc:MatchCandidate ;
+    rdfs:label "campaign candidate" ; rdfs:comment "A discovery match this campaign chose to probe — the seam from apdisc:." .
+apeng:campaignEngagement a owl:ObjectProperty ; rdfs:domain apeng:EngagementCampaign ; rdfs:range apeng:EngagementSituation ;
+    rdfs:label "campaign engagement" ; rdfs:comment "One per candidate. The campaign compares across them; each conversation knows only its own provider." .
+apeng:campaignDeadline a owl:DatatypeProperty ; rdfs:domain apeng:EngagementCampaign ; rdfs:range xsd:dateTime ;
+    rdfs:label "campaign deadline" ; rdfs:comment "When comparison closes, whether or not every candidate answered." .
+apeng:maxCandidates a owl:DatatypeProperty ; rdfs:domain apeng:EngagementCampaign ; rdfs:range xsd:integer ;
+    rdfs:label "max candidates" ; rdfs:comment "How many candidates may be probed — a DISCLOSURE BUDGET, not a performance knob: every probe is a disclosure to one more party." .
+apeng:offersWanted a owl:DatatypeProperty ; rdfs:domain apeng:EngagementCampaign ; rdfs:range xsd:integer ;
+    rdfs:label "offers wanted" ; rdfs:comment "How many offers make a comparison worth deciding on." .
+apeng:campaignSelected a owl:ObjectProperty ; rdfs:domain apeng:EngagementCampaign ; rdfs:range apeng:OfferSelection ;
+    rdfs:label "campaign selected" ; rdfs:comment "The winning selection, with its reasons and the offers it beat." .
+apeng:withinCampaign a owl:ObjectProperty ; rdfs:domain apeng:EngagementSituation ; rdfs:range apeng:EngagementCampaign ;
+    rdfs:label "within campaign" ; rdfs:comment "The comparison this conversation belongs to." .
+apeng:engagementWith a owl:ObjectProperty ; rdfs:domain apeng:EngagementSituation ; rdfs:range ap:Agent ;
+    rdfs:label "engagement with" ; rdfs:comment "The candidate provider being engaged." .
+apeng:withinEngagement a owl:ObjectProperty ; rdfs:range apeng:EngagementSituation ;
+    rdfs:label "within engagement" ; rdfs:comment "The conversation a probe, response or offer belongs to." .
+
+# ─── Properties: probe + response ────────────────────────────────────────────────────────────────
+
+apeng:probesOffering a owl:ObjectProperty ; rdfs:domain apeng:EngagementProbe ; rdfs:range apdisc:Offering ;
+    rdfs:label "probes offering" ; rdfs:comment "The standing offering being asked. The offering, not merely the agent — an agent may expose several, and only one may fit." .
+apeng:probeCarriesProjection a owl:ObjectProperty ; rdfs:domain apeng:EngagementProbe ; rdfs:range apeng:IntentProjection ;
+    rdfs:label "probe carries projection" ; rdfs:comment "The MINIMIZED view sent — never the canonical intent." .
+apeng:engagementObjective a owl:ObjectProperty ; rdfs:domain apeng:EngagementProbe ; rdfs:range apeng:EngagementObjective ;
+    rdfs:label "engagement objective" ; rdfs:comment "AXIS A — what result the requester seeks. Independent of channels (AXIS B) and delivery (AXIS C): one enumeration doing three jobs made 'I will negotiate, but only after structured clarification, and identity verification happens in my own UX' unsayable." .
+apeng:probeInteractionPolicy a owl:ObjectProperty ; rdfs:domain apeng:EngagementProbe ; rdfs:range apeng:InteractionPolicy ;
+    rdfs:label "probe interaction policy" ; rdfs:comment "AXIS B — the channels permitted in reply, and the round limit." .
+apeng:acceptableProcessingModel a owl:ObjectProperty ; rdfs:domain apeng:EngagementProbe ; rdfs:range apeng:ProbeProcessingModel ;
+    rdfs:label "acceptable processing model" ; rdfs:comment "AXIS C — the delivery shapes the requester can handle." .
+apeng:replyBy a owl:DatatypeProperty ; rdfs:domain apeng:EngagementProbe ; rdfs:range xsd:dateTime ;
+    rdfs:label "reply by" ; rdfs:comment "After this an answer cannot produce an acceptable offer." .
+apeng:probeNonce a owl:DatatypeProperty ; rdfs:domain apeng:EngagementProbe ; rdfs:range xsd:string ;
+    rdfs:label "probe nonce" ; rdfs:comment "Single-use correlator — what makes a reciprocal callback matchable and a replay rejectable." .
+apeng:acknowledgesProbe a owl:ObjectProperty ; rdfs:domain apeng:EngagementAcknowledgement ; rdfs:range apeng:EngagementProbe ;
+    rdfs:label "acknowledges probe" ; rdfs:comment "The probe received — receipt, not acceptance." .
+apeng:respondsToProbe a owl:ObjectProperty ; rdfs:domain apeng:EngagementResponse ; rdfs:range apeng:EngagementProbe ;
+    rdfs:label "responds to probe" ; rdfs:comment "The probe answered." .
+apeng:engagementResponseKind a owl:ObjectProperty ; rdfs:domain apeng:EngagementResponse ; rdfs:range apeng:EngagementResponseKind ;
+    rdfs:label "engagement response kind" ; rdfs:comment "Which of the six answers this is." .
+apeng:responseCarriesOffer a owl:ObjectProperty ; rdfs:domain apeng:EngagementResponse ; rdfs:range apeng:FulfillmentOffer ;
+    rdfs:label "response carries offer" ; rdfs:comment "The offer an 'offer' response delivers." .
+apeng:referredTo a owl:ObjectProperty ; rdfs:domain apeng:EngagementResponse ; rdfs:range apdisc:Offering ;
+    rdfs:label "referred to" ; rdfs:comment "Where a referral points. A decline that names a better fit is more useful than silence — but a referral is NEW DISCOVERY EVIDENCE: re-resolve, re-qualify, own engagement. Never followed automatically." .
+apeng:evaluationFor a owl:ObjectProperty ; rdfs:domain apeng:EngagementEvaluationTask ; rdfs:range apeng:EngagementProbe ;
+    rdfs:label "evaluation for" ; rdfs:comment "The probe under evaluation." .
+apeng:producesResponse a owl:ObjectProperty ; rdfs:subPropertyOf prov:generated ; rdfs:domain apeng:EngagementEvaluationTask ; rdfs:range apeng:EngagementResponse ;
+    rdfs:label "produces response" ; rdfs:comment "The terminal artifact. A decline here is a SUCCESSFUL completion." .
+
+# ─── Properties: offer + acceptance ──────────────────────────────────────────────────────────────
+
+apeng:offeredBy a owl:ObjectProperty ; rdfs:subPropertyOf prov:wasAttributedTo ; rdfs:domain apeng:Offer ; rdfs:range ap:Agent ;
+    rdfs:label "offered by" ; rdfs:comment "The party committing — the SA whose signature the offer carries. Seller on a listing, buyer on a bid: the class is direction-neutral; the participants are explicit." .
+apeng:offerAgainstOffering a owl:ObjectProperty ; rdfs:domain apeng:FulfillmentOffer ; rdfs:range apdisc:Offering ;
+    rdfs:label "offer against offering" ; rdfs:comment "The standing offering this concrete offer instantiates." .
+apeng:basisOfOffer a owl:ObjectProperty ; rdfs:domain apeng:FulfillmentOffer ; rdfs:range apeng:IntentProjection ;
+    rdfs:label "basis of offer" ; rdfs:comment "THE PROJECTION THE PROVIDER ACTUALLY REVIEWED — the normative basis of the commitment. The offer may also cite the intent's id, version and digest, but that does NOT mean the provider saw the intent's full contents: it was shown this, and it is bound to this." .
+apeng:offerForIntentDigest a owl:DatatypeProperty ; rdfs:domain apeng:FulfillmentOffer ; rdfs:range xsd:string ;
+    rdfs:label "offer for intent digest" ; rdfs:comment "The intent digest this offer is against. A DIGEST, so an offer cannot silently follow a materially changed intent." .
+apeng:offerRequiredInput a owl:DatatypeProperty ; rdfs:domain apeng:FulfillmentOffer ; rdfs:range xsd:string ;
+    rdfs:label "offer required input" ; rdfs:comment "What the provider needs disclosed to proceed — the fields the projection withheld, now NAMED so the mandate can authorize exactly them and no more." .
+apeng:offerRequiresMandate a owl:ObjectProperty ; rdfs:domain apeng:Offer ; rdfs:range apeng:MandateRequirement ;
+    rdfs:label "offer requires mandate" ; rdfs:comment "The authority the maker needs before it will act — the hinge into the mandate seam. A StandingOffer states this too (AP2's human-not-present flow: the requirement is public; the authority never is)." .
+apeng:offerExpiry a owl:DatatypeProperty ; rdfs:domain apeng:Offer ; rdfs:range xsd:dateTime ;
+    rdfs:label "offer expiry" ; rdfs:comment "When the commitment lapses. Required on BOTH arenas: an unexpiring standing offer is an unbounded liability, not a price list." .
+apeng:offerRevision a owl:DatatypeProperty ; rdfs:domain apeng:Offer ; rdfs:range xsd:integer ;
+    rdfs:label "offer revision" ; rdfs:comment "Issued offers are IMMUTABLE; a change increments this on a new offer that supersedes the old. A Dutch auction is nothing but this property applied to a StandingOffer on a schedule." .
+apeng:composesOffer a owl:ObjectProperty ; rdfs:domain apeng:FulfillmentOffer ; rdfs:range apeng:StandingOffer ;
+    rdfs:label "composes offer" ; rdfs:comment "THE CART EDGE (spec 337 §2.1): a standing per-item offer this intent-bound offer assembles. Composition cannot smuggle terms — the composing offer's digest covers the composed set, and a line cannot silently differ from the standing terms it cites." .
+apeng:supersedes a owl:ObjectProperty ;
+    rdfs:label "supersedes" ; rdfs:comment "Revision chaining for offers, mandates and intent versions — the append-only alternative to mutation." .
+apeng:acceptsOffer a owl:ObjectProperty ; rdfs:domain apeng:OfferAcceptance ; rdfs:range apeng:Offer ;
+    rdfs:label "accepts offer" ; rdfs:comment "The one offer accepted — per-intent or standing (a fixed-price purchase is an acceptance of a StandingOffer)." .
+apeng:acceptedOfferDigest a owl:DatatypeProperty ; rdfs:domain apeng:OfferAcceptance ; rdfs:range xsd:string ;
+    rdfs:label "accepted offer digest" ; rdfs:comment "Pins the exact REVISION accepted, so an acceptance cannot quietly attach to a revised offer — and a superseded (repriced) standing offer cannot be filled at the old price by replay." .
+apeng:selectionChose a owl:ObjectProperty ; rdfs:domain apeng:OfferSelection ; rdfs:range apeng:Offer ;
+    rdfs:label "selection chose" ; rdfs:comment "The winning offer." .
+apeng:selectionRejected a owl:ObjectProperty ; rdfs:domain apeng:OfferSelection ; rdfs:range apeng:Offer ;
+    rdfs:label "selection rejected" ; rdfs:comment "An offer that lost. Recorded, so a comparison can be reviewed rather than taken on trust." .
+apeng:selectionReason a owl:DatatypeProperty ; rdfs:domain apeng:OfferSelection ; rdfs:range xsd:string ;
+    rdfs:label "selection reason" ; rdfs:comment "Why this one won." .
+
+# ─── Properties: the authority seam ──────────────────────────────────────────────────────────────
+
+apeng:requirementForOffer a owl:ObjectProperty ; rdfs:domain apeng:MandateRequirement ; rdfs:range apeng:Offer ;
+    rdfs:label "requirement for offer" ; rdfs:comment "The offer whose terms this authority is scoped to." .
+apeng:authorizationDetailType a owl:DatatypeProperty ; rdfs:domain apeng:MandateRequirement ; rdfs:range xsd:anyURI ;
+    rdfs:label "authorization detail type" ; rdfs:comment "Collision-resistant authorization-detail type per RFC 9396 (OAuth RAR). No universal narrower-than algorithm exists — each type gets its own subset handler." .
+apeng:authorizesOffer a owl:ObjectProperty ; rdfs:domain apeng:Mandate ; rdfs:range apeng:Offer ;
+    rdfs:label "authorizes offer" ; rdfs:comment "THE SEAM: the mandate by which the principal accepts this offer — a quoted FulfillmentOffer or a marketplace StandingOffer alike. Maker commits, principal authorizes — two parties, two artifacts, and the mandate is what turns an offer into work. In an auction the campaign owner never gains authority over participants: each buyer's own principal mandates its own payment." .
+apeng:derivedFromDelegation a owl:ObjectProperty ; rdfs:domain apeng:Mandate ; rdfs:range apdel:Delegation ;
+    rdfs:label "derived from delegation" ; rdfs:comment "The standing grant this mandate projects. A mandate can never exceed it." .
+apeng:bindsIntentDigest a owl:DatatypeProperty ; rdfs:domain apeng:Mandate ; rdfs:range xsd:string ;
+    rdfs:label "binds intent digest" ; rdfs:comment "The single intent version this mandate authorizes. The binding is what stops replay against another intent — a materially changed intent mints a SUCCESSOR mandate." .
+apeng:mandateExpiry a owl:DatatypeProperty ; rdfs:domain apeng:Mandate ; rdfs:range xsd:dateTime ;
+    rdfs:label "mandate expiry" ; rdfs:comment "When the authority lapses regardless of use." .
+apeng:derivedFromMandate a owl:ObjectProperty ; rdfs:domain apeng:ExecutionCredential ; rdfs:range apeng:Mandate ;
+    rdfs:label "derived from mandate" ; rdfs:comment "The authority this wire credential attenuates. Narrower always, wider never." .
+apeng:credentialExpiry a owl:DatatypeProperty ; rdfs:domain apeng:ExecutionCredential ; rdfs:range xsd:dateTime ;
+    rdfs:label "credential expiry" ; rdfs:comment "Long before the mandate's — the leak-survivability separation." .
+
+# ─── Properties: receipt ─────────────────────────────────────────────────────────────────────────
+
+apeng:receiptForMandate a owl:ObjectProperty ; rdfs:domain apeng:FulfillmentReceipt ; rdfs:range apeng:Mandate ;
+    rdfs:label "receipt for mandate" ; rdfs:comment "The authority the evidenced work ran under." .
+apeng:receiptForIntentDigest a owl:DatatypeProperty ; rdfs:domain apeng:FulfillmentReceipt ; rdfs:range xsd:string ;
+    rdfs:label "receipt for intent digest" ; rdfs:comment "The intent version the work satisfied — by digest, checkable against the mandate's binding." .
+apeng:receiptForTask a owl:ObjectProperty ; rdfs:domain apeng:FulfillmentReceipt ; rdfs:range apful:Task ;
+    rdfs:label "receipt for task" ; rdfs:comment "The fulfillment task evidenced." .
+apeng:receiptOutcomeStatus a owl:DatatypeProperty ; rdfs:domain apeng:FulfillmentReceipt ; rdfs:range xsd:string ;
+    rdfs:label "receipt outcome status" ; rdfs:comment "What the executing party attests happened. Attestation, not independent correctness." .
+apeng:receiptEvidence a owl:ObjectProperty ; rdfs:domain apeng:FulfillmentReceipt ; rdfs:range prov:Entity ;
+    rdfs:label "receipt evidence" ; rdfs:comment "Artifacts, traces or attestations the receipt cites." .
+apeng:receiptTimestamp a owl:DatatypeProperty ; rdfs:domain apeng:FulfillmentReceipt ; rdfs:range xsd:dateTime ;
+    rdfs:label "receipt timestamp" ; rdfs:comment "When the evidenced outcome was attested." .
+
+# ─── Participants: the caller is not the principal ──────────────────────────────────────────────
+
+apeng:requestingPrincipal a owl:ObjectProperty ; rdfs:range ap:Agent ;
+    rdfs:label "requesting principal" ; rdfs:comment "Whose intent this is. THE AUTHENTICATED CALLER IS USUALLY THE FACILITATOR, NOT THIS PARTY — a transport role says which side sent a message, never who the work is for." .
+apeng:facilitatorAgent a owl:ObjectProperty ; rdfs:range ap:Agent ;
+    rdfs:label "facilitator agent" ; rdfs:comment "The resolver/broker acting on the principal's behalf (FIPA Brokering lineage)." .
+apeng:candidateProvider a owl:ObjectProperty ; rdfs:range ap:Agent ;
+    rdfs:label "candidate provider" ; rdfs:comment "The organization being engaged." .
+apeng:providerAgent a owl:ObjectProperty ; rdfs:range ap:Agent ;
+    rdfs:label "provider agent" ; rdfs:comment "The provider's agent that answers — often not the provider itself." .

package/tbox/intents.ttl

@@ -43,12 +43,12 @@ apint:ResourceExchangeIntent a owl:Class ;
 apint:GiveIntent a owl:Class ;
     rdfs:subClassOf apint:ResourceExchangeIntent ;
     rdfs:label "GiveIntent" ;
-    rdfs:comment "ResourceExchangeIntent with direction='give'." .
+    rdfs:comment "ResourceExchangeIntent with direction='give'. Direction is ONE OF THE TWO FLIPS of the two-flip principle (spec 337 §1.1): a seller's auction is a GiveIntent-side campaign, a buyer's shopping goal is ReceiveIntent-side — same algebra, direction as data. Never mint direction-specific classes downstream of these two." .
 
 apint:ReceiveIntent a owl:Class ;
     rdfs:subClassOf apint:ResourceExchangeIntent ;
     rdfs:label "ReceiveIntent" ;
-    rdfs:comment "ResourceExchangeIntent with direction='receive'." .
+    rdfs:comment "ResourceExchangeIntent with direction='receive'. See apint:GiveIntent — direction is data (two-flip principle, spec 337 §1.1)." .
 
 apint:ActionIntent a owl:Class ;
     rdfs:subClassOf apint:Intent ;