@agenticprimitives/ontology 1.0.0-alpha.21 → 1.0.0-alpha.23

package/tbox/naming.ttl

@@ -0,0 +1,114 @@
+# T-box — typed agent naming (spec 346 §3, §11; ADR-0061).
+#
+# The name class itself (apnam:NameFacet ⊑ ap:Facet — a resolvable name that points AT an Agent and is
+# never the sole authority, ADR-0006) stays in tbox/identity.ttl with the other facets. This module adds
+# what typed naming needs on top of it:
+#
+#   apnam:tld                       the canonical suffix — NAMES the derived type (.me .org .team .svc
+#                                   .workspace .treasury .registry); a CLAIM checked against the SA's
+#                                   on-chain ap:agentType record, never authority and never structure
+#   apnam:ContextualNameIssuance    a name issued BY a context (org / team / workspace agent) in its own
+#                                   namespace, current only while its basis delegation is live
+#   apnam:ContextualAgentReference  a resolved `x@ctx` — a REFERENCE composing the canonical subject
+#                                   with an actor context, a role assignment and the live delegation;
+#                                   never an agent, never a second identity
+#
+# What a suffix is NOT (ADR-0061 §3): the inheritance structure, a root, a role, a technology. Resolution
+# maps suffix → derived type → root; `rpedersen.me@richcanvas.org` still resolves to a Person — the
+# `@richcanvas.org` is context, not classification.
+
+@prefix apnam:   <https://agenticprimitives.dev/ns/naming#> .
+@prefix ap:      <https://agenticprimitives.dev/ns/core#> .
+@prefix apdel:   <https://agenticprimitives.dev/ns/delegation#> .
+@prefix apactor: <https://agenticprimitives.dev/ns/actor#> .
+@prefix aporg:   <https://agenticprimitives.dev/ns/org#> .
+@prefix rdfs:    <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:     <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:     <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:    <http://www.w3.org/ns/prov#> .
+@prefix skos:    <http://www.w3.org/2004/02/skos/core#> .
+
+<https://agenticprimitives.dev/ns/naming> a owl:Ontology ;
+    rdfs:label "Agentic Primitives — typed agent naming (spec 346)" ;
+    owl:versionInfo "0.1.0" ;
+    rdfs:comment "Typed suffixes, contextual name issuance, contextual references. A name is a facet (ADR-0006/ADR-0010): decorative, resolvable, replaceable — never the identifier and never authority." .
+
+# ─── The typed suffix ────────────────────────────────────────────────────────
+
+apnam:tld a owl:DatatypeProperty ;
+    rdfs:domain apnam:NameFacet ;
+    rdfs:range xsd:string ;
+    rdfs:label "tld" ;
+    rdfs:comment "The canonical suffix; names the derived type — derivedTypeForTld. NEVER authority. Values are the prefLabels of apnam:tldScheme (cbox): me org team svc workspace treasury registry; 'ws' is an alias of 'workspace', never stored. Legacy roots (.agent, .impact) carry no tld and are exempt from apnam:TypedAgentNameShape." .
+
+apnam:namesDerivedType a owl:ObjectProperty ;
+    rdfs:domain skos:Concept ;
+    rdfs:range skos:Concept ;
+    rdfs:label "namesDerivedType" ;
+    rdfs:comment "apnam:tldScheme concept → ap:agentTypeScheme concept: the suffix→derived-type map the resolver applies and TypedAgentNameShape checks a name's target against. Fixed data, not a lookup any caller may widen." .
+
+# ─── Contextual issuance ─────────────────────────────────────────────────────
+
+apnam:ContextualNameIssuance a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ContextualNameIssuance" ;
+    rdfs:comment "A name issued by a context (org/team/workspace agent) in its namespace: kind scoped | reference; basis = a membership+delegation, an operatedBy delegation, or a charter mandate. Vault record; anchored on chain iff listing public." .
+
+apnam:issuedBy a owl:ObjectProperty ;
+    rdfs:domain apnam:ContextualNameIssuance ;
+    rdfs:range ap:Agent ;
+    rdfs:label "issuedBy" ;
+    rdfs:comment "The context that issued the name — an Organization (incl. Team) or a WorkspaceAgent (apnam:ContextualNameIssuanceShape)." .
+
+apnam:issuedFor a owl:ObjectProperty ;
+    rdfs:domain apnam:ContextualNameIssuance ;
+    rdfs:range ap:Agent ;
+    rdfs:label "issuedFor" ;
+    rdfs:comment "The canonical subject the contextual name refers to. Its own canonical name is untouched by the issuance." .
+
+apnam:issuanceBasis a owl:ObjectProperty ;
+    rdfs:domain apnam:ContextualNameIssuance ;
+    rdfs:range apdel:Delegation ;
+    rdfs:label "issuanceBasis" ;
+    rdfs:comment "The delegation whose liveness makes the name CURRENT. A reference, never a grant." .
+
+apnam:issuanceKind a owl:DatatypeProperty ;
+    rdfs:domain apnam:ContextualNameIssuance ;
+    rdfs:range xsd:string ;
+    rdfs:label "issuanceKind" ;
+    rdfs:comment "scoped | reference (spec 346 §3.2 — same syntax, one meaning). A 'reference' issuance names ANOTHER agent in the issuer's namespace, so issuedFor must differ from issuedBy." .
+
+apnam:issuedName a owl:DatatypeProperty ;
+    rdfs:domain apnam:ContextualNameIssuance ;
+    rdfs:range xsd:string ;
+    rdfs:label "issuedName" ;
+    rdfs:comment "The full contextual form as issued (e.g. rpedersen.me@richcanvas.org)." .
+
+# ─── The resolved contextual reference ───────────────────────────────────────
+
+apnam:ContextualAgentReference a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ContextualAgentReference" ;
+    rdfs:comment "A resolved x@ctx: canonical subject + apactor:ActorContext + aporg:RoleAssignment + the live delegation. A reference — never an agent, never an identity." .
+
+apnam:referenceSubject a owl:ObjectProperty ;
+    rdfs:domain apnam:ContextualAgentReference ;
+    rdfs:range ap:Agent ;
+    rdfs:label "referenceSubject" ;
+    rdfs:comment "The canonical Smart Agent the reference resolves to (ADR-0010)." .
+
+apnam:referenceContext a owl:ObjectProperty ;
+    rdfs:domain apnam:ContextualAgentReference ;
+    rdfs:range apactor:ActorContext ;
+    rdfs:label "referenceContext" .
+
+apnam:referenceRoleAssignment a owl:ObjectProperty ;
+    rdfs:domain apnam:ContextualAgentReference ;
+    rdfs:range aporg:RoleAssignment ;
+    rdfs:label "referenceRoleAssignment" .
+
+apnam:referenceBasis a owl:ObjectProperty ;
+    rdfs:domain apnam:ContextualAgentReference ;
+    rdfs:range apdel:Delegation ;
+    rdfs:label "referenceBasis" ;
+    rdfs:comment "The live delegation the reference resolves through. Revoke it and the reference deactivates; the canonical name is untouched (ADR-0061 §6)." .

package/tbox/org.ttl

@@ -1,5 +1,7 @@
-# T-box — organization membership, roles, enrollment (spec 324 §4–§8).
-# OrganizationMembership is a Situation — not a delegation, not a directory listing.
+# T-box — organization membership, roles, enrollment (spec 324 §4–§8); team affiliation, workspace,
+# responsibility (spec 344 §4.2). OrganizationMembership is a Situation — not a delegation, not a
+# directory listing. A Workspace is an ENTITY (a governed coordination plane) — never an agent, never a
+# tenant; its agentive face is the ap:WorkspaceAgent it is coordinatedBy (ADR-0061 §4).
 
 @prefix aporg: <https://agenticprimitives.dev/ns/org#> .
 @prefix apsit: <https://agenticprimitives.dev/ns/situation#> .
@@ -7,6 +9,8 @@
 @prefix apdel: <https://agenticprimitives.dev/ns/delegation#> .
 @prefix apent: <https://agenticprimitives.dev/ns/entitlement#> .
 @prefix apint: <https://agenticprimitives.dev/ns/intent#> .
+@prefix apmsg: <https://agenticprimitives.dev/ns/messaging#> .
+@prefix skos:  <http://www.w3.org/2004/02/skos/core#> .
 @prefix rdf:   <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
 @prefix rdfs:  <http://www.w3.org/2000/01/rdf-schema#> .
 @prefix owl:   <http://www.w3.org/2002/07/owl#> .
@@ -15,8 +19,8 @@
 
 aporg: a owl:Ontology ;
     rdfs:label "Agentic Primitives — organization ontology" ;
-    owl:versionInfo "0.2.0" ;
-    rdfs:comment "Membership, roles, enrollment instruments (spec 324). DirectoryListing remains in tbox/messaging.ttl for wire compat." .
+    owl:versionInfo "0.3.0" ;
+    rdfs:comment "Membership, roles, enrollment instruments (spec 324); team affiliation, workspaces (the governed coordination plane) and responsibilities (spec 344 §4.2). DirectoryListing remains in tbox/messaging.ttl for wire compat." .
 
 # ─── Membership ───────────────────────────────────────────────────────
 
@@ -120,3 +124,183 @@ aporg:AdmissionExclusion a owl:Class ;
 aporg:expressesJoinIntent a owl:ObjectProperty ;
     rdfs:domain aporg:MembershipApplication ; rdfs:range apint:JoinOrganizationIntent ;
     rdfs:label "expressesJoinIntent" .
+
+# ═══ spec 344 §4.2 — team affiliation, workspaces, responsibility ═════════
+
+# ─── Team affiliation (§1.2) ──────────────────────────────────────────
+
+aporg:TeamAffiliation a owl:Class ;
+    rdfs:subClassOf apsit:Situation ;
+    rdfs:comment """Private-by-default Situation: exactly one teamAgent + one affiliatedOrganization +
+      one affiliationKind under signed AffiliationDecision evidence. Informational — never authority.
+      Cross-org teams hold several 'chartered' affiliations (joint charter) or one from an Alliance.""" .
+
+aporg:teamAgent a owl:ObjectProperty ;
+    rdfs:domain aporg:TeamAffiliation ; rdfs:range ap:TeamAgent .
+aporg:affiliatedOrganization a owl:ObjectProperty ;
+    rdfs:domain aporg:TeamAffiliation ; rdfs:range ap:OrganizationAgent .
+aporg:affiliationKind a owl:ObjectProperty ;
+    rdfs:domain aporg:TeamAffiliation ; rdfs:range skos:Concept ;
+    rdfs:comment "aporg:affiliationKindScheme — chartered | engaged (cbox)." .
+aporg:mandatedByDelegation a owl:ObjectProperty ;
+    rdfs:domain aporg:TeamAffiliation ; rdfs:range apdel:Delegation ;
+    rdfs:comment """The chartering org's mandate — the delegation org→team that MATERIALIZES what the
+      affiliation only evidences. The gate verifies the delegation, never this record.""" .
+
+aporg:AffiliationProposal a owl:Class ; rdfs:subClassOf prov:Entity .
+aporg:AffiliationDecision a owl:Class ; rdfs:subClassOf prov:Entity ;
+    rdfs:comment """Signed accept/reject. Both stewards for 'engaged' and post-hoc 'chartered'; the
+      chartering steward alone when minted by the team-create ceremony itself.""" .
+aporg:AffiliationTermination a owl:Class ; rdfs:subClassOf prov:Entity ;
+    rdfs:comment "Either side, unilaterally. Ends currency; revokes nothing." .
+
+aporg:charteredBy a owl:ObjectProperty ;
+    rdfs:domain ap:TeamAgent ; rdfs:range ap:OrganizationAgent ;
+    rdfs:comment "DERIVED: current 'chartered' TeamAffiliation exists. Never asserted globally." .
+aporg:engagedWith a owl:ObjectProperty ;
+    rdfs:domain ap:TeamAgent ; rdfs:range ap:OrganizationAgent ;
+    rdfs:comment "DERIVED: current 'engaged' TeamAffiliation exists." .
+
+# ─── Boundary cases (§1.1, §1.4) ──────────────────────────────────────
+
+aporg:WorkingGroup a owl:Class ; rdfs:subClassOf prov:Entity ;
+    rdfs:comment """An informal named collection of agents — NOT an agent: no custody, no authority.
+      Promotable by chartering a TeamAgent (a creation ceremony, never a mutation).""" .
+
+aporg:InterorganizationalCollaborationArrangement a owl:Class ; rdfs:subClassOf prov:Entity ;
+    rdfs:comment """A loose partnership among organizations. Becomes ap:AllianceAgent only when real
+      joint authority is delegated.""" .
+
+# ─── Workspace: the coordination plane (§2) ───────────────────────────
+
+aporg:Workspace a owl:Class ; rdfs:subClassOf prov:Entity ;
+    rdfs:comment """A persistent, governed, purpose-bound coordination plane binding participant
+      agents, roles, responsibilities, policies, app/agent/resource bindings and representations.
+      NOT an agent, NOT a tenant: no custody, no address, no authority of its own. Governance
+      inherited from its governor; records in the governor's vault (ADR-0055). Several apps may
+      bind to ONE workspace — none of them recreates the org, team, roles, or domain context.""" .
+
+aporg:governedBy a owl:ObjectProperty ;
+    rdfs:domain aporg:Workspace ; rdfs:range ap:OrganizationAgent ;
+    rdfs:comment """Exactly one governing agent (org, team, or alliance). Source of every policy the
+      workspace has. Switching workspace = switching authority/policy/disclosure/audit context.""" .
+aporg:workspacePurpose a owl:DatatypeProperty ;
+    rdfs:domain aporg:Workspace ; rdfs:range xsd:string .
+aporg:workspaceProfile a owl:ObjectProperty ;
+    rdfs:domain aporg:Workspace ; rdfs:range skos:Concept ;
+    rdfs:comment """aporg:workspaceProfileScheme. One primary profile; apps declare which profiles
+      they support and the catalog matches on it.""" .
+aporg:focusedOn a owl:ObjectProperty ;
+    rdfs:domain aporg:Workspace ;
+    rdfs:comment """What the collaboration is ABOUT (a field, an initiative — domain profiles narrow
+      the range). The focus is not the workspace (review §12: a community or engagement within a
+      workspace is not another workspace).""" .
+aporg:workspaceParticipationPolicy a owl:ObjectProperty ;
+    rdfs:domain aporg:Workspace ; rdfs:range skos:Concept ;
+    rdfs:comment """open (derived from the governor's membership — never asserted) | restricted
+      (asserted WorkspaceParticipation records).""" .
+
+# Agents layer (§2.1)
+aporg:WorkspaceParticipation a owl:Class ; rdfs:subClassOf apsit:Situation ;
+    rdfs:comment """Asserted participation in a RESTRICTED workspace: exactly one participantAgent
+      (ANY agent kind) + one inWorkspace, by invitation → accept. An org/team participant projects
+      its people in through its own live roster — never copied (the 341 §5.1c resolution pattern;
+      Gather27's GatherHost is this record).""" .
+aporg:participantAgent a owl:ObjectProperty ;
+    rdfs:domain aporg:WorkspaceParticipation ; rdfs:range ap:Agent .
+aporg:inWorkspace a owl:ObjectProperty ;
+    rdfs:domain aporg:WorkspaceParticipation ; rdfs:range aporg:Workspace .
+
+aporg:coordinatedBy a owl:ObjectProperty ;
+    rdfs:domain aporg:Workspace ; rdfs:range ap:WorkspaceAgent ;
+    rdfs:comment """The ap:WorkspaceAgent: a service-kind SA the GOVERNOR delegates to (the
+      spec-327 assistant pattern, workspace-scoped). Provides the workspace's A2A/MCP surface —
+      projection publishing, notifications, audit. NEVER an independent source of authority:
+      revoke the governor's delegation and it is inert. Range narrowed from ap:ServiceAgent to
+      ap:WorkspaceAgent by spec 346 §2.2 — the workspace agent is the derived type the
+      '.workspace' suffix names.""" .
+
+aporg:coordinatesWorkspace a owl:ObjectProperty ;
+    rdfs:domain ap:WorkspaceAgent ; rdfs:range aporg:Workspace ;
+    owl:inverseOf aporg:coordinatedBy ;
+    rdfs:comment """The workspace context this workspace agent custodies and serves. At most one. The
+      NAME binds to the workspace agent SA (the workspace's agentive face); the context is a governed
+      Entity in the governor's vault (spec 344 §5) and is never itself named.""" .
+
+aporg:boundAgent a owl:ObjectProperty ;
+    rdfs:domain aporg:Workspace ; rdfs:range ap:Agent ;
+    rdfs:comment """A specialized domain agent bound into the workspace. The binding must reference
+      which principal it represents (mandate), which responsibility it supports (assignment), and
+      which data it may access (grants) — three references, never new authority.""" .
+
+# Entities layer (§2.2)
+aporg:WorkspaceRepresentation a owl:Class ; rdfs:subClassOf prov:Entity ;
+    rdfs:comment """A workspace-scoped, policy-bounded PROJECTION of a domain entity whose
+      authoritative record stays in its custodian's vault. Conventional SaaS: record belongs to
+      tenant. Here: entity exists independently; custodian controls the record; the workspace
+      receives an authorized representation that can expire or be revoked without the record ever
+      moving. Crosswalk: at:DataProjection under an at:DataCovenant; decision record precedent:
+      eng:ProjectionManifest (field-domain). NORMATIVE FLOOR: absence of a policy is never public —
+      an unclassified representation fails closed.""" .
+
+aporg:represents a owl:ObjectProperty ;
+    rdfs:domain aporg:WorkspaceRepresentation ;
+    rdfs:comment "The domain entity represented. Range open — domain profiles narrow it." .
+aporg:representationOfWorkspace a owl:ObjectProperty ;
+    rdfs:domain aporg:WorkspaceRepresentation ; rdfs:range aporg:Workspace .
+aporg:sourceCustodian a owl:ObjectProperty ;
+    rdfs:domain aporg:WorkspaceRepresentation ; rdfs:range ap:Agent ;
+    rdfs:comment "Whose vault holds the authoritative record. Custody NEVER moves." .
+aporg:localLabel a owl:DatatypeProperty ;
+    rdfs:domain aporg:WorkspaceRepresentation ; rdfs:range xsd:string ;
+    rdfs:comment "How THIS workspace knows the entity — the org-local-name pattern generalized." .
+aporg:sharingPolicy a owl:ObjectProperty ;
+    rdfs:domain aporg:WorkspaceRepresentation ; rdfs:range skos:Concept ;
+    rdfs:comment """Disclosure bound on the representation (sensitivity / precision caps — domain
+      packs supply the scheme, e.g. eng: sensitivity L0–L5 + gc: location precision).""" .
+aporg:representationValidUntil a owl:DatatypeProperty ;
+    rdfs:domain aporg:WorkspaceRepresentation ; rdfs:range xsd:dateTime .
+
+aporg:adoptedResource a owl:ObjectProperty ;
+    rdfs:domain aporg:Workspace ;
+    rdfs:comment """A versioned external resource the workspace adopts for its purpose (the resource
+      fabric: provider publishes → HOME discovers/licenses → WORKSPACE adopts a version → APP
+      renders). A representation whose source is a provider, not a participant vault.""" .
+
+# App bindings (§2.4)
+aporg:boundApp a owl:ObjectProperty ;
+    rdfs:domain aporg:Workspace ;
+    rdfs:comment """An application (OIDC client) bound into this workspace. PROJECTION ONLY — the
+      app's reads still ride its own per-app read grants (spec 341 §4.3); binding grants nothing,
+      unbinding revokes nothing but presence. Several apps per workspace is the point (§2.4).""" .
+
+apmsg:hostedInWorkspace a owl:ObjectProperty ;
+    rdfs:domain apmsg:DiscussionTopic ; rdfs:range aporg:Workspace ;
+    rdfs:comment """A topic MAY be hosted in one workspace of the same governor. Absent = the
+      org-wide board (today's behavior, unchanged).""" .
+
+# ─── Responsibility (§1.5) ────────────────────────────────────────────
+
+aporg:ResponsibilityAssignment a owl:Class ; rdfs:subClassOf apsit:Situation ;
+    rdfs:comment """A time-scoped, visible commitment: an agent is expected to care for an outcome or
+      resource within a scope, under named authority and accountability. NEVER an authorization.
+      More durable than an app task: one responsibility → many work items → many apps; survives
+      app replacement. Five questions, five concepts (spec 344 §1.5).""" .
+
+aporg:responsibleAgent a owl:ObjectProperty ;
+    rdfs:domain aporg:ResponsibilityAssignment ; rdfs:range ap:Agent .
+aporg:accountableAgent a owl:ObjectProperty ;
+    rdfs:domain aporg:ResponsibilityAssignment ; rdfs:range ap:Agent ;
+    rdfs:comment "Who answers for the result. MAY differ from responsibleAgent." .
+aporg:responsibilityKind a owl:ObjectProperty ;
+    rdfs:domain aporg:ResponsibilityAssignment ; rdfs:range skos:Concept .
+aporg:responsibilityScope a owl:ObjectProperty ;
+    rdfs:domain aporg:ResponsibilityAssignment ;
+    rdfs:comment "A workspace, team, engagement, record family — domain profiles narrow the range." .
+aporg:underMandate a owl:ObjectProperty ;
+    rdfs:domain aporg:ResponsibilityAssignment ; rdfs:range apdel:Delegation ;
+    rdfs:comment "The authority the responsible agent exercises — a reference, not a grant." .
+aporg:expectedOutcome a owl:DatatypeProperty ;
+    rdfs:domain aporg:ResponsibilityAssignment ; rdfs:range xsd:string .
+aporg:reviewCadenceDays a owl:DatatypeProperty ;
+    rdfs:domain aporg:ResponsibilityAssignment ; rdfs:range xsd:integer .

package/tbox/profile.ttl

@@ -91,6 +91,13 @@ approf:focusAreas a owl:DatatypeProperty ;
   apctx:classifiedBy apctx:KnowledgeDomain ;
   rdfs:comment "atl:focusAreas (facet-registries G4). VALUE SPACE: comma-separated subject-domain labels, lowercase-hyphenated, e.g. 'modelo-720,forced-heirship'. Maps to the apctx:KnowledgeDomain facet so it stays ORTHOGONAL to capability identity — a focus area is a subject, never a declared capability (ADR-0051). RANKING ROLE: fitScore boost ONLY, capped hardest of the three. It must NEVER become a hard filter: a focus area is an emphasis, not a boundary, and an agent that has not published one is UNKNOWN, not absent." .
 
+# ─── spec 347 §8.5 — how to obtain and run the agent's software ──────────────
+
+approf:distribution a owl:DatatypeProperty ;
+  rdfs:domain approf:AgentProfile ; rdfs:range xsd:string ;
+  rdfs:label "distribution" ;
+  rdfs:comment "atl:distribution (spec 347 §8.5; docs/architecture/ard-acp-crosswalk.md §2–§3). A JSON literal per agent-profile `AgentDistributionV1` (JCS-canonical): `acp?` (Agent Client Protocol conformance — the eligibility flag for a hosted ACP registry.json projection), `version?` (implementation semver), `npx`/`uvx` { package, args?, env? }, `binary` { <platform>: { archive, cmd, sha256?, args?, env? } } with the six ACP platform keys. Field names mirror the ACP registry agent.schema.json so a registry file is a COPY of this fact, never a translation. SA-keyed (survives a rename, exists for nameless agents), written only by the agent itself. PUBLIC and on-chain-derivable (ADR-0040): the KB carries the string exactly as written on chain; a consumer parses it fail-closed (an unparsable literal is `null`, never a guess — ADR-0013). It describes distribution ONLY — it is not a capability claim, not a trust signal, and grants nothing." .
+
 # ─── The value-space anchors these three point at ───────────────────────────
 
 approf:regionVocabulary a owl:AnnotationProperty ;

package/tbox/prov-imports.ttl

@@ -0,0 +1,65 @@
+# T-box — the W3C PROV-O terms this substrate EMITS, declared (spec 389).
+#
+# ── Why a file that declares someone else's vocabulary ───────────────────────────────────────────
+# PROV-O is a W3C Recommendation and its terms mean what the Recommendation says — nothing here
+# redefines one. They are declared here for the same reason plan.ttl declares the P-Plan terms it
+# uses: the build's ontology-bindings gate (`check:ontology-bindings`) and the SHACL shapes need every
+# IRI a record binds to to be DECLARED somewhere in tbox/, or they cannot tell an imported standard
+# term from a typo. A run's provenance record (`run.provenance:<runRef>`) binds its fields to these
+# by IRI (`src/vault-records.ts`), and the run-provenance JSON-LD context maps its terms onto them.
+#
+# The list is exactly what the provenance projector emits (packages/provenance): the PROV core
+# classes, the qualified association, and the direct relations. Nothing is declared that nothing
+# emits — a term added here should be a term a record carries.
+#
+# Domains and ranges are omitted: PROV-O's own axioms govern, and restating them here would let the
+# two drift.
+
+@prefix prov: <http://www.w3.org/ns/prov#> .
+@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:  <http://www.w3.org/2002/07/owl#> .
+
+<https://agenticprimitives.dev/ns/prov-imports> a owl:Ontology ;
+    rdfs:label "Agentic Primitives — PROV-O terms in use" ;
+    owl:versionInfo "0.1.0" ;
+    rdfs:comment "Declarations of the W3C PROV-O terms the substrate's provenance records carry, so bindings and shapes can target them. Spec 389; spec 316 §6." .
+
+# ═══ Core classes ═══
+
+prov:Entity a owl:Class ; rdfs:label "Entity (PROV-O)" .
+prov:Activity a owl:Class ; rdfs:label "Activity (PROV-O)" .
+prov:Agent a owl:Class ; rdfs:label "Agent (PROV-O)" .
+prov:SoftwareAgent a owl:Class ; rdfs:subClassOf prov:Agent ; rdfs:label "SoftwareAgent (PROV-O)" .
+prov:Person a owl:Class ; rdfs:subClassOf prov:Agent ; rdfs:label "Person (PROV-O)" .
+prov:Organization a owl:Class ; rdfs:subClassOf prov:Agent ; rdfs:label "Organization (PROV-O)" .
+prov:Bundle a owl:Class ; rdfs:subClassOf prov:Entity ; rdfs:label "Bundle (PROV-O)" ;
+    rdfs:comment "A named set of provenance descriptions. One harness run = one bundle (an ep-plan:ExecutionTraceBundle, plan.ttl); a routed run's bundle prov:wasInformedBy the sender's." .
+prov:Plan a owl:Class ; rdfs:subClassOf prov:Entity ; rdfs:label "Plan (PROV-O)" .
+prov:Role a owl:Class ; rdfs:label "Role (PROV-O)" .
+prov:Association a owl:Class ; rdfs:label "Association (PROV-O)" ;
+    rdfs:comment "The qualified form of wasAssociatedWith: which agent, under which plan (prov:hadPlan), in which capacity (prov:hadRole). A run carries two — the runtime under the run's ExecutionPlan, the agent under its playbook." .
+
+# ═══ Direct relations ═══
+
+prov:startedAtTime a owl:DatatypeProperty ; rdfs:label "startedAtTime (PROV-O)" .
+prov:endedAtTime a owl:DatatypeProperty ; rdfs:label "endedAtTime (PROV-O)" .
+prov:wasAssociatedWith a owl:ObjectProperty ; rdfs:label "wasAssociatedWith (PROV-O)" .
+prov:actedOnBehalfOf a owl:ObjectProperty ; rdfs:label "actedOnBehalfOf (PROV-O)" ;
+    rdfs:comment "PRIVATE DETAIL in this substrate: the S1 firewall (provenance/firewall.ts) rejects it from any public row (ADR-0040)." .
+prov:wasAttributedTo a owl:ObjectProperty ; rdfs:label "wasAttributedTo (PROV-O)" .
+prov:used a owl:ObjectProperty ; rdfs:label "used (PROV-O)" ;
+    rdfs:comment "What an activity consumed. For a harness step: every delegation in its verified chain, BY REFERENCE (apvr:usedDelegation ⊑ prov:used names the one it presented)." .
+prov:generated a owl:ObjectProperty ; rdfs:label "generated (PROV-O)" .
+prov:wasGeneratedBy a owl:ObjectProperty ; rdfs:label "wasGeneratedBy (PROV-O)" .
+prov:wasInformedBy a owl:ObjectProperty ; rdfs:label "wasInformedBy (PROV-O)" ;
+    rdfs:comment "Activity-to-activity communication. A routed run's root activity wasInformedBy the sender's; a hand-off step wasInformedBy the child run. NOT containment — apexec:hasStep is (execution.ttl)." .
+prov:wasDerivedFrom a owl:ObjectProperty ; rdfs:label "wasDerivedFrom (PROV-O)" .
+prov:wasRevisionOf a owl:ObjectProperty ; rdfs:subPropertyOf prov:wasDerivedFrom ; rdfs:label "wasRevisionOf (PROV-O)" .
+
+# ═══ The qualified association ═══
+
+prov:qualifiedAssociation a owl:ObjectProperty ; rdfs:label "qualifiedAssociation (PROV-O)" .
+prov:agent a owl:ObjectProperty ; rdfs:label "agent (PROV-O)" .
+prov:hadPlan a owl:ObjectProperty ; rdfs:label "hadPlan (PROV-O)" ;
+    rdfs:comment "The plan an association followed. A plan is never authority (plan.ttl): a run's hadPlan says which playbook version shaped it, and no gate reads it." .
+prov:hadRole a owl:ObjectProperty ; rdfs:label "hadRole (PROV-O)" .

package/tbox/registry.ttl

@@ -2,6 +2,8 @@
 # Grounded in PROV-O and DOLCE+DnS/DUL; informed by Agent Explorer's
 # erc8004.ttl, discovery.ttl, descriptors.ttl, trust.ttl, hol.ttl, and oasf.ttl
 # modules, but expressed as AP-native Ring 0 vocabulary.
+# spec 346 §7/§11 added the registry INSTANCE + its operating ap:RegistryAgent, the admission
+# RegistrationReceipt, the hash-chained lifecycle log + LogCheckpoint, and the derived entryStatus.
 
 @prefix ap:      <https://agenticprimitives.dev/ns/core#> .
 @prefix approf:  <https://agenticprimitives.dev/ns/profile#> .
@@ -18,7 +20,7 @@
 
 apreg: a owl:Ontology ;
   rdfs:label "Agentic Primitives — registry kit ontology" ;
-  owl:versionInfo "0.1.0" ;
+  owl:versionInfo "0.2.0" ;
   rdfs:seeAlso <https://github.com/agentictrustlabs/agent-explorer/tree/main/apps/ontology/ontology> ;
   rdfs:comment "AP-native registry-building vocabulary. External registries are projection surfaces; this vocabulary defines Smart-Agent-anchored entries, binding proofs, claim slots, and lifecycle evidence." .
 
@@ -47,7 +49,7 @@ apreg:RegistryClaimSlot a owl:Class ;
 apreg:RegistryLifecycleEvent a owl:Class ;
   rdfs:subClassOf prov:Activity ;
   rdfs:label "RegistryLifecycleEvent" ;
-  rdfs:comment "A register, renew, suspend, revoke, expire, or claim-update activity emitted by a registry contract and projected into the A-box." .
+  rdfs:comment "One event in a registry's APPEND-ONLY, hash-chained lifecycle log (spec 346 §7.3 RegistryLifecycleEventV1): eventKind from apreg:lifecycleEventScheme, eventSequence strictly increasing per registry, eventDigest, previousEventDigest for every event after the first. The on-chain AgentRegistryBase events (register, renew, suspend, revoke, expire, claim-update) remain the PUBLIC lifecycle facts and are projected into the KB; the log adds the off-chain evidence chain (receipts, revalidations, private issuances by digest only) plus a LogCheckpoint anchor. The log's home is the operator's vault or DO (a rebuild, not a bereavement — ADR-0055), never the public KB." .
 
 apreg:RegistryMembershipPolicy a owl:Class ;
   rdfs:subClassOf dul:Description ;
@@ -77,10 +79,9 @@ apreg:entryId a owl:DatatypeProperty ;
   rdfs:label "entryId" .
 
 apreg:subjectAgent a owl:ObjectProperty ;
-  rdfs:domain apreg:RegistryEntry ;
   rdfs:range ap:Agent ;
   rdfs:label "subjectAgent" ;
-  rdfs:comment "The canonical Smart Agent that this registry entry points at." .
+  rdfs:comment "The canonical Smart Agent a registry record points at. Used by RegistryEntry, RegistrationReceipt and RegistryLifecycleEvent alike (spec 346 §7), so the domain is left open — the per-class shapes pin cardinality." .
 
 apreg:hasBindingProof a owl:ObjectProperty ;
   rdfs:domain apreg:RegistryEntry ;
@@ -225,3 +226,157 @@ apreg:expired a apreg:RegistryLifecycleStatus ;
 
 apreg:pending a apreg:RegistryLifecycleStatus ;
   skos:prefLabel "pending" .
+
+# ═══ spec 346 §7 / §11 — registry instance, operator, receipts, lifecycle log ═══
+
+# ─── The registry instance and its operator ────────────────────────────
+
+apreg:Registry a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "Registry" ;
+  rdfs:comment "A kit-built registry INSTANCE (spec 279; ADR-0038): an SA-anchored registry contract plus the RegistryKitProfile that describes it. An Entity, never an agent — operated by exactly one ap:RegistryAgent (apreg:operatedBy) whose '.registry' name is the registry's agentive face, exactly as a WorkspaceAgent is a Workspace's (ADR-0061 §4). Vertical registries are external consumers of the kit; this class is what they are built FROM." .
+
+apreg:describedByProfile a owl:ObjectProperty ;
+  rdfs:domain apreg:Registry ;
+  rdfs:range apreg:RegistryKitProfile ;
+  rdfs:label "describedByProfile" .
+
+apreg:operatesRegistry a owl:ObjectProperty ;
+  rdfs:domain ap:RegistryAgent ;
+  rdfs:range apreg:Registry ;
+  owl:inverseOf apreg:operatedBy ;
+  rdfs:label "operatesRegistry" ;
+  rdfs:comment "Exactly one (ap:RegistryAgentShape). The operator SA admits entries, signs receipts, appends the lifecycle log and serves the discovery surface — under its OWN custody policy. Operating a registry grants it nothing over the subjects it lists; an entry is evidence, never authority." .
+
+apreg:operatedBy a owl:ObjectProperty ;
+  rdfs:domain apreg:Registry ;
+  rdfs:range ap:RegistryAgent ;
+  owl:inverseOf apreg:operatesRegistry ;
+  rdfs:label "operatedBy" .
+
+apreg:inRegistry a owl:ObjectProperty ;
+  rdfs:range apreg:Registry ;
+  rdfs:label "inRegistry" ;
+  rdfs:comment "The registry a RegistryEntry, RegistrationReceipt, RegistryLifecycleEvent or LogCheckpoint belongs to — apreg:registryId as a node rather than a string." .
+
+# ─── Registration receipt (§7.2) ───────────────────────────────────────
+
+apreg:RegistrationReceipt a owl:Class ;
+  rdfs:subClassOf prov:Entity , ap:Evidence ;
+  rdfs:label "RegistrationReceipt" ;
+  rdfs:comment "RegistrationReceiptV1: what the registry operator VERIFIED, what FAILED, and what was NOT VERIFIED (not-attempted / unavailable / policy-skipped — a first-class outcome, never silently equal to verified) when admitting an entry, each line against an artifact digest. Signed by the operator SA (receiptSigner). EVIDENCE, never authority (ADR-0020): the object an external registry (ARD, 8004) can cite and a consumer shows as 'verified on <date> by <registry>'. Every AdmissionCheck appears in exactly one of the three lists (apreg:RegistrationReceiptShape)." .
+
+apreg:verifiedCheck a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range skos:Concept ;
+  rdfs:label "verifiedCheck" ;
+  rdfs:comment "An apreg:admissionCheckScheme concept that PASSED, against an artifact digest." .
+
+apreg:failedCheck a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range skos:Concept ;
+  rdfs:label "failedCheck" ;
+  rdfs:comment "An apreg:admissionCheckScheme concept that FAILED, with a reason." .
+
+apreg:notVerifiedCheck a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range skos:Concept ;
+  rdfs:label "notVerifiedCheck" ;
+  rdfs:comment "An apreg:admissionCheckScheme concept that was NOT ATTEMPTED, unavailable, or policy-skipped. Recorded, never elided: 'not verified' must stay distinguishable from 'verified'." .
+
+apreg:receiptFor a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range apreg:RegistryEntry ;
+  rdfs:label "receiptFor" .
+
+apreg:subjectType a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range skos:Concept ;
+  rdfs:label "subjectType" ;
+  rdfs:comment "ap:agentTypeScheme — the DERIVED type the admission checked the subject's on-chain record and suffix against (spec 346 §2.3 invariant)." .
+
+apreg:admittedAt a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range xsd:dateTime ;
+  rdfs:label "admittedAt" .
+
+apreg:receiptSigner a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range ap:RegistryAgent ;
+  rdfs:label "receiptSigner" ;
+  rdfs:comment "The registry operator SA that signed the receipt (ERC-1271 or a delegated session key)." .
+
+apreg:receiptSignature a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range xsd:string ;
+  rdfs:label "receiptSignature" .
+
+# ─── Lifecycle log (§7.3) ──────────────────────────────────────────────
+
+apreg:eventKind a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryLifecycleEvent ;
+  rdfs:range skos:Concept ;
+  rdfs:label "eventKind" ;
+  rdfs:comment "apreg:lifecycleEventScheme (cbox/registry-vocabulary.ttl) — the §7.3 RegistryLifecycleEventKind union." .
+
+apreg:eventSequence a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryLifecycleEvent ;
+  rdfs:range xsd:nonNegativeInteger ;
+  rdfs:label "eventSequence" ;
+  rdfs:comment "Position in the registry's append-only log. Strictly increasing per registry; the first event is 0." .
+
+apreg:previousEventDigest a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryLifecycleEvent ;
+  rdfs:range xsd:string ;
+  rdfs:label "previousEventDigest" ;
+  rdfs:comment "Digest of the preceding event — the hash chain (the smart-agent audit pattern). REQUIRED for every eventSequence > 0." .
+
+apreg:eventDigest a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryLifecycleEvent ;
+  rdfs:range xsd:string ;
+  rdfs:label "eventDigest" .
+
+apreg:occurredAt a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryLifecycleEvent ;
+  rdfs:range xsd:dateTime ;
+  rdfs:label "occurredAt" .
+
+apreg:citesReceipt a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryLifecycleEvent ;
+  rdfs:range apreg:RegistrationReceipt ;
+  rdfs:label "citesReceipt" ;
+  rdfs:comment "The receipt an ENTRY_REGISTERED / ENTRY_RENEWED / REVALIDATION_* event refers to." .
+
+apreg:LogCheckpoint a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "LogCheckpoint" ;
+  rdfs:comment "A Merkle root over a contiguous range [checkpointFrom, checkpointTo] of lifecycle events, anchored externally (anchorRef: a topic sequence, a tx, … — HCS-27-compatible, ledger-agnostic). Proves the log was not rewritten; proves nothing about the truth of any event." .
+
+apreg:merkleRoot a owl:DatatypeProperty ;
+  rdfs:domain apreg:LogCheckpoint ;
+  rdfs:range xsd:string ;
+  rdfs:label "merkleRoot" .
+
+apreg:checkpointFrom a owl:DatatypeProperty ;
+  rdfs:domain apreg:LogCheckpoint ;
+  rdfs:range xsd:nonNegativeInteger ;
+  rdfs:label "checkpointFrom" .
+
+apreg:checkpointTo a owl:DatatypeProperty ;
+  rdfs:domain apreg:LogCheckpoint ;
+  rdfs:range xsd:nonNegativeInteger ;
+  rdfs:label "checkpointTo" .
+
+apreg:anchorRef a owl:DatatypeProperty ;
+  rdfs:domain apreg:LogCheckpoint ;
+  rdfs:range xsd:string ;
+  rdfs:label "anchorRef" ;
+  rdfs:comment "The external anchor reference the CheckpointHook returned." .
+
+# ─── Continuous revalidation status (§7.4) ─────────────────────────────
+
+apreg:entryStatus a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range skos:Concept ;
+  rdfs:label "entryStatus" ;
+  rdfs:comment "apreg:entryStatusScheme — verified | stale | failing | suspended | revoked | expired. DERIVED by a pure fold over the lifecycle events (deriveEntryStatus) under a revalidation policy — never a mutable flag written by hand. Distinct from apreg:lifecycleStatus, the on-chain active/suspended/revoked/expired/pending fact." .