@agenticprimitives/ontology 1.0.0-alpha.24 → 1.0.0-alpha.26

package/tbox/core.ttl

@@ -3,6 +3,7 @@
 # The on-chain OntologyTermRegistry / ShapeRegistry (ADR-0009) instantiate
 # this vocabulary; off-chain TTL is the source of truth for the IRIs.
 
+@prefix apsit: <https://agenticprimitives.dev/ns/situation#> .
 @prefix ap:   <https://agenticprimitives.dev/ns/core#> .
 @prefix apid: <https://agenticprimitives.dev/ns/identity#> .
 @prefix rdf:  <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@@ -236,6 +237,30 @@ ap:charteredUnder a owl:ObjectProperty ;
 # `check:ontology-bindings` exists to stop. Naming it fixes that, and the comment is the point of the
 # class: the word "Member" in it means a member of a CUSTODY SET, and nothing else.
 
+# ─── Stewardship — the relation the WORD "steward" names (agent-vocabulary.md R.2, §5) ─────────────
+# A person stewards an organization or a service: she oversees it and may act for it, on the strength of the OVERSIGHT
+# DELEGATION the agent signed to her at birth (spec 246) — the same artifact the Home's related-orgs link records as
+# `relationship: steward`. It is NOT custody (custody is a KEY's relation to an address — ap:CustodyMember — and on a
+# KMS-custodied home the key is one the person has never seen), and it is NOT membership (a steward need not be a
+# member; a member does not steward). Until this class existed the relation lived only in app code, and the Home's
+# switcher called it "acting as custodian" — the wrong word, for the lack of a right one to bind to.
+ap:Stewardship a owl:Class ;
+    rdfs:subClassOf apsit:Situation ;
+    rdfs:label "Stewardship" ;
+    rdfs:comment "A person's oversight of an organization or a service she can act for, evidenced by the agent's oversight delegation to her (its digest is the record). Standing, never authority: what she MAY do as it is what its grants say." .
+ap:steward a owl:ObjectProperty ;
+    rdfs:domain ap:Stewardship ; rdfs:range ap:PersonAgent ;
+    rdfs:label "steward" ;
+    rdfs:comment "The person who stewards." .
+ap:stewarded a owl:ObjectProperty ;
+    rdfs:domain ap:Stewardship ; rdfs:range ap:Agent ;
+    rdfs:label "stewarded" ;
+    rdfs:comment "The organization-class or service-class agent stewarded (never a person — a person is not stewarded, she is)." .
+ap:stewardshipDelegation a owl:DatatypeProperty ;
+    rdfs:domain ap:Stewardship ; rdfs:range xsd:string ;
+    rdfs:label "stewardshipDelegation" ;
+    rdfs:comment "The digest of the oversight delegation that evidences the stewardship (spec 246) — the record, not the authority." .
+
 ap:CustodyMember a owl:Class ;
     rdfs:label "CustodyMember" ;
     rdfs:comment """One opaque, public, chain-reproducible token standing for the fact that a credential
@@ -296,6 +321,51 @@ ap:primaryPayer a owl:ObjectProperty ;
       its owner publishes. Both are roles on the same public ap:charteredUnder edge, so an agent kept
       unlisted carries neither — for those the owner names the account in the request.""" .
 
+# ─── Which of my people am I? (the custodian's own choice over the agents they custody) ───────────
+# A CUSTODIAN IS NOT LIMITED TO ONE PERSON. Somebody walks a long trail and is known on it as Summit;
+# somebody writes under another name; somebody plays a part in a game for six evenings and wants what that
+# character learned kept in its own vault rather than muddled into theirs. Each is a person-shaped agent of
+# its own — its own name, its own card, its own memory of the people it has met under that name — and all of
+# them are custodied by the same human, who can move between them.
+#
+# Until this existed nothing could answer "which of these is you". The Home resolved whichever agent was
+# linked to the credential FIRST, which is an accident of enrolment order rather than an answer, and every
+# surface that had to choose either guessed or asked. Guessing about identity is the one place a system must
+# not.
+#
+# WHY IT HANGS OFF ap:CustodyMember. The choice is not a fact about an agent in the abstract — an agent is
+# nobody's default, it is THIS credential's default. The pair (credential, agent) already has a public,
+# chain-reproducible name in this ontology, and that pair is exactly what is being chosen between. The choice
+# is modelled as a SITUATION of its own rather than a property ON that token, because CustodyMember answers
+# exactly one question by design and must go on answering only that one.
+ap:DefaultPersonChoice a owl:Class ;
+    rdfs:subClassOf apsit:Situation ;
+    rdfs:label "DefaultPersonChoice" ;
+    rdfs:comment """Of the person agents one credential custodies, the one that credential's Home opens as.
+
+      A PREFERENCE, never authority. Moving to another of your people is a change of CONTEXT, not of power:
+      every act still runs under a mandate signed for that request, by that agent, and no verifier reads
+      this. What it removes is a question only the custodian can answer, asked on every connection.
+
+      AT MOST ONE PER CREDENTIAL, and a reader that finds none falls back to however the credential resolved
+      before rather than inventing an answer — the absence of a choice is not a choice.
+
+      IT SAYS NOTHING ABOUT THE AGENTS THEMSELVES. A person agent that is somebody's default is not thereby
+      more real, more authoritative or more them than the others; the others are equally theirs, equally
+      person-shaped, and equally able to hold an organization, a service or a vault of their own.""" .
+ap:choiceOfCustody a owl:ObjectProperty ;
+    rdfs:domain ap:DefaultPersonChoice ; rdfs:range ap:CustodyMember ;
+    rdfs:label "choiceOfCustody" ;
+    rdfs:comment "The (credential, agent) pair chosen — the custody token, which is the only public, chain-reproducible name the relation has." .
+ap:choiceOfPerson a owl:ObjectProperty ;
+    rdfs:domain ap:DefaultPersonChoice ; rdfs:range ap:PersonAgent ;
+    rdfs:label "choiceOfPerson" ;
+    rdfs:comment "The person agent chosen, named directly so a reader does not have to reverse a hash to know who was meant." .
+ap:chosenAt a owl:DatatypeProperty ;
+    rdfs:domain ap:DefaultPersonChoice ; rdfs:range xsd:dateTime ;
+    rdfs:label "chosenAt" ;
+    rdfs:comment "When the custodian last chose. A later choice supersedes an earlier one; nothing is deleted, because which person somebody presented as at a given time is a fact about the past." .
+
 ap:charters a owl:ObjectProperty ;
     rdfs:label "charters" ;
     rdfs:domain ap:Agent ;

package/tbox/execution.ttl

@@ -297,3 +297,74 @@ apexec:artifactDigest a owl:DatatypeProperty ;
   rdfs:domain apexec:RunArtifact ; rdfs:range xsd:string ;
   rdfs:label "artifactDigest" ;
   rdfs:comment "sha256 of the canonical JSON of the body. The same bytes the step receipt's outputDigest commits to, so the graph, the receipt and the vault record agree on what was produced." .
+
+# ═══ Build artifacts — spec 398 §9 (ap-build B3) ═══
+
+apexec:BuildArtifact a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "BuildArtifact" ;
+  rdfs:comment "What ONE build run left, kept as its own record in the WORKSPACE's vault (`build.run:<runId>`; spec 398 §9.2 / §7.2): the repository and base it was built from, the task in the asker's words, the files the model wrote (whole content), and the test evidence AS RECORDED — the command, its exit code and the tail of its output (T28: never an assertion that tests passed). The build service produced it in a sandbox and returned it; the runtime's step prov:generated the record under the workspace's mandate. NOT a deployment (T29 — promotion is its own act) and NOT a pull request: a branch pushed from it is a submission (spec 367 §6) made by `github.pr.open`, whose receipt names this record. Distinct from apexec:RunArtifact (a step's raw body offloaded for size) and from apful:Artifact (a deliverable a fulfillment promised)." .
+
+apexec:buildRepository a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "buildRepository" ;
+  rdfs:comment "The repository the run built in, `owner/name`, with `buildBase` the branch it started from." .
+
+apexec:buildBase a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "buildBase" .
+
+apexec:buildTask a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "buildTask" ;
+  rdfs:comment "The task as the asker said it — what the model was given, never what it claims to have done (that is `buildSummary`, the model's own sentence, rendered as the model's)." .
+
+apexec:buildSummary a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "buildSummary" .
+
+apexec:testCommand a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "testCommand" ;
+  rdfs:comment "What was RUN in the sandbox after the files were written — the repository's own test script when it has one, else a syntax check of what changed. With `testExitCode` and `testOutputTail`, the recorded evidence." .
+
+apexec:testExitCode a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:integer ;
+  rdfs:label "testExitCode" .
+
+apexec:testOutputTail a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "testOutputTail" .
+
+apexec:buildModel a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "buildModel" ;
+  rdfs:comment "The model that wrote the files (`provider/model`) — recorded because a reader judging the change wants to know who wrote it; it is not an author with authority." .
+
+apexec:BuildPromotion a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "BuildPromotion" ;
+  rdfs:comment "What ONE promotion did (spec 398 §9.4, T29; `build.promotion:<runId>` in the WORKSPACE's vault): the exact tuple the steward's signature was over — the commit, the configuration digest (the artifact's files), the environment reached (a branch today), the permitted migration (none) — and what the forge did (the pull request merged, the merge commit). A promotion is the act that reaches an environment; a build never is. Any change to the tuple voids the signature: a promotion of another commit is another act." .
+
+apexec:promotedCommit a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildPromotion ; rdfs:range xsd:string ;
+  rdfs:label "promotedCommit" .
+
+apexec:promotedConfigDigest a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildPromotion ; rdfs:range xsd:string ;
+  rdfs:label "promotedConfigDigest" ;
+  rdfs:comment "The digest of the build artifact's files (`apexec:artifactDigest` of the build run) — the configuration the signature bound." .
+
+apexec:promotedEnvironment a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildPromotion ; rdfs:range xsd:string ;
+  rdfs:label "promotedEnvironment" ;
+  rdfs:comment "The environment reached — `branch:<name>` until a deployment target is attached to the workspace." .
+
+apexec:permittedMigration a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildPromotion ; rdfs:range xsd:string ;
+  rdfs:label "permittedMigration" .
+
+apexec:promotedUnder a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildPromotion ; rdfs:range xsd:string ;
+  rdfs:label "promotedUnder" ;
+  rdfs:comment "The intent digest the promotion's mandate was bound to — the ask that named the run and the commit." .

package/tbox/org.ttl

@@ -47,6 +47,52 @@ aporg:memberOf a owl:ObjectProperty ;
     rdfs:label "memberOf" ;
     rdfs:comment "DERIVED: true iff active, valid, disclosable OrganizationMembership exists. Never asserted globally." .
 
+# ─── Contacts — membership on the PERSON agent (spec 401) ─────────────────────────────────────────────
+# A contact is an agent a person has let in — a friend, a coach service, an outside runtime, an assistant —
+# admitted by the person with a scoped access grant and recorded in the person's own vault, as an
+# organization records a member. What it IS: the same shape as OrganizationMembership with a PERSON where the
+# organization stands (aporg:contactOf · aporg:contactAgent). What it is NOT: public (ADR-0025 — a contact
+# list is a private link), a class of agent (a contact is a role a relation carries), or authority (the grant
+# is; the role — friend, family, coach, assistant, runtime — authorizes nothing, like a household's kinship).
+
+aporg:Contact a owl:Class ;
+    rdfs:subClassOf apsit:Situation ;
+    rdfs:label "Contact" ;
+    rdfs:comment "Private-by-default Situation: exactly one contactAgent + one personAgent (the person who let them in), under the person's own access grant. Membership on a person; never public." .
+
+aporg:contactAgent a owl:ObjectProperty ;
+    rdfs:domain aporg:Contact ; rdfs:range ap:Agent ;
+    rdfs:label "contactAgent" ;
+    rdfs:comment "The agent let in — a person, a service (a coach, an outside runtime), an assistant. Never an organization: one belongs to an organization or not." .
+
+aporg:contactOf a owl:ObjectProperty ;
+    rdfs:domain aporg:Contact ; rdfs:range ap:PersonAgent ;
+    rdfs:label "contactOf" ;
+    rdfs:comment "The person whose contact this is — the principal of the record, the issuer of the grant." .
+
+aporg:contactRole a owl:DatatypeProperty ;
+    rdfs:domain aporg:Contact ; rdfs:range xsd:string ;
+    rdfs:label "contactRole" ;
+    rdfs:comment "Declarative: friend · family · coach · assistant · runtime · other. Authorizes nothing (spec 368's kinship facets are the precedent)." .
+
+# ─── Contact roles — the five words a person has for what a contact is TO THEM ───────────────────
+# Individuals, so a role is a fact the ontology names rather than a string a picker owns (agent-vocabulary.md §5).
+# A role is DECLARATIVE: it authorizes nothing; the contact's grant does. A coach is a contact with role coach —
+# there is no Coach class, as there is no Runtime class: both are ap:ServiceAgent with a role.
+aporg:ContactRole a owl:Class ;
+    rdfs:label "ContactRole" ;
+    rdfs:comment "What a contact is to the person who let them in. Closed set of individuals; declarative; never a basis." .
+aporg:contactRoleOf a owl:ObjectProperty ;
+    rdfs:domain aporg:Contact ; rdfs:range aporg:ContactRole ;
+    rdfs:label "contactRoleOf" ;
+    rdfs:comment "The role as an individual — the object form of aporg:contactRole (the string form is kept for the wire)." .
+aporg:role-friend a aporg:ContactRole ; rdfs:label "friend" ; rdfs:comment "A person you know; becomes mutual when they add you back." .
+aporg:role-family a aporg:ContactRole ; rdfs:label "family" ; rdfs:comment "A person of your household or kin (the household's kinship facet is the precedent, spec 368)." .
+aporg:role-coach a aporg:ContactRole ; rdfs:label "coach" ; rdfs:comment "A SERVICE you consult under a study grant (a canasta coach, a holdem coach). One-way." .
+aporg:role-assistant a aporg:ContactRole ; rdfs:label "assistant" ; rdfs:comment "A SERVICE that acts for you or answers you — an assistant app, an assistant service. One-way." .
+aporg:role-runtime a aporg:ContactRole ; rdfs:label "runtime" ; rdfs:comment "A SERVICE that is your own runtime — Claude Code, goose — paired at your Home (spec 400 W1b). One-way." .
+aporg:role-other a aporg:ContactRole ; rdfs:label "other" ; rdfs:comment "A contact with no role named." .
+
 # ─── Roles ────────────────────────────────────────────────────────────
 
 aporg:OrganizationRoleDefinition a owl:Class ;