@agenticprimitives/ontology 1.0.0-alpha.22 → 1.0.0-alpha.23

package/tbox/agent-resolution.ttl

@@ -67,7 +67,7 @@ apar:inboundPosture a owl:DatatypeProperty ;
     rdfs:comment "open | known-peer | delegation-required | outbound-only. Resolving is not connecting." .
 
 apar:hasDiscoveryPolicy a owl:ObjectProperty ;
-    rdfs:domain ap:SmartAgent ;
+    rdfs:domain ap:Agent ;
     rdfs:range apar:AgentDiscoveryPolicy ;
     rdfs:label "has discovery policy" .
 
@@ -104,7 +104,7 @@ apar:PublicationAuthority a owl:Class ;
 
 apar:describesAgent a owl:ObjectProperty ;
     rdfs:domain apar:AgentServicePublication ;
-    rdfs:range ap:SmartAgent ;
+    rdfs:range ap:Agent ;
     rdfs:label "describes agent" ;
     rdfs:comment "Exactly one canonical Smart Agent per publication (ADR-0010)." .
 
@@ -115,7 +115,7 @@ apar:hasServiceSurface a owl:ObjectProperty ;
 
 apar:publishedBy a owl:ObjectProperty ;
     rdfs:domain apar:AgentServicePublication ;
-    rdfs:range ap:SmartAgent ;
+    rdfs:range ap:Agent ;
     rdfs:label "published by" .
 
 apar:authorizedBy a owl:ObjectProperty ;
@@ -157,7 +157,7 @@ apar:surfaceExposure a owl:DatatypeProperty ;
 
 apar:disclosedTo a owl:ObjectProperty ;
     rdfs:domain apar:ServiceSurface ;
-    rdfs:range ap:SmartAgent ;
+    rdfs:range ap:Agent ;
     rdfs:label "disclosed to" ;
     rdfs:comment "The audience of a private surface. Never projected into any public graph." .
 
@@ -203,7 +203,7 @@ apar:RendezvousService a owl:Class ;
 
 apar:permitsDiscoveryOf a owl:ObjectProperty ;
     rdfs:domain apar:PrivateResolutionGrant ;
-    rdfs:range ap:SmartAgent ;
+    rdfs:range ap:Agent ;
     rdfs:label "permits discovery of" ;
     rdfs:comment "The target agent, signed into the grant so it cannot be retargeted. This is DISCOVERY permission only." .
 
@@ -221,7 +221,7 @@ apar:grantMode a owl:DatatypeProperty ;
 
 apar:aliasOfAgent a owl:ObjectProperty ;
     rdfs:domain apar:PairwiseAgentAlias ;
-    rdfs:range ap:SmartAgent ;
+    rdfs:range ap:Agent ;
     rdfs:label "alias of agent" .
 
 apar:carriesGrant a owl:ObjectProperty ;

package/tbox/card-projection.ttl

@@ -0,0 +1,350 @@
+# T-box — canonical agent profile, A2A Agent Card, projection, publication, external identity
+# binding (spec 347 §11; ADR-0062). Lives in the CORE namespace (ap:) as a second module of it;
+# core.ttl declares the ontology node, this file only adds terms.
+#
+# FIVE CONCEPTS, FIVE QUESTIONS — none collapses into another (ADR-0062 §1):
+#   ap:Agent                    who — the ERC-4337 Smart Agent, where authority roots (ADR-0010).
+#                               "Canonical Agent" IN PROSE ≡ ap:Agent. NO ap:CanonicalAgent class
+#                               is minted: two names for one class is the drift the ADR ends. (The
+#                               repo's OWL profile uses no owl:equivalentClass; a comment documents
+#                               the identity instead.)
+#   ap:CanonicalAgentProfile    the registry-neutral facts and claims (was agent-profile.AgentCard).
+#   ap:A2AAgentCard             what this A2A server does and how to interact — an A2A 1.0 resource,
+#                               released immutably (ap:A2AAgentCardRelease), JWS-signed, bound to the
+#                               SA by EIP-712 + ERC-1271. NOT the identity, NOT a registry entry.
+#   ap:ProjectionDefinition /   how selected canonical facts are represented for ONE target; the
+#   ap:ProjectionInstance /     deterministic payload is the ap:ProjectionArtifact, which ALWAYS
+#   ap:ProjectionArtifact       carries a loss report (ap:hasLoss).
+#   ap:Publication              where and when a card/artifact was actually deployed (the receipt).
+#   ap:ExternalIdentityBinding  which external record/identifier represents this agent, bound back
+#                               with a verification state. Evidence, never authority.
+#
+# "FACET" keeps its ADR-0020 meaning — a contextual VIEW — and is NOT used for any of these. The
+# slogan "one agent, many registry facets" is retired for "one canonical agent, many projections,
+# publications and external identity bindings".
+#
+# PROV-O GROUNDING. Generating a projection and publishing it are prov:Activity
+# (ap:ProjectionGeneration, ap:PublicationActivity). The artifact, the profile release and the card
+# release are prov:Entity. The publisher and the adapter are prov:SoftwareAgent; the operator is the
+# ap:Agent that owns the card. Read a record like this:
+#   ex:artifact  a ap:ProjectionArtifact ; prov:wasGeneratedBy ex:gen ; ap:derivedFromSnapshot ex:bundle .
+#   ex:gen       a ap:ProjectionGeneration ; prov:used ex:bundle, ex:def, ex:cardRelease ;
+#                prov:wasAssociatedWith ex:adapter .
+#   ex:pub       a ap:Publication ; prov:wasGeneratedBy ex:pubAct ; ap:establishesBinding ex:binding .
+#   ex:pubAct    a ap:PublicationActivity ; prov:used ex:artifact ; prov:wasAssociatedWith ex:publisher .
+#
+# RELATION TO apreg:SignedAgentCard (tbox/registry.ttl): that class is the Smart-Agent-signed bundle of
+# the CANONICAL PROFILE (spec 347 §0.3 renames the TS type SignedAgentCardBundleV1 →
+# SignedCanonicalProfileBundleV1). It is not the A2A card; the two are related through
+# ap:CanonicalAgentProfile rdfs:seeAlso below.
+
+@prefix ap:    <https://agenticprimitives.dev/ns/core#> .
+@prefix apreg: <https://agenticprimitives.dev/ns/registry#> .
+@prefix aps:   <https://agenticprimitives.dev/ns/skill#> .
+@prefix rdf:   <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs:  <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:   <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:   <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:  <http://www.w3.org/ns/prov#> .
+@prefix skos:  <http://www.w3.org/2004/02/skos/core#> .
+
+# ─── Classes ──────────────────────────────────────────────────────────────
+
+ap:CanonicalAgentProfile a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "CanonicalAgentProfile" ;
+    rdfs:seeAlso apreg:SignedAgentCard ;
+    rdfs:comment "The registry-neutral facts and claims about ONE ap:Agent (the 'canonical agent' — that phrase always means ap:Agent; no separate class exists): names, provider/operator relationships, deployments, public capability claims, taxonomy mappings, trust claims, disclosure policy. TS: CanonicalAgentProfileV1 (formerly agent-profile.AgentCard). Its immutable, content-addressed snapshot is an ap:CanonicalAgentProfileRelease (atl:metadataHash). Not a card, not a registry entry (spec 347 §2)." .
+
+ap:CanonicalAgentProfileRelease a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "CanonicalAgentProfileRelease" ;
+    rdfs:comment "An immutable, content-addressed release of an ap:CanonicalAgentProfile (profileContentHash; on-chain atl:metadataHash). What a card base and a projection input bundle pin, never the mutable profile." .
+
+ap:A2AAgentCard a owl:Class ;
+    rdfs:label "A2AAgentCard" ;
+    rdfs:comment "The managed A2A 1.0 Agent Card resource of one ap:Agent: identity/presentation, supportedInterfaces (ordered; first = preferred), capabilities, skills, media types, security schemes, signatures. TS: A2AAgentCardResourceV1 (the managed object) whose draft carries FieldBindingV1 provenance. A first-class OPERATIONAL description — never the identity (ADR-0010) and never a registry entry (ADR-0062 §2). One production deployment designates ONE primary public card; staging/development cards are never projected into public registries unless explicitly enabled (spec 347 §3)." .
+
+ap:A2AAgentCardRelease a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "A2AAgentCardRelease" ;
+    rdfs:comment "An immutable release of an ap:A2AAgentCard, identified by release id AND content digest (ap:cardDigest over RFC 8785 canonical bytes), signed with a standard A2A JWS (ES256 default) and separately bound to the Smart Agent by EIP-712 SmartAgentCardBindingV1 verified through ERC-1271. Lifecycle: ap:cardReleaseStateScheme. A REVOKED release is not projection-ready; every registry projection consumes a released card, never a draft. TS: A2AAgentCardReleaseV1." .
+
+ap:ProjectionDefinition a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ProjectionDefinition" ;
+    rdfs:comment "The versioned transformation for ONE target family: target specification (pinned by the ap:StandardsLock), adapter + adapter version, input/output schemas, capabilities. A projector is PURE — deterministic, credential- and network-free, and always emits a loss report (ADR-0062 §5). TS: ProjectionDefinitionV1 (registry-kit/projection)." .
+
+ap:ProjectionInstance a owl:Class ;
+    rdfs:label "ProjectionInstance" ;
+    rdfs:comment "One CONFIGURED projection per agent × target: which ap:ProjectionDefinition, which released card, which configuration. Lifecycle: ap:projectionInstanceStateScheme (unconfigured → … → published → drifted | stale | failed | retired). A remote change produces an IMPORT PROPOSAL, never a canonical write (spec 347 §6.4)." .
+
+ap:ProjectionArtifact a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ProjectionArtifact" ;
+    rdfs:comment "The deterministic payload a projector emitted for one ap:ProjectionInstance, plus its digests, diagnostics and LOSS REPORT (ap:hasLoss). Carries all EIGHT digests (source bundle, definition, target specification, adapter, configuration, artifact, canonical profile, selected card) — ap:ProjectionProvenanceShape refuses one that omits any. prov:wasGeneratedBy an ap:ProjectionGeneration. Marked public (ap:disclosureScope 'public') it must carry no private endpoint and no vault reference (ap:PublicDisclosureBoundaryShape). TS: ProjectionResultV1.artifact (+ digests)." .
+
+ap:ProjectionLoss a owl:Class ;
+    rdfs:label "ProjectionLoss" ;
+    rdfs:comment "One thing the target could not represent faithfully: category from ap:lossCategoryScheme (unsupported | truncated | approximateMapping | omittedByPolicy | targetDefault | manualActionRequired), severity, source/target pointers, explanation. A projection with no losses says so with an EMPTY report, never by omitting the report. TS: ProjectionLossV1." .
+
+ap:Publication a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Publication" ;
+    rdfs:comment "The RECORD of an effectful deployment of a card release or projection artifact: where (uri / transactions / external ids), when, verified how. prov:wasGeneratedBy an ap:PublicationActivity that was approval-gated (ApprovalRefV1 names the exact digest approved), idempotent and audited. TS: PublicationReceiptV1. Publishing is the ONLY effectful step; it never rewrites the canonical record." .
+
+ap:StandardsLock a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "StandardsLock" ;
+    rdfs:comment "The machine-readable pin of every target specification version + digest (docs/standards-lock.json; TS StandardsLockV1). A lock change marks dependent projections review-required — it never rewrites them silently (ADR-0062 §6)." .
+
+ap:ExternalIdentityBinding a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ExternalIdentityBinding" ;
+    rdfs:comment "An external record/identifier (an ERC-8004 entry, an HCS topic, an ANS name, an OASF record…) that REPRESENTS one ap:Agent, bound back to the canonical id with a verification state (ap:bindingVerificationStateScheme) and a lifecycle (ap:bindingLifecycleStateScheme: pendingVerification → active → stale | suspended | superseded | revoked). The external id is a POINTER AT the canonical address, never the identity (ADR-0010). Evidence, never authority. TS: ExternalIdentityBindingV1." .
+
+ap:NamingBinding a owl:Class ;
+    rdfs:subClassOf ap:ExternalIdentityBinding ;
+    rdfs:label "NamingBinding" ;
+    rdfs:comment "The first-party binding the AP Naming projection establishes: a name record set (a2aEndpoint, metadataUri/Hash, atl:agentType) plus atl:cardDigest pointing at the released card (spec 347 §8.3). The name stays a facet pointing AT the SA — no second record type (§0.4)." .
+
+# ─── PROV-O activities and agents ─────────────────────────────────────────
+
+ap:ProjectionGeneration a owl:Class ;
+    rdfs:subClassOf prov:Activity ;
+    rdfs:label "ProjectionGeneration" ;
+    rdfs:comment "The pure activity that produced an ap:ProjectionArtifact. prov:used the input bundle, the definition and the selected card release; prov:wasAssociatedWith the ap:ProjectionAdapter. No credential, no network — if it needed either, it was not a projection." .
+
+ap:PublicationActivity a owl:Class ;
+    rdfs:subClassOf prov:Activity ;
+    rdfs:label "PublicationActivity" ;
+    rdfs:comment "The effectful, approval-gated activity that deployed an artifact or card release and generated an ap:Publication. prov:used the artifact; prov:wasAssociatedWith the ap:Publisher (and, through the approval, the approving ap:Agent). Editor ≠ approver ≠ signer ≠ publisher (ADR-0062 §7)." .
+
+ap:ProjectionAdapter a owl:Class ;
+    rdfs:subClassOf prov:SoftwareAgent ;
+    rdfs:label "ProjectionAdapter" ;
+    rdfs:comment "The software that implements one ap:ProjectionDefinition (a projector, optionally paired with a publisher). First-party adapters (AP Registry, AP Naming) live in Ring 0; every external adapter lives in the sibling repo agent-projections (ADR-0037). Named by ap:hasAdapterVersion." .
+
+ap:Publisher a owl:Class ;
+    rdfs:subClassOf prov:SoftwareAgent ;
+    rdfs:label "Publisher" ;
+    rdfs:comment "The server-side software that performs an ap:PublicationActivity: credential-REFERENCE based (key-custody), idempotent, dry-run capable, audited. It holds no stored registry credential of its own (ADR-0062 refused alternatives)." .
+
+# ─── Properties ───────────────────────────────────────────────────────────
+
+ap:describesAgent a owl:ObjectProperty ;
+    rdfs:range ap:Agent ;
+    rdfs:label "describesAgent" ;
+    rdfs:comment "Profile / card / artifact / binding → the ONE canonical ap:Agent it is about. Every one of these nodes points AT the SA; none of them IS it (ADR-0010)." .
+
+ap:hasAgentCard a owl:ObjectProperty ;
+    rdfs:domain ap:Agent ; rdfs:range ap:A2AAgentCard ;
+    rdfs:label "hasAgentCard" ;
+    rdfs:comment "Agent → its card resources (0..n). Separate cards only for a materially different deployment, audience, security boundary, skill set or persona (spec 347 §3)." .
+
+ap:primaryPublicCard a owl:ObjectProperty ;
+    rdfs:subPropertyOf ap:hasAgentCard ;
+    rdfs:domain ap:Agent ; rdfs:range ap:A2AAgentCard ;
+    rdfs:label "primaryPublicCard" ;
+    rdfs:comment "The ONE card a production deployment designates as primary and public." .
+
+ap:hasRelease a owl:ObjectProperty ;
+    rdfs:label "hasRelease" ;
+    rdfs:comment "Card → its immutable releases; profile → its releases. Superseding never erases (spec 347 §3)." .
+
+ap:releaseOf a owl:ObjectProperty ;
+    owl:inverseOf ap:hasRelease ;
+    rdfs:label "releaseOf" .
+
+ap:supersedesRelease a owl:ObjectProperty ;
+    rdfs:label "supersedesRelease" ;
+    rdfs:comment "Release → the release it replaces. A revoked release records reason, authority, date and successor." .
+
+ap:derivedFromSnapshot a owl:ObjectProperty ;
+    rdfs:range prov:Entity ;
+    rdfs:label "derivedFromSnapshot" ;
+    rdfs:comment "Card release / artifact → the IMMUTABLE snapshot it was computed from (a profile release, a card release, a projection input bundle). 'current' / 'latest' are forbidden here for the same reason apix:ContextSnapshotShape forbids them: a floating pointer makes the record unreplayable." .
+
+ap:usesProjectionDefinition a owl:ObjectProperty ;
+    rdfs:domain ap:ProjectionInstance ; rdfs:range ap:ProjectionDefinition ;
+    rdfs:label "usesProjectionDefinition" .
+
+ap:usesCardRelease a owl:ObjectProperty ;
+    rdfs:domain ap:ProjectionInstance ; rdfs:range ap:A2AAgentCardRelease ;
+    rdfs:label "usesCardRelease" ;
+    rdfs:comment "The SPECIFIC released card this instance projects — never a draft." .
+
+ap:generatedArtifact a owl:ObjectProperty ;
+    rdfs:domain ap:ProjectionInstance ; rdfs:range ap:ProjectionArtifact ;
+    rdfs:label "generatedArtifact" .
+
+ap:projectsTo a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "projectsTo" ;
+    rdfs:comment "Definition / instance / artifact → the target FAMILY it is for ('ap-registry', 'ap-naming', 'a2a-well-known', 'oasf', 'erc8004', 'hcs11', 'hcs14', 'ans', …). A string on purpose: target families are pinned by the StandardsLock, not modelled as Ring-0 classes (ADR-0038)." .
+
+ap:hasTargetSpecification a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "hasTargetSpecification" ;
+    rdfs:comment "Definition / artifact → the pinned target specification id + version ('oasf@1.1.0', 'a2a@1.0.0'); resolvable in the ap:StandardsLock." .
+
+ap:hasAdapterVersion a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "hasAdapterVersion" ;
+    rdfs:comment "Definition / artifact → the adapter name@version that produced it. An adapter upgrade makes an instance adapter-stale (review-required), never silently regenerated." .
+
+ap:hasLoss a owl:ObjectProperty ;
+    rdfs:domain ap:ProjectionArtifact ; rdfs:range ap:ProjectionLoss ;
+    rdfs:label "hasLoss" ;
+    rdfs:comment "Artifact → each loss in its report. Zero losses is an empty set on a node that still exists as an artifact, not a missing report." .
+
+ap:lossCategory a owl:DatatypeProperty ;
+    rdfs:domain ap:ProjectionLoss ; rdfs:range xsd:string ;
+    rdfs:label "lossCategory" ;
+    rdfs:comment "An ap:lossCategoryScheme prefLabel (cbox/controlled-vocabularies.ttl)." .
+
+ap:lossSeverity a owl:DatatypeProperty ;
+    rdfs:domain ap:ProjectionLoss ; rdfs:range xsd:string ;
+    rdfs:label "lossSeverity" .
+
+ap:lossExplanation a owl:DatatypeProperty ;
+    rdfs:domain ap:ProjectionLoss ; rdfs:range xsd:string ;
+    rdfs:label "lossExplanation" .
+
+ap:sourcePointer a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "sourcePointer" ;
+    rdfs:comment "RFC 6901 JSON Pointer into the SOURCE document (card / input bundle)." .
+
+ap:targetPointer a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "targetPointer" ;
+    rdfs:comment "JSON Pointer into the target artifact." .
+
+ap:publishedAs a owl:ObjectProperty ;
+    rdfs:range ap:Publication ;
+    rdfs:label "publishedAs" ;
+    rdfs:comment "Card release / artifact → the publication(s) that deployed it. One artifact may be published more than once (a retry, a second registry); each publication is its own receipt." .
+
+ap:publishedArtifact a owl:ObjectProperty ;
+    rdfs:domain ap:Publication ;
+    rdfs:label "publishedArtifact" ;
+    rdfs:comment "Publication → the artifact or card release it deployed (the digest named in ap:hasArtifactDigest is what was actually sent)." .
+
+ap:establishesBinding a owl:ObjectProperty ;
+    rdfs:domain ap:Publication ; rdfs:range ap:ExternalIdentityBinding ;
+    rdfs:label "establishesBinding" ;
+    rdfs:comment "Publication → the external identity binding(s) it created or refreshed. A binding born here starts pendingVerification; the publisher's re-fetch moves it." .
+
+ap:bindsExternalIdentity a owl:ObjectProperty ;
+    rdfs:domain ap:Agent ; rdfs:range ap:ExternalIdentityBinding ;
+    rdfs:label "bindsExternalIdentity" ;
+    rdfs:comment "Agent → the external identities that represent it (0..n). Read with ap:describesAgent on the binding (the inverse direction) — both point the same way: external id AT canonical agent." .
+
+ap:targetFamily a owl:DatatypeProperty ;
+    rdfs:domain ap:ExternalIdentityBinding ; rdfs:range xsd:string ;
+    rdfs:label "targetFamily" ;
+    rdfs:comment "The target family the external id lives in (same value space as ap:projectsTo)." .
+
+ap:targetRegistry a owl:DatatypeProperty ;
+    rdfs:domain ap:ExternalIdentityBinding ; rdfs:range xsd:string ;
+    rdfs:label "targetRegistry" ;
+    rdfs:comment "The specific registry / network within the family (a contract address, a topic id, a zone)." .
+
+ap:externalId a owl:DatatypeProperty ;
+    rdfs:domain ap:ExternalIdentityBinding ; rdfs:range xsd:string ;
+    rdfs:label "externalId" ;
+    rdfs:comment "The external record identifier. A pointer AT the SA — never the identity." .
+
+ap:verificationState a owl:DatatypeProperty ;
+    rdfs:domain ap:ExternalIdentityBinding ; rdfs:range xsd:string ;
+    rdfs:label "verificationState" ;
+    rdfs:comment "An ap:bindingVerificationStateScheme prefLabel: unverified | verified | failed. Unverified is RECORDED, never read as verified." .
+
+ap:verificationMethod a owl:DatatypeProperty ;
+    rdfs:domain ap:ExternalIdentityBinding ; rdfs:range xsd:string ;
+    rdfs:label "verificationMethod" .
+
+ap:verifiedAt a owl:DatatypeProperty ;
+    rdfs:range xsd:dateTime ;
+    rdfs:label "verifiedAt" .
+
+ap:lifecycleState a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "lifecycleState" ;
+    rdfs:comment "The subject's lifecycle state; the value space depends on the class: ap:cardReleaseStateScheme (card release), ap:projectionInstanceStateScheme (instance), ap:bindingLifecycleStateScheme (binding)." .
+
+ap:disclosureScope a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "disclosureScope" ;
+    rdfs:comment "'public' | 'private'. A card or artifact marked public is subject to ap:PublicDisclosureBoundaryShape. ABSENCE IS PRIVATE — no shape reads a missing scope as public." .
+
+ap:cardDigest a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "cardDigest" ;
+    rdfs:comment "sha256:<hex> of the released card's RFC 8785 canonical bytes. Also the value the AP Naming projection writes as atl:cardDigest, and the value the well-known publisher's re-fetch must reproduce (ADR-0059 live-truth check)." .
+
+ap:cardUri a owl:DatatypeProperty ;
+    rdfs:range xsd:anyURI ;
+    rdfs:label "cardUri" ;
+    rdfs:comment "Where the released card is served (the /.well-known/agent-card.json URL). On a PUBLIC card or artifact it must be a public address: loopback, private-range, link-local and *.local/*.internal hosts are refused." .
+
+ap:cardName a owl:DatatypeProperty ;
+    rdfs:domain ap:A2AAgentCard ; rdfs:range xsd:string ;
+    rdfs:label "cardName" ;
+    rdfs:comment "The A2A card's human-readable name (A2A 1.0 AgentCard.name)." .
+
+ap:protocolVersion a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "protocolVersion" ;
+    rdfs:comment "The A2A protocol version the card conforms to (A2A 1.0 AgentCard.protocolVersion)." .
+
+ap:interfaceUrl a owl:DatatypeProperty ;
+    rdfs:range xsd:anyURI ;
+    rdfs:label "interfaceUrl" ;
+    rdfs:comment "One entry of the card's supportedInterfaces (its URL). The ORDER (first = preferred) is a property of the released JSON, not of this graph; the graph records the set." .
+
+ap:interfaceTransport a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "interfaceTransport" ;
+    rdfs:comment "The transport of one supported interface (JSONRPC | HTTP+JSON | GRPC …)." .
+
+# ─── The eight digests (spec 347 §6.4 'every artifact records the eight digests') ──
+# MODELLING CHOICE: eight named DATATYPE sub-properties of one abstract ap:hasDigest, rather than a
+# reified digest node with a role. The shape needs 'minCount 1 for each of eight roles', and eight
+# sh:property blocks say that in SHACL-Core with no SPARQL; a role-node model would need a
+# qualifiedValueShape per role and read worse. The roles ALSO exist as a codelist
+# (ap:digestRoleScheme) so a reified form can be mapped to these if a store prefers it.
+
+ap:hasDigest a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "hasDigest" ;
+    rdfs:comment "Abstract parent of the eight artifact digests. Values are 'sha256:<64 hex>'. Never used directly on an artifact — the sub-property names the role." .
+
+ap:hasSourceDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasSourceDigest" ;
+    rdfs:comment "Digest of the ProjectionInputBundleV1 the artifact was computed from." .
+ap:hasDefinitionDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasDefinitionDigest" ;
+    rdfs:comment "Digest of the ap:ProjectionDefinition used." .
+ap:hasTargetSpecificationDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasTargetSpecificationDigest" ;
+    rdfs:comment "Digest of the pinned target specification (from the ap:StandardsLock)." .
+ap:hasAdapterDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasAdapterDigest" ;
+    rdfs:comment "Digest identifying the adapter build (name@version + code digest)." .
+ap:hasConfigurationDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasConfigurationDigest" ;
+    rdfs:comment "Digest of the instance configuration." .
+ap:hasArtifactDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasArtifactDigest" ;
+    rdfs:comment "Digest of the emitted payload — what a Publication actually sent and what an approval names." .
+ap:hasCanonicalProfileDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasCanonicalProfileDigest" ;
+    rdfs:comment "Digest of the ap:CanonicalAgentProfileRelease in the input bundle." .
+ap:hasSelectedCardDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasSelectedCardDigest" ;
+    rdfs:comment "ap:cardDigest of the released card the projection consumed." .
+
+# ─── Taxonomy mappings live in skills.ttl (aps:SkillTaxonomyMapping); referenced here ──
+ap:CanonicalAgentProfile rdfs:seeAlso aps:SkillTaxonomyMapping .

package/tbox/contact.ttl

@@ -0,0 +1,61 @@
+# T-box — the PRIVATE contact profile (spec 371 §2.2: a record edit is shaped by the record).
+#
+# What this module owns: the person's own contact record — name, email, telephone, organization and a
+# postal address — held in THEIR vault (`vault:impact-profile`, sealed under their own KEK) and shared only
+# with apps they have granted. It is NOT the public profile facet (approf:, on chain, world-readable) and
+# NOT the naming record (apnam:). Three records answer to the word "profile"; this is the private one.
+#
+# Why it exists as a T-box: the fields a person may change by asking ("set street address to …") are read
+# FROM this declaration — the Ask's edit tool, the record's write allow-list and the contract's inputs are
+# all projections of these properties. Before this file the fields lived in three hand-kept lists, and
+# "street address" was in none of them: the agent could change a name and not an address, and said so.
+#
+# Local names follow schema.org's PostalAddress / Person vocabulary so a reader recognises them; the IRIs
+# are ours, because the record is ours. Never projected to the discovery KB (ADR-0040: PII).
+
+@prefix apcon: <https://agenticprimitives.dev/ns/contact#> .
+@prefix ap:    <https://agenticprimitives.dev/ns/core#> .
+@prefix rdf:   <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs:  <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:   <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:   <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:  <http://www.w3.org/ns/prov#> .
+
+apcon: a owl:Ontology ;
+  rdfs:label "Agentic Primitives — private contact profile" ;
+  owl:versionInfo "0.1.0" ;
+  rdfs:comment "The person's own contact record, in their own vault. Private tier; never on chain, never in the discovery KB." .
+
+apcon:ContactProfile a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "ContactProfile" ;
+  rdfs:comment "ONE person's private contact record: how they are named, reached and where they are. Owner-written; read by apps under a granted scope. Not the public AgentProfile facet, not the naming record." .
+
+apcon:givenName a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "first name" ;
+  rdfs:comment "The person's given name, as they write it. Not the agent's public display name." .
+apcon:familyName a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "last name" ;
+  rdfs:comment "The person's family name." .
+apcon:email a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "email" ;
+  rdfs:comment "Where their mail goes. A wrong one is worse than none." .
+apcon:telephone a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "phone" ;
+  rdfs:comment "A telephone number, as written." .
+apcon:organizationName a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "organization" ;
+  rdfs:comment "The organization they say they work with — words, not a link to an OrganizationAgent." .
+apcon:organizationCountry a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "organization country" ;
+  rdfs:comment "Where that organization is." .
+
+# ── The postal address, at the precision the person chose to share ──────────────────────────────────
+apcon:streetAddress a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "street address" ;
+  rdfs:comment "Street and number (\"2445 Walters Drive\"). Sharing it means the record's precision is 'address'." .
+apcon:streetAddressLine2 a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "address line 2" ;
+  rdfs:comment "Apartment, suite, unit." .
+apcon:addressLocality a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "city" ;
+  rdfs:comment "City, town or equivalent locality." .
+apcon:addressRegion a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "state or province" ;
+  rdfs:comment "State, province or equivalent region." .
+apcon:postalCode a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "postal code" ;
+  rdfs:comment "Postal or ZIP code." .
+apcon:addressCountry a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "country" ;
+  rdfs:comment "The country of the address — the coarsest precision, and required for any finer one." .
+apcon:locationPrecision a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "location precision" ;
+  rdfs:comment "How much of the address the person chose to share: country | region | locality | address. Derived from what is filled; never finer than what they gave." .

package/tbox/context.ttl

@@ -18,6 +18,9 @@
 @prefix owl:   <http://www.w3.org/2002/07/owl#> .
 @prefix xsd:   <http://www.w3.org/2001/XMLSchema#> .
 @prefix skos:  <http://www.w3.org/2004/02/skos/core#> .
+# `prov:` was USED (LearnedPreference ⊑ prov:Entity) and never declared, so this file did not parse.
+@prefix prov:  <http://www.w3.org/ns/prov#> .
+@prefix ap:    <https://agenticprimitives.dev/ns/core#> .
 
 apctx: a owl:Ontology ;
   rdfs:label "Agentic Primitives — context facet ontology" ;
@@ -122,3 +125,114 @@ apctx:levelInMap a owl:DatatypeProperty ;
   rdfs:domain apctx:CapabilityMapEntry ; rdfs:range xsd:integer ;
   rdfs:label "levelInMap" ;
   rdfs:comment "Presentation level within one map. Asserting this on an aps:Capability is a SHACL violation (cbox/capability-catalog-shapes.shacl.ttl NoLevelOnCapabilityShape)." .
+
+# ── Learned context: what an agent has been TOLD, kept in the owner's own vault ────────────────────
+# Spec 358 W5. Memory in this substrate is not a platform blob: it is ontology-shaped records in the
+# OWNER's vault, read by the same selector as everything else and shown in an answer's evidence. A
+# learned preference — "when I say alice, I mean alice2.treasury" — is a RECORD the owner holds, deletes
+# like any other, and carries to another Home. It is never authority: it steers what a resolver PROPOSES,
+# and the mandate still decides. The distinction from a profile: a profile is what an agent SAYS ABOUT
+# ITSELF; a learned preference is what it was TOLD, by whom, and when.
+
+apctx:LearnedPreference a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "LearnedPreference" ;
+    rdfs:comment """A statement the agent was TOLD and keeps, in the owner's own vault (spec 358 W5) — "when I say X, I mean Y", "pay me into this treasury by default". Steers what a resolver proposes; NEVER authority (a preference to pay a treasury is not a grant to pay it), and NEVER a fact about the world (it records what the owner said, which may be wrong or stale). Carries what was learned, whom it is about, when, and — because provenance is the whole difference between memory and a guess — that the OWNER asserted it.""" .
+
+apctx:preferenceSubject a owl:ObjectProperty ;
+    rdfs:domain apctx:LearnedPreference ; rdfs:range ap:Agent ;
+    rdfs:label "preferenceSubject" ;
+    rdfs:comment "Who or what the preference is ABOUT — the agent the owner's shorthand resolves to." .
+
+apctx:preferenceTrigger a owl:DatatypeProperty ;
+    rdfs:domain apctx:LearnedPreference ; rdfs:range xsd:string ;
+    rdfs:label "preferenceTrigger" ;
+    rdfs:comment "The words that invoke it — the shorthand the owner uses (\"alice\", \"my treasury\"). Matched against an ask, never against the world." .
+
+apctx:learnedAt a owl:DatatypeProperty ;
+    rdfs:domain apctx:LearnedPreference ; rdfs:range xsd:dateTime ;
+    rdfs:label "learnedAt" ;
+    rdfs:comment "When the owner said it. A stale preference is still a real record; age is shown so a person can judge it." .
+
+# ── Confirmation memory (spec 385) ──────────────────────────────────────────────────────────────────
+# Which "David" the owner CHOSE when asked, per (word, capability, argument) — and, since spec 394, per the room
+# they were standing in. Evidence the resolver cites; never a grant a verifier reads.
+
+apctx:ConfirmationMemory a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ConfirmationMemory" ;
+    rdfs:comment "The owner's confirmed choices, in their own vault: for THIS word, filling THIS argument of THIS capability (in THIS room), the agent they picked when asked. Prefills or ranks the next ambiguous resolution of the same word in the same place, revalidated against the candidates found then. Correctable, cited, never authority." .
+
+apctx:confirmedParty a owl:ObjectProperty ;
+    rdfs:domain apctx:ConfirmationMemory ; rdfs:range ap:Agent ;
+    rdfs:label "confirmedParty" ;
+    rdfs:comment "The agent the owner confirmed for the word." .
+
+apctx:confirmedWords a owl:DatatypeProperty ;
+    rdfs:domain apctx:ConfirmationMemory ; rdfs:range xsd:string ;
+    rdfs:label "confirmedWords" ;
+    rdfs:comment "The word the owner used ('david')." .
+
+apctx:confirmedFor a owl:DatatypeProperty ;
+    rdfs:domain apctx:ConfirmationMemory ; rdfs:range xsd:string ;
+    rdfs:label "confirmedFor" ;
+    rdfs:comment "The capability the choice was made for (an ADR-0051 id) — the scope that keeps the payee 'David' out of the invitee 'David'." .
+
+# ── Standing instructions (spec 394) ────────────────────────────────────────────────────────────────
+# A DECLARED DEFAULT with no word in it: "from now on, pay from alice3.treasury". Fills an argument the owner
+# did not speak, never one they did; scoped to the room (the organization acted for, or any); never authority.
+
+apctx:StandingInstruction a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "StandingInstruction" ;
+    rdfs:comment "The owner's declared default for one argument of one capability, in their own vault, scoped to the acting context they declared it in. Written only from the owner's confirmation of the read-back; revalidated at every use; cited on the binding as 'standing'. It is NOT a caveat, NOT a policy and NOT a grant: the mandate for the act is asked and signed as if nothing were remembered, and it can never lower a step's requirement." .
+
+apctx:instructionCapability a owl:DatatypeProperty ;
+    rdfs:domain apctx:StandingInstruction ; rdfs:range xsd:string ;
+    rdfs:label "instructionCapability" ;
+    rdfs:comment "The capability the default is for (an ADR-0051 id)." .
+
+apctx:instructionArgument a owl:DatatypeProperty ;
+    rdfs:domain apctx:StandingInstruction ; rdfs:range xsd:string ;
+    rdfs:label "instructionArgument" ;
+    rdfs:comment "The argument it fills ('payer', 'org')." .
+
+apctx:instructionValue a owl:ObjectProperty ;
+    rdfs:domain apctx:StandingInstruction ; rdfs:range ap:Agent ;
+    rdfs:label "instructionValue" ;
+    rdfs:comment "The agent the argument defaults to." .
+
+apctx:instructionContext a owl:DatatypeProperty ;
+    rdfs:domain apctx:StandingInstruction ; rdfs:range xsd:string ;
+    rdfs:label "instructionContext" ;
+    rdfs:comment "The room: 'any', or the address of the organization the owner was acting for when they declared it. Read for the exact room first, then 'any'; a default for one organization is never read in another." .
+
+apctx:declaredAt a owl:DatatypeProperty ;
+    rdfs:domain apctx:StandingInstruction ; rdfs:range xsd:dateTime ;
+    rdfs:label "declaredAt" ;
+    rdfs:comment "When the owner declared it." .
+
+# ── Conversation memory (spec 370 P7) ───────────────────────────────────────────────────────────────
+# What the agent RESOLVED for its owner in the last few asks, kept in the owner's own vault so "send him
+# 2 USDC" after "send nathan 1 USDC" means the Nathan they just meant, and "which Nathan?" is not asked
+# twice in one afternoon. Memory fills WHERE; it is never authority: the mandate still decides.
+
+apctx:ConversationMemory a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ConversationMemory" ;
+    rdfs:comment "The owner's recent asks and what each party word resolved to, in their own vault. A short window (a dozen turns), read by the resolver to answer a pronoun or a repeated name; steers what is PROPOSED, never what is permitted." .
+
+apctx:recalledParty a owl:ObjectProperty ;
+    rdfs:domain apctx:ConversationMemory ; rdfs:range ap:Agent ;
+    rdfs:label "recalledParty" ;
+    rdfs:comment "An agent a recent ask resolved a word to." .
+
+apctx:recalledWords a owl:DatatypeProperty ;
+    rdfs:domain apctx:ConversationMemory ; rdfs:range xsd:string ;
+    rdfs:label "recalledWords" ;
+    rdfs:comment "The words the owner used for that party ('nathan', 'the somali team')." .
+
+apctx:recalledAt a owl:DatatypeProperty ;
+    rdfs:domain apctx:ConversationMemory ; rdfs:range xsd:dateTime ;
+    rdfs:label "recalledAt" ;
+    rdfs:comment "When the ask was made; the newest recall wins a pronoun." .

package/tbox/coordination.ttl

@@ -112,6 +112,23 @@ apcoord:ContributionCommitment a owl:Class ;
     rdfs:label "ContributionCommitment" ;
     rdfs:comment "The participant's SIGNED acceptance of bounded responsibility, binding the EXACT adopted plan revision hash. Signed via the universal signature paths (ERC-1271/6492/ECDSA/WebAuthn), fail-closed. STILL grants nothing: authorized remains a separate fact evaluated at the gate." .
 
+# ═══ Decisions by declared approvers (spec 333 §3, shipped by spec 393; reader: @agenticprimitives/coordination /decisions) ═══
+
+apcoord:ApprovalRequirement a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ApprovalRequirement" ;
+    rdfs:comment "Declares WHO must approve: the addresses that may decide (the managing principal's address names the organization — a steward decides AS it), and a quorum. Quorum references organization/custody machinery (spec 333 §10 rule 3) — coordination never implements voting. Not authority: it names who may RECORD a decision, never what any step may do." .
+
+apcoord:DecisionRequest a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "DecisionRequest" ;
+    rdfs:comment "A decision that must be supplied before something proceeds, raised for its ApprovalRequirement by the organization or an active participant, scoped to plan steps when it concerns them, with an optional window (dueAt). Pending until an approver records approved or rejected; a deferral leaves it pending." .
+
+apcoord:DecisionRecord a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "DecisionRecord" ;
+    rdfs:comment "IMMUTABLE: who decided (the actor), on whose behalf (the organization when a steward decided as it), the outcome, the rationale, evidence refs, the scope, when. Never edited — a reversal is a new DecisionRequest citing the old. Admitted by the reducer only for an actor the requirement names: steward standing never substitutes for being named (spec 393 §1)." .
+
 # ═══ Agent triage (spec 333 §3 — W4 minimal slice; reader: @agenticprimitives/coordination /decisions) ═══
 
 apcoord:Recommendation a owl:Class ;