@agenticprimitives/ontology 1.0.0-alpha.25 → 1.0.0-alpha.27

package/run-provenance.jsonld

@@ -14,60 +14,259 @@
     "apvr": "https://agenticprimitives.dev/ns/verification-receipt#",
     "apcoord": "https://agenticprimitives.dev/ns/coordination#",
     "apix": "https://agenticprimitives.dev/ns/interaction#",
-
     "id": "@id",
     "type": "@type",
     "graph": "@graph",
-
-    "startedAtTime": { "@id": "prov:startedAtTime", "@type": "xsd:dateTime" },
-    "endedAtTime": { "@id": "prov:endedAtTime", "@type": "xsd:dateTime" },
-    "endedAt": { "@id": "apexec:endedAt", "@type": "xsd:dateTime" },
-    "wasAssociatedWith": { "@id": "prov:wasAssociatedWith", "@type": "@id" },
-    "actedOnBehalfOf": { "@id": "prov:actedOnBehalfOf", "@type": "@id" },
-    "wasAttributedTo": { "@id": "prov:wasAttributedTo", "@type": "@id" },
-    "used": { "@id": "prov:used", "@type": "@id", "@container": "@set" },
-    "usedDelegation": { "@id": "apvr:usedDelegation", "@type": "@id" },
-    "generated": { "@id": "prov:generated", "@type": "@id", "@container": "@set" },
-    "wasGeneratedBy": { "@id": "prov:wasGeneratedBy", "@type": "@id" },
-    "wasInformedBy": { "@id": "prov:wasInformedBy", "@type": "@id", "@container": "@set" },
-    "wasDerivedFrom": { "@id": "prov:wasDerivedFrom", "@type": "@id", "@container": "@set" },
-    "wasRevisionOf": { "@id": "prov:wasRevisionOf", "@type": "@id" },
-    "qualifiedAssociation": { "@id": "prov:qualifiedAssociation", "@container": "@set" },
-    "agent": { "@id": "prov:agent", "@type": "@id" },
-    "hadPlan": { "@id": "prov:hadPlan", "@type": "@id" },
-    "hadRole": { "@id": "prov:hadRole", "@type": "@id" },
-    "hasTraceElement": { "@id": "ep-plan:hasTraceElement", "@type": "@id", "@container": "@set" },
-    "isStepOfPlan": { "@id": "p-plan:isStepOfPlan", "@type": "@id" },
-    "isPrecededBy": { "@id": "p-plan:isPrecededBy", "@type": "@id" },
-    "correspondsToStep": { "@id": "p-plan:correspondsToStep", "@type": "@id" },
-    "isDecomposedAsPlan": { "@id": "ep-plan:isDecomposedAsPlan", "@type": "@id" },
-
-    "hasStep": { "@id": "apexec:hasStep", "@type": "@id", "@container": "@set" },
+    "startedAtTime": {
+      "@id": "prov:startedAtTime",
+      "@type": "xsd:dateTime"
+    },
+    "endedAtTime": {
+      "@id": "prov:endedAtTime",
+      "@type": "xsd:dateTime"
+    },
+    "endedAt": {
+      "@id": "apexec:endedAt",
+      "@type": "xsd:dateTime"
+    },
+    "wasAssociatedWith": {
+      "@id": "prov:wasAssociatedWith",
+      "@type": "@id"
+    },
+    "actedOnBehalfOf": {
+      "@id": "prov:actedOnBehalfOf",
+      "@type": "@id"
+    },
+    "wasAttributedTo": {
+      "@id": "prov:wasAttributedTo",
+      "@type": "@id"
+    },
+    "used": {
+      "@id": "prov:used",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "usedDelegation": {
+      "@id": "apvr:usedDelegation",
+      "@type": "@id"
+    },
+    "generated": {
+      "@id": "prov:generated",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "wasGeneratedBy": {
+      "@id": "prov:wasGeneratedBy",
+      "@type": "@id"
+    },
+    "wasInformedBy": {
+      "@id": "prov:wasInformedBy",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "wasDerivedFrom": {
+      "@id": "prov:wasDerivedFrom",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "wasRevisionOf": {
+      "@id": "prov:wasRevisionOf",
+      "@type": "@id"
+    },
+    "qualifiedAssociation": {
+      "@id": "prov:qualifiedAssociation",
+      "@container": "@set"
+    },
+    "agent": {
+      "@id": "prov:agent",
+      "@type": "@id"
+    },
+    "hadPlan": {
+      "@id": "prov:hadPlan",
+      "@type": "@id"
+    },
+    "hadRole": {
+      "@id": "prov:hadRole",
+      "@type": "@id"
+    },
+    "hasTraceElement": {
+      "@id": "ep-plan:hasTraceElement",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "isStepOfPlan": {
+      "@id": "p-plan:isStepOfPlan",
+      "@type": "@id"
+    },
+    "isPrecededBy": {
+      "@id": "p-plan:isPrecededBy",
+      "@type": "@id"
+    },
+    "correspondsToStep": {
+      "@id": "p-plan:correspondsToStep",
+      "@type": "@id"
+    },
+    "isDecomposedAsPlan": {
+      "@id": "ep-plan:isDecomposedAsPlan",
+      "@type": "@id"
+    },
+    "hasStep": {
+      "@id": "apexec:hasStep",
+      "@type": "@id",
+      "@container": "@set"
+    },
     "runRef": "apexec:runRef",
     "intentDigest": "apexec:intentDigest",
-    "completionState": { "@id": "apexec:completionState", "@type": "@vocab" },
+    "completionState": {
+      "@id": "apexec:completionState",
+      "@type": "@vocab"
+    },
     "receiptDigest": "apexec:receiptDigest",
     "usedPlanContentHash": "apexec:usedPlanContentHash",
-    "realizesCapability": { "@id": "apexec:realizesCapability", "@type": "@id" },
+    "realizesCapability": {
+      "@id": "apexec:realizesCapability",
+      "@type": "@id"
+    },
     "authorityDecision": "apexec:authorityDecision",
-    "afterApproval": { "@id": "apexec:afterApproval", "@type": "xsd:boolean" },
+    "afterApproval": {
+      "@id": "apexec:afterApproval",
+      "@type": "xsd:boolean"
+    },
     "chainDigest": "apexec:chainDigest",
-    "accountabilityRoot": { "@id": "apexec:accountabilityRoot", "@type": "@id" },
-    "actorContext": { "@id": "apexec:actorContext", "@type": "@id" },
-    "delegatedToAgent": { "@id": "apexec:delegatedToAgent", "@type": "@id" },
+    "accountabilityRoot": {
+      "@id": "apexec:accountabilityRoot",
+      "@type": "@id"
+    },
+    "actorContext": {
+      "@id": "apexec:actorContext",
+      "@type": "@id"
+    },
+    "delegatedToAgent": {
+      "@id": "apexec:delegatedToAgent",
+      "@type": "@id"
+    },
     "errorClass": "apexec:errorClass",
+    "observedOutcome": {
+      "@id": "apexec:observedOutcome",
+      "@type": "@vocab"
+    },
+    "providerRef": "apexec:providerRef",
+    "observedAt": {
+      "@id": "apexec:observedAt",
+      "@type": "xsd:dateTime"
+    },
     "traceId": "apexec:traceId",
     "spanId": "apexec:spanId",
+    "estate": "apexec:estate",
     "effectProduces": "apexec:effectProduces",
-    "effectSucceeded": { "@id": "apexec:effectSucceeded", "@type": "xsd:boolean" },
+    "effectSucceeded": {
+      "@id": "apexec:effectSucceeded",
+      "@type": "xsd:boolean"
+    },
     "decisionPoint": "apexec:decisionPoint",
     "decisionRule": "apexec:decisionRule",
-    "artifactBytes": { "@id": "apexec:artifactBytes", "@type": "xsd:integer" },
+    "artifactBytes": {
+      "@id": "apexec:artifactBytes",
+      "@type": "xsd:integer"
+    },
     "artifactDigest": "apexec:artifactDigest",
-    "actingAgent": { "@id": "apactor:actingAgent", "@type": "@id" },
-    "originatingAgent": { "@id": "apactor:originatingAgent", "@type": "@id" },
-    "rootPrincipal": { "@id": "apactor:rootPrincipal", "@type": "@id" },
-
+    "actingAgent": {
+      "@id": "apactor:actingAgent",
+      "@type": "@id"
+    },
+    "originatingAgent": {
+      "@id": "apactor:originatingAgent",
+      "@type": "@id"
+    },
+    "rootPrincipal": {
+      "@id": "apactor:rootPrincipal",
+      "@type": "@id"
+    },
+    "arrivedBy": {
+      "@id": "apexec:arrivedBy",
+      "@type": "@id"
+    },
+    "doorKind": "apexec:doorKind",
+    "a2aMessageId": "apexec:a2aMessageId",
+    "a2aContextId": "apexec:a2aContextId",
+    "a2aTaskId": "apexec:a2aTaskId",
+    "hasModelInvocation": {
+      "@id": "apexec:hasModelInvocation",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "invocationRole": "apexec:invocationRole",
+    "modelId": "apexec:modelId",
+    "modelProvider": "apexec:modelProvider",
+    "promptTemplateDigest": "apexec:promptTemplateDigest",
+    "tokensIn": {
+      "@id": "apexec:tokensIn",
+      "@type": "xsd:integer"
+    },
+    "tokensOut": {
+      "@id": "apexec:tokensOut",
+      "@type": "xsd:integer"
+    },
+    "routeReason": "apexec:routeReason",
+    "underVariant": {
+      "@id": "apexec:underVariant",
+      "@type": "@id"
+    },
+    "variantDigest": "apexec:variantDigest",
+    "plannerKind": "apexec:plannerKind",
+    "routePolicy": "apexec:routePolicy",
+    "harnessBuild": "apexec:harnessBuild",
+    "capabilityToggle": {
+      "@id": "apexec:capabilityToggle",
+      "@container": "@set"
+    },
+    "fromStartingState": {
+      "@id": "apexec:fromStartingState",
+      "@type": "@id"
+    },
+    "startingStateDigest": "apexec:startingStateDigest",
+    "governedBySkill": {
+      "@id": "apexec:governedBySkill",
+      "@type": "@id"
+    },
+    "hasEngagement": {
+      "@id": "apexec:hasEngagement",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "ofCapability": {
+      "@id": "apexec:ofCapability",
+      "@type": "@id"
+    },
+    "engagementEffect": {
+      "@id": "apexec:engagementEffect",
+      "@type": "@id"
+    },
+    "capabilityVersion": "apexec:capabilityVersion",
+    "offeredCandidate": {
+      "@id": "apexec:offeredCandidate",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "chose": {
+      "@id": "apexec:chose",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "rejectedNeighbour": {
+      "@id": "apexec:rejectedNeighbour",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "inferredRequest": {
+      "@id": "apexec:inferredRequest",
+      "@type": "@id"
+    },
+    "inferredAbout": {
+      "@id": "apexec:inferredAbout",
+      "@type": "@id",
+      "@container": "@set"
+    },
     "Agent": "ap:Agent",
     "SoftwareAgent": "prov:SoftwareAgent",
     "Person": "prov:Person",
@@ -97,10 +296,19 @@
     "OrchestratedTask": "apix:OrchestratedTask",
     "CoordinationPlan": "apcoord:CoordinationPlan",
     "PlanStep": "apcoord:PlanStep",
+    "Door": "apexec:Door",
+    "ModelInvocation": "apexec:ModelInvocation",
+    "Variant": "apexec:Variant",
+    "StartingState": "apexec:StartingState",
+    "CapabilityEngagement": "apexec:CapabilityEngagement",
     "Completed": "apexec:Completed",
     "Failed": "apexec:Failed",
     "Refused": "apexec:Refused",
     "Skipped": "apexec:Skipped",
-    "Suspended": "apexec:Suspended"
+    "Suspended": "apexec:Suspended",
+    "attempted": "apexec:attempted",
+    "accepted": "apexec:accepted",
+    "committed": "apexec:committed",
+    "confirmed": "apexec:confirmed"
   }
 }

package/tbox/content.ttl

@@ -51,3 +51,26 @@ apcnt:proofPolicy a rdf:Property ;
     rdfs:comment "An apcnt:proofPolicy value (C-box codelist): signature | merkle-inclusion | zk." .
 apcnt:citesLocus a rdf:Property ; rdfs:domain apcnt:CitationAssertion ; rdfs:range apcnt:CanonicalLocus .
 apcnt:underEntitlement a rdf:Property ; rdfs:domain apcnt:CitationAssertion ; rdfs:range apcnt:Entitlement .
+
+# ── Spec 413 — a PUBLISHED WORK, as the discovery knowledge base holds it (ADR-0040 amendment 2026-09-24). ──
+# A document its owner made public on her Library's shelf (spec 412) AND released with her signature, projected by the
+# indexer after it verified both, from the owner's on-chain A2A endpoint. A CACHE of an owner-published, signed,
+# world-readable artifact — never the record (the record is in her vault) and never evidence of anything beyond "this
+# text was served publicly under this signed release at observedAt". Withdrawn on the next observation that fails.
+apcnt:PublishedWork a rdfs:Class ;
+    rdfs:label "PublishedWork" ;
+    rdfs:comment "A public, owner-released Library document projected into the discovery KB (spec 413). Owner-published, provenance-typed, stale-allowed; NOT a private record, NOT authority." .
+apcnt:publisher a rdf:Property ; rdfs:domain apcnt:PublishedWork ;
+    rdfs:comment "The owner Smart Agent (Address) whose shelf serves the work and whose signature the release carries." .
+apcnt:title a rdf:Property ; rdfs:domain apcnt:PublishedWork ;
+    rdfs:comment "The document's name on the owner's shelf." .
+apcnt:releaseId a rdf:Property ; rdfs:domain apcnt:PublishedWork ;
+    rdfs:comment "The release id (spec 335 §6) the owner signed; reproduces from the content core." .
+apcnt:contentCommitment a rdf:Property ; rdfs:domain apcnt:PublishedWork ;
+    rdfs:comment "sha256 of the served bytes — equal to the release's committed root when projected." .
+apcnt:sourceEndpoint a rdf:Property ; rdfs:domain apcnt:PublishedWork ;
+    rdfs:comment "The owner's A2A interface the work was read from (resolved from the owner's on-chain a2aEndpoint)." .
+apcnt:observedAt a rdf:Property ; rdfs:domain apcnt:PublishedWork ;
+    rdfs:comment "When the indexer last read and verified the work (ISO 8601). A row is a cache as of this time." .
+apcnt:vectorId a rdf:Property ; rdfs:domain apcnt:PublishedWork ;
+    rdfs:comment "The id of one retrieval passage (Vectorize) derived from the work — how a withdrawal removes exactly what was written." .

package/tbox/context.ttl

@@ -365,13 +365,17 @@ apctx:CardRoomPlayerProfile a owl:Class ;
     rdfs:comment "Who the person is as a player, in their own words, ONE record across games (cardroom.profile; cr:PlayerProfile in the card-room ontology): how experienced they are at each game, what they want to get better at, how they want to be coached, anything else they told their coach to know. Written by the person at their Home; read by every coach they hire under that coach's grant; never written by a coach. Steers how a coach speaks and what a review looks for first; never authority, never a verdict." .
 
 # ── A card-room CLUB, kept by its own workspace agent ───────────────────────────────────────────────
-# A club is a `.workspace` agent its host custodies (aporg:Organization by kind). Who belongs is the
-# organization's own membership (aporg:OrganizationMembership, `org.membership:member:<sa>`, written at
-# the workspace-join ceremony); everything else the club IS — what it calls itself, when it meets, which
-# nights are on and who is coming — are these three records in the WORKSPACE's own vault, written by the
-# club's own agent when the card room acts as it under a service-agent wire. The card room keeps no copy:
-# a club exists at its Home or not at all (cr:Club, cr:ClubSchedule, cr:ClubNight in the card-room
-# ontology at skills.faithnet.io/ontology/card-room). Never authority: a night on the calendar seats nobody.
+# A club is an ORGANIZATION whose workspace is coordinated by a `.workspace` agent its host custodies
+# (ap:WorkspaceAgent ⊑ ap:ServiceAgent, aporg:coordinatedBy — a SERVICE, never an organization by kind, 2026-10-02)
+# and governed by the club's own organization agent (aporg:Workspace aporg:governedBy <org>). Who belongs is
+# the GOVERNING ORGANIZATION's membership (aporg:OrganizationMembership, `org.membership:member:<sa>` in the
+# organization's vault, written at the join ceremony) — a workspace agent holds no members; it names its
+# governor in its own `workspace.governor` pointer, and a club chartered before the pairing (no pointer) still
+# keeps its own records. Everything else the club IS — what it calls itself, when it meets, which nights are on
+# and who is coming — are these three records in the WORKSPACE agent's own vault, written by the club's agent
+# when the card room acts as it under a service-agent wire. The card room keeps no copy: a club exists at its
+# Home or not at all (cr:Club, cr:ClubSchedule, cr:ClubNight in the card-room ontology at
+# skills.faithnet.io/ontology/card-room). Never authority: a night on the calendar seats nobody.
 
 apctx:CardRoomClub a owl:Class ;
     rdfs:subClassOf prov:Entity ;
@@ -437,3 +441,51 @@ apctx:recalledAt a owl:DatatypeProperty ;
     rdfs:domain apctx:ConversationMemory ; rdfs:range xsd:dateTime ;
     rdfs:label "recalledAt" ;
     rdfs:comment "When the ask was made; the newest recall wins a pronoun." .
+
+# ═══ External MCP servers as connectors — spec 404 ═══
+# A server the holder attached: its tools compiled into capabilities that run under HER mandate (an act) or her
+# standing (a read); the credential is the runtime's, never in this record. What the record is NOT: an authorization —
+# the holder's grant per act is; and NOT a claim about the server's honesty — what it returns is evidence.
+
+apctx:McpConnector a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "McpConnector" ;
+    rdfs:comment "An external MCP server the owner attached as a connector (`connector.mcp:<id>` in her vault): its name, URL, self-description, and its tool list AS COMPILED — each tool a read (the server's readOnlyHint or the owner's declaration) or an act at risk high under the owner's mandate. The token is kept beside it by the runtime, never in it. Offered to the owner's own agent only; rebuilt on another Home from the record (the token re-entered)." .
+
+apctx:connectorName a owl:DatatypeProperty ;
+    rdfs:domain apctx:McpConnector ; rdfs:range xsd:string ;
+    rdfs:label "connectorName" ;
+    rdfs:comment "What the owner calls the server — the word the Ask uses (\"search on Ligonier\")." .
+
+apctx:connectorUrl a owl:DatatypeProperty ;
+    rdfs:domain apctx:McpConnector ; rdfs:range xsd:anyURI ;
+    rdfs:label "connectorUrl" .
+
+apctx:serverName a owl:DatatypeProperty ;
+    rdfs:domain apctx:McpConnector ; rdfs:range xsd:string ;
+    rdfs:label "serverName" ;
+    rdfs:comment "The server's own name from `initialize` — what it says it is, recorded as said." .
+
+apctx:attachedAt a owl:DatatypeProperty ;
+    rdfs:domain apctx:McpConnector ; rdfs:range xsd:dateTime ;
+    rdfs:label "attachedAt" .
+
+apctx:toolKind a owl:DatatypeProperty ;
+    rdfs:domain apctx:McpConnector ; rdfs:range xsd:string ;
+    rdfs:label "toolKind" ;
+    rdfs:comment "Per compiled tool: `read` (the owner's standing) or `act` (the owner's mandate, risk high) — and `why`: the server's annotation, the owner's declaration, or the default (act)." .
+
+# ═══ The agent's budget — gap analysis P1.4 (spec 396's numbers made a limit) ═══
+
+apctx:AgentBudget a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "AgentBudget" ;
+    rdfs:comment "What an agent may DO in a day, declared by its steward as a record in the agent's own vault (`agent.budget`): fresh asks, and vault calls (the unit every run's bill counts). Enforced at the door of an ask before a model is called; the day's counters are the serving plane's (rebuilt from the run records). NOT authority — a budget bounds how much, never what; a mandate still decides each act. NOT a value limit — money is bounded by mandate caveats on the treasury." .
+
+apctx:asksPerDay a owl:DatatypeProperty ;
+    rdfs:domain apctx:AgentBudget ; rdfs:range xsd:integer ;
+    rdfs:label "asksPerDay" .
+
+apctx:vaultCallsPerDay a owl:DatatypeProperty ;
+    rdfs:domain apctx:AgentBudget ; rdfs:range xsd:integer ;
+    rdfs:label "vaultCallsPerDay" .

package/tbox/core.ttl

@@ -16,11 +16,12 @@
 
 ap: a owl:Ontology ;
     rdfs:label "Agentic Primitives — core ontology" ;
-    owl:versionInfo "0.2.0" .
+    owl:versionInfo "0.2.1" .
 
 # ─── Classes ──────────────────────────────────────────────────────────
 
 ap:Agent a owl:Class ;
+    rdfs:subClassOf prov:Agent ;
     rdfs:label "Agent" ;
     rdfs:comment "The canonical ERC-4337 Smart Agent (ADR-0010). Every other node is a facet of, or edge to, an Agent. Identified by an ap:CanonicalAgentId." .
 
@@ -248,6 +249,21 @@ ap:Stewardship a owl:Class ;
     rdfs:subClassOf apsit:Situation ;
     rdfs:label "Stewardship" ;
     rdfs:comment "A person's oversight of an organization or a service she can act for, evidenced by the agent's oversight delegation to her (its digest is the record). Standing, never authority: what she MAY do as it is what its grants say." .
+# Spec 410 §8 — the VAULT form of a relationship: one credential, two signatures, two copies. Each principal holds
+# its side; nothing is one party's alone if two signed it. The chain edge (where a gate must follow it) carries only
+# this credential's digest; the public projection (spec 410 §4) reduces it to a blinded commitment.
+ap:RelationshipCredential a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "RelationshipCredential" ;
+    rdfs:comment "A countersigned record of a relationship (has-member ⇒ aporg:OrganizationMembership, steward-of ⇒ ap:Stewardship, chartered-under ⇒ ap:charteredUnder), held by BOTH parties in their own vaults and presented under grant from the holder's vantage point — the counterparty verifies the other party's signature against its Smart Agent and reads no chain edge. What it is NOT: authority (it grants nothing), the chain record (that stays where a gate follows it), or a one-sided claim (relationships.data is the person's private index; this is what the organization agreed)." .
+ap:relationshipKind a owl:DatatypeProperty ;
+    rdfs:domain ap:RelationshipCredential ; rdfs:range xsd:string ;
+    rdfs:label "relationshipKind" .
+ap:revokes a owl:ObjectProperty ;
+    rdfs:domain prov:Entity ; rdfs:range ap:RelationshipCredential ;
+    rdfs:label "revokes" ;
+    rdfs:comment "A two-sided (or labelled-unilateral) revocation of a relationship credential, written to both vaults; the departing party keeps her copy and the revocation, never the organization's records." .
+
 ap:steward a owl:ObjectProperty ;
     rdfs:domain ap:Stewardship ; rdfs:range ap:PersonAgent ;
     rdfs:label "steward" ;
@@ -321,6 +337,51 @@ ap:primaryPayer a owl:ObjectProperty ;
       its owner publishes. Both are roles on the same public ap:charteredUnder edge, so an agent kept
       unlisted carries neither — for those the owner names the account in the request.""" .
 
+# ─── Which of my people am I? (the custodian's own choice over the agents they custody) ───────────
+# A CUSTODIAN IS NOT LIMITED TO ONE PERSON. Somebody walks a long trail and is known on it as Summit;
+# somebody writes under another name; somebody plays a part in a game for six evenings and wants what that
+# character learned kept in its own vault rather than muddled into theirs. Each is a person-shaped agent of
+# its own — its own name, its own card, its own memory of the people it has met under that name — and all of
+# them are custodied by the same human, who can move between them.
+#
+# Until this existed nothing could answer "which of these is you". The Home resolved whichever agent was
+# linked to the credential FIRST, which is an accident of enrolment order rather than an answer, and every
+# surface that had to choose either guessed or asked. Guessing about identity is the one place a system must
+# not.
+#
+# WHY IT HANGS OFF ap:CustodyMember. The choice is not a fact about an agent in the abstract — an agent is
+# nobody's default, it is THIS credential's default. The pair (credential, agent) already has a public,
+# chain-reproducible name in this ontology, and that pair is exactly what is being chosen between. The choice
+# is modelled as a SITUATION of its own rather than a property ON that token, because CustodyMember answers
+# exactly one question by design and must go on answering only that one.
+ap:DefaultPersonChoice a owl:Class ;
+    rdfs:subClassOf apsit:Situation ;
+    rdfs:label "DefaultPersonChoice" ;
+    rdfs:comment """Of the person agents one credential custodies, the one that credential's Home opens as.
+
+      A PREFERENCE, never authority. Moving to another of your people is a change of CONTEXT, not of power:
+      every act still runs under a mandate signed for that request, by that agent, and no verifier reads
+      this. What it removes is a question only the custodian can answer, asked on every connection.
+
+      AT MOST ONE PER CREDENTIAL, and a reader that finds none falls back to however the credential resolved
+      before rather than inventing an answer — the absence of a choice is not a choice.
+
+      IT SAYS NOTHING ABOUT THE AGENTS THEMSELVES. A person agent that is somebody's default is not thereby
+      more real, more authoritative or more them than the others; the others are equally theirs, equally
+      person-shaped, and equally able to hold an organization, a service or a vault of their own.""" .
+ap:choiceOfCustody a owl:ObjectProperty ;
+    rdfs:domain ap:DefaultPersonChoice ; rdfs:range ap:CustodyMember ;
+    rdfs:label "choiceOfCustody" ;
+    rdfs:comment "The (credential, agent) pair chosen — the custody token, which is the only public, chain-reproducible name the relation has." .
+ap:choiceOfPerson a owl:ObjectProperty ;
+    rdfs:domain ap:DefaultPersonChoice ; rdfs:range ap:PersonAgent ;
+    rdfs:label "choiceOfPerson" ;
+    rdfs:comment "The person agent chosen, named directly so a reader does not have to reverse a hash to know who was meant." .
+ap:chosenAt a owl:DatatypeProperty ;
+    rdfs:domain ap:DefaultPersonChoice ; rdfs:range xsd:dateTime ;
+    rdfs:label "chosenAt" ;
+    rdfs:comment "When the custodian last chose. A later choice supersedes an earlier one; nothing is deleted, because which person somebody presented as at a given time is a fact about the past." .
+
 ap:charters a owl:ObjectProperty ;
     rdfs:label "charters" ;
     rdfs:domain ap:Agent ;

package/tbox/dcat-imports.ttl

@@ -0,0 +1,19 @@
+# T-box — the W3C DCAT 3 terms this substrate EMITS, declared (spec 415 S0).
+#
+# DCAT 3 (W3C Recommendation, 2024-08-22) describes a replay set: a versioned dataset of intents with a checksummed
+# distribution (the file). Declared in the wave that first emits them. Axioms: the Recommendation's.
+
+@prefix dcat: <http://www.w3.org/ns/dcat#> .
+@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:  <http://www.w3.org/2002/07/owl#> .
+
+<https://agenticprimitives.dev/ns/dcat-imports> a owl:Ontology ;
+    rdfs:label "Agentic Primitives — DCAT terms in use" ;
+    owl:versionInfo "0.1.0" ;
+    rdfs:comment "Declarations of the W3C DCAT 3 terms replay-set descriptions carry. Spec 415 S0; pinned in docs/standards-lock.json#provenance.dcat." .
+
+dcat:Dataset a owl:Class ; rdfs:label "Dataset (DCAT)" .
+dcat:Distribution a owl:Class ; rdfs:label "Distribution (DCAT)" .
+dcat:distribution a owl:ObjectProperty ; rdfs:label "distribution (DCAT)" .
+dcat:version a owl:DatatypeProperty ; rdfs:label "version (DCAT)" .
+dcat:downloadURL a owl:ObjectProperty ; rdfs:label "downloadURL (DCAT)" .

package/tbox/dqv-imports.ttl

@@ -0,0 +1,29 @@
+# T-box — the W3C Data Quality Vocabulary terms this substrate EMITS, declared (spec 414 A2).
+#
+# Same rule as prov-imports.ttl and skos-imports.ttl: DQV (W3C Working Group Note, 2016-12-15) means what the Note
+# says and nothing here redefines it. Declared so the bindings, the standard-anchoring gate and the measurement
+# shapes can tell an imported standard term from a typo. Declared in the wave that first emits them (A2): a run's
+# measurements (`run.measures:<runRef>`) are dqv:QualityMeasurements computedOn its activities.
+#
+# Domains and ranges are omitted: the Note's own axioms govern.
+
+@prefix dqv:  <http://www.w3.org/ns/dqv#> .
+@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:  <http://www.w3.org/2002/07/owl#> .
+
+<https://agenticprimitives.dev/ns/dqv-imports> a owl:Ontology ;
+    rdfs:label "Agentic Primitives — DQV terms in use" ;
+    owl:versionInfo "0.1.0" ;
+    rdfs:comment "Declarations of the W3C DQV terms the substrate's measurement records carry. Spec 414 A2; pinned in docs/standards-lock.json#provenance.dqv." .
+
+dqv:QualityMeasurement a owl:Class ; rdfs:label "QualityMeasurement (DQV)" ;
+    rdfs:comment "A value of a metric computed on a resource. Here: one number about a run or a step, computed from its trace alone." .
+dqv:Metric a owl:Class ; rdfs:label "Metric (DQV)" .
+dqv:Dimension a owl:Class ; rdfs:label "Dimension (DQV)" .
+dqv:QualityMeasurementDataset a owl:Class ; rdfs:label "QualityMeasurementDataset (DQV)" ;
+    rdfs:comment "A set of measurements. Here: all of one run's measurements, one record." .
+
+dqv:computedOn a owl:ObjectProperty ; rdfs:label "computedOn (DQV)" .
+dqv:isMeasurementOf a owl:ObjectProperty ; rdfs:label "isMeasurementOf (DQV)" .
+dqv:inDimension a owl:ObjectProperty ; rdfs:label "inDimension (DQV)" .
+dqv:value a owl:DatatypeProperty ; rdfs:label "value (DQV)" .

package/tbox/earl-imports.ttl

@@ -0,0 +1,31 @@
+# T-box — the W3C EARL 1.0 terms this substrate EMITS, declared (spec 414 §3.4 / 415 SEL-1).
+#
+# EARL (W3C Working Group Note, 2017-02-02) is the verdict form of a judgment whose criterion is a TEST: an
+# earl:Assertion that a subject passed / failed / could not be told. First emitted by the mechanical SKILL-SELECTION
+# judge (spec 415 §3a). Declared here so bindings, anchoring and the judgment shapes see them. Axioms: the Note's.
+
+@prefix earl: <http://www.w3.org/ns/earl#> .
+@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:  <http://www.w3.org/2002/07/owl#> .
+
+<https://agenticprimitives.dev/ns/earl-imports> a owl:Ontology ;
+    rdfs:label "Agentic Primitives — EARL terms in use" ;
+    owl:versionInfo "0.1.0" ;
+    rdfs:comment "Declarations of the W3C EARL 1.0 terms judgment records carry. Spec 414 §3.4; pinned in docs/standards-lock.json#provenance.earl." .
+
+earl:Assertion a owl:Class ; rdfs:label "Assertion (EARL)" .
+earl:TestResult a owl:Class ; rdfs:label "TestResult (EARL)" .
+earl:OutcomeValue a owl:Class ; rdfs:label "OutcomeValue (EARL)" .
+earl:TestMode a owl:Class ; rdfs:label "TestMode (EARL)" .
+earl:assertedBy a owl:ObjectProperty ; rdfs:label "assertedBy (EARL)" .
+earl:subject a owl:ObjectProperty ; rdfs:label "subject (EARL)" .
+earl:test a owl:ObjectProperty ; rdfs:label "test (EARL)" .
+earl:result a owl:ObjectProperty ; rdfs:label "result (EARL)" .
+earl:outcome a owl:ObjectProperty ; rdfs:label "outcome (EARL)" .
+earl:mode a owl:ObjectProperty ; rdfs:label "mode (EARL)" .
+earl:passed a earl:OutcomeValue ; rdfs:label "passed (EARL)" .
+earl:failed a earl:OutcomeValue ; rdfs:label "failed (EARL)" .
+earl:cantTell a earl:OutcomeValue ; rdfs:label "cantTell (EARL)" .
+earl:inapplicable a earl:OutcomeValue ; rdfs:label "inapplicable (EARL)" .
+earl:automatic a earl:TestMode ; rdfs:label "automatic (EARL)" .
+earl:manual a earl:TestMode ; rdfs:label "manual (EARL)" .