@agenticprimitives/ontology 1.0.0-alpha.25 → 1.0.0-alpha.27

package/tbox/execution.ttl

@@ -38,7 +38,7 @@
 
 apexec: a owl:Ontology ;
   rdfs:label "Agentic Primitives — execution ontology (W0 subset)" ;
-  owl:versionInfo "0.1.0" ;
+  owl:versionInfo "0.3.1" ;
   rdfs:comment "The execution plane: activities that realize capabilities, the runtimes that bore responsibility, and the completion conditions that separate a realization from an attempt. W0 SUBSET — only the terms the shipped realization contracts reference. Spec 330 W1 extends it." ;
   skos:scopeNote "WITHIN-AGENT plane (coordination-vs-orchestration.md). Orchestration sequences one agent's run: the executor's knowledge is local — harness-activated Agent Skill packages (apguide:AgentSkillPackage / SKILL.md, pinned by apexec:usedPlanContentHash) and injected tools — and the loop never queries naming/registry/apdisc: discovery. Distinct from apcoord: (the BETWEEN-AGENTS coordination plane); an apexec:ExecutionPlan compiles FROM an apcoord:PlanStep (plan.ttl), it never is one." .
 
@@ -205,6 +205,73 @@ apexec:errorClass a owl:DatatypeProperty ;
   rdfs:label "errorClass" ;
   rdfs:comment "The CLASS of a step's failure (`authority_denied`, `tool_error`, `input_required` …), never its message: a message can carry a counterparty's name or an argument, a class cannot." .
 
+# ─── Spec 410 §2 — the adapter's observation ──────────────────────────
+# A resolved value is not "done". For an externally ordered effect the harness records WHAT THE ADAPTER SAW, in
+# four words, and which one the receipt attests. "Verified at commit" may be said of `confirmed` only.
+
+apexec:ObservedOutcome a owl:Class ;
+  rdfs:subClassOf skos:Concept ;
+  rdfs:label "ObservedOutcome" ;
+  rdfs:comment "What an adapter observed of the effect it made (spec 410 §2): attempted (the call left; nothing came back the adapter can vouch for), accepted (the provider acknowledged and has not committed), committed (the provider says it is done), confirmed (the harness read the effect back independently of the call that made it). What it is NOT: an authorization input, or a claim about the outcome class the tool establishes (apexec:OutcomeClass says what a success MEANS; this says what was SEEN)." .
+apexec:attempted a apexec:ObservedOutcome ; rdfs:label "attempted" .
+apexec:accepted a apexec:ObservedOutcome ; rdfs:label "accepted" .
+apexec:committed a apexec:ObservedOutcome ; rdfs:label "committed" .
+apexec:confirmed a apexec:ObservedOutcome ; rdfs:label "confirmed" .
+
+apexec:observedOutcome a owl:ObjectProperty ;
+  rdfs:domain prov:Activity ; rdfs:range apexec:ObservedOutcome ;
+  rdfs:label "observedOutcome" ;
+  rdfs:comment "The ObservedOutcome this step's adapter reported, bounded by what its tool establishes — a submission never records more than accepted from the call alone." .
+apexec:providerRef a owl:DatatypeProperty ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:string ;
+  rdfs:label "providerRef" ;
+  rdfs:comment "The provider's own identifier for the effect (a message id, a task id, a record version, a transaction hash) — what a stranger would quote to the provider. Never a secret." .
+apexec:observedAt a owl:DatatypeProperty ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:dateTime ;
+  rdfs:label "observedAt" ;
+  rdfs:comment "The harness clock when the adapter returned what it saw." .
+
+# ─── Spec 410 §4.4 — the estate an act was performed in ──────────────
+# A person's Home lives in ONE estate; she participates in any estate that admits her (the thesis's design
+# commitment, THESIS-9). An act she performs in estate B is redeemed under a B-chain mandate and anchored in B's
+# receipt registry, and its record lands in HER vault, held in estate A. The record must therefore say where the
+# act happened, because the vault it lives in no longer implies it.
+
+apexec:estate a owl:DatatypeProperty ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:string ;
+  rdfs:label "estate" ;
+  rdfs:comment "THE ESTATE THIS RUN WAS PERFORMED IN (spec 410 §4.4): the estate id — keccak256(\"eip155:<chainId>:<governance>\"), the same derivation EstateProjectionRegistry.estateIdOf and the estate-projection package use — of the chain whose mandate was redeemed and whose registry anchored the receipt. Stamped by the RUNTIME that ran the act, from its own deployment, on the HarnessRun activity; a step inherits its run's. Absent on a record older than this term, and on a runtime that has not declared its governance. What it is NOT: authority (a verifier reads the mandate's chain from the mandate's own domain, never from this), and NOT the chain the acting agent's address is named under (the agent IRIs carry that; an agent has the same address in every estate by construction, ADR-0010 + CREATE2)." .
+
+apexec:ReceiptAnchor a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "ReceiptAnchor" ;
+  rdfs:comment "WHERE A RUN'S BUNDLE IS ANCHORED, as a record beside the bundle (the `run.anchor:<runRef>` vault record): the bundle's digest, the ReceiptAnchorRegistry it was written in (`eip155:<chainId>:<registry>`), the agent that anchored it, the transaction, and the estate (apexec:estate). A bundle cannot carry its own digest's anchor, so the citation is a second record — and it is the record a Home in another estate reads to know WHICH chain to ask. A holder verifies by recomputing the digest and reading the registry; the citation is a claim about where to look, never proof by itself." .
+
+apexec:anchorDigest a owl:DatatypeProperty ;
+  rdfs:domain apexec:ReceiptAnchor ; rdfs:range xsd:string ;
+  rdfs:label "anchorDigest" ;
+  rdfs:comment "The bundle digest as anchored (bytes32 hex) — recomputed by any holder of the bundle over its canonical bytes." .
+
+apexec:anchorRegistry a owl:DatatypeProperty ;
+  rdfs:domain apexec:ReceiptAnchor ; rdfs:range xsd:string ;
+  rdfs:label "anchorRegistry" ;
+  rdfs:comment "The ReceiptAnchorRegistry the digest is written in, chain-qualified: `eip155:<chainId>:<registry address>`. The chain named here is the ESTATE's chain (spec 410 §4.4), which may differ from the chain the vault's Home runs on." .
+
+apexec:anchoredByAgent a owl:ObjectProperty ;
+  rdfs:domain apexec:ReceiptAnchor ; rdfs:range ap:Agent ;
+  rdfs:label "anchoredByAgent" ;
+  rdfs:comment "The runtime's harness agent that anchored the digest — the row's key on a generation-2+ registry (spec 408 §1.5). Distinct from apvr:anchoredBy, which names an attestation UID on a public KB row." .
+
+apexec:anchorTransaction a owl:DatatypeProperty ;
+  rdfs:domain apexec:ReceiptAnchor ; rdfs:range xsd:string ;
+  rdfs:label "anchorTransaction" ;
+  rdfs:comment "The transaction that wrote the anchor, by hash, on the estate's chain." .
+
+apexec:disputedBy a owl:ObjectProperty ;
+  rdfs:domain prov:Activity ; rdfs:range prov:Entity ;
+  rdfs:label "disputedBy" ;
+  rdfs:comment "Spec 410 §10 — the dispute interaction (profile dispute/1.0.0) opened over this run's receipt, and the determination a named steward recorded in it. Linked evidence; a determination reverses nothing — a reversal is a new act under a new mandate." .
+
 apexec:StepReceipt a owl:Class ;
   rdfs:subClassOf prov:Entity ;
   rdfs:label "StepReceipt" ;
@@ -297,3 +364,299 @@ apexec:artifactDigest a owl:DatatypeProperty ;
   rdfs:domain apexec:RunArtifact ; rdfs:range xsd:string ;
   rdfs:label "artifactDigest" ;
   rdfs:comment "sha256 of the canonical JSON of the body. The same bytes the step receipt's outputDigest commits to, so the graph, the receipt and the vault record agree on what was produced." .
+
+# ═══ Build artifacts — spec 398 §9 (ap-build B3) ═══
+
+apexec:BuildArtifact a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "BuildArtifact" ;
+  rdfs:comment "What ONE build run left, kept as its own record in the WORKSPACE's vault (`build.run:<runId>`; spec 398 §9.2 / §7.2): the repository and base it was built from, the task in the asker's words, the files the model wrote (whole content), and the test evidence AS RECORDED — the command, its exit code and the tail of its output (T28: never an assertion that tests passed). The build service produced it in a sandbox and returned it; the runtime's step prov:generated the record under the workspace's mandate. NOT a deployment (T29 — promotion is its own act) and NOT a pull request: a branch pushed from it is a submission (spec 367 §6) made by `github.pr.open`, whose receipt names this record. Distinct from apexec:RunArtifact (a step's raw body offloaded for size) and from apful:Artifact (a deliverable a fulfillment promised)." .
+
+apexec:buildRepository a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "buildRepository" ;
+  rdfs:comment "The repository the run built in, `owner/name`, with `buildBase` the branch it started from." .
+
+apexec:buildBase a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "buildBase" .
+
+apexec:buildTask a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "buildTask" ;
+  rdfs:comment "The task as the asker said it — what the model was given, never what it claims to have done (that is `buildSummary`, the model's own sentence, rendered as the model's)." .
+
+apexec:buildSummary a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "buildSummary" .
+
+apexec:testCommand a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "testCommand" ;
+  rdfs:comment "What was RUN in the sandbox after the files were written — the repository's own test script when it has one, else a syntax check of what changed. With `testExitCode` and `testOutputTail`, the recorded evidence." .
+
+apexec:testExitCode a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:integer ;
+  rdfs:label "testExitCode" .
+
+apexec:testOutputTail a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "testOutputTail" .
+
+apexec:buildModel a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "buildModel" ;
+  rdfs:comment "The model that wrote the files (`provider/model`) — recorded because a reader judging the change wants to know who wrote it; it is not an author with authority." .
+
+apexec:BuildPromotion a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "BuildPromotion" ;
+  rdfs:comment "What ONE promotion did (spec 398 §9.4, T29; `build.promotion:<runId>` in the WORKSPACE's vault): the exact tuple the steward's signature was over — the commit, the configuration digest (the artifact's files), the environment reached (a branch today), the permitted migration (none) — and what the forge did (the pull request merged, the merge commit). A promotion is the act that reaches an environment; a build never is. Any change to the tuple voids the signature: a promotion of another commit is another act." .
+
+apexec:promotedCommit a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildPromotion ; rdfs:range xsd:string ;
+  rdfs:label "promotedCommit" .
+
+apexec:promotedConfigDigest a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildPromotion ; rdfs:range xsd:string ;
+  rdfs:label "promotedConfigDigest" ;
+  rdfs:comment "The digest of the build artifact's files (`apexec:artifactDigest` of the build run) — the configuration the signature bound." .
+
+apexec:promotedEnvironment a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildPromotion ; rdfs:range xsd:string ;
+  rdfs:label "promotedEnvironment" ;
+  rdfs:comment "The environment reached — `branch:<name>` until a deployment target is attached to the workspace." .
+
+apexec:permittedMigration a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildPromotion ; rdfs:range xsd:string ;
+  rdfs:label "permittedMigration" .
+
+apexec:promotedUnder a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildPromotion ; rdfs:range xsd:string ;
+  rdfs:label "promotedUnder" ;
+  rdfs:comment "The intent digest the promotion's mandate was bound to — the ask that named the run and the commit." .
+
+# ═════════════════════════════════════════════════════════════════════════════════════════════════
+# Spec 414 A1 — the trace from the door: how a run ARRIVED, which MODEL calls it made, under which
+# VARIANT, from which STARTING STATE, which HARNESS CAPABILITIES engaged and to what effect, and which
+# SKILL contract governed each step. Evidence, never authority: no gate reads any of these, and a
+# variant changes behaviour, never permission (spec 414 §2 rule 5). No words: messages, prompts and
+# replies appear only as ids and digests (spec 381 §1; shapes R6/R8).
+# ═════════════════════════════════════════════════════════════════════════════════════════════════
+
+apexec:Door a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "Door" ;
+  rdfs:comment "How a run arrived: the A2A message (with its message, context and task ids), a direct ask, a routed hop from another agent's run, a trigger, or a resume. The run prov:used it (apexec:arrivedBy). It carries ids and the kind — never the message's words; the intent is cited by apexec:intentDigest on the run. NOT the asker (that is prov:actedOnBehalfOf) and NOT a credential: arriving by a door authorizes nothing." .
+
+apexec:arrivedBy a owl:ObjectProperty ;
+  rdfs:subPropertyOf prov:used ;
+  rdfs:domain apexec:ServiceExecution ; rdfs:range apexec:Door ;
+  rdfs:label "arrivedBy" .
+
+apexec:doorKind a owl:DatatypeProperty ;
+  rdfs:domain apexec:Door ; rdfs:range xsd:string ;
+  rdfs:label "doorKind" ;
+  rdfs:comment "a2a-message | harness-ask | routed | trigger | resume | home-mcp | channel-mention — how the request reached the harness." .
+
+apexec:a2aMessageId a owl:DatatypeProperty ;
+  rdfs:domain apexec:Door ; rdfs:range xsd:string ;
+  rdfs:label "a2aMessageId" ;
+  rdfs:comment "The A2A Message.messageId the run answered (A2A 1.0). An id, never the message." .
+
+apexec:a2aContextId a owl:DatatypeProperty ;
+  rdfs:domain apexec:Door ; rdfs:range xsd:string ;
+  rdfs:label "a2aContextId" ;
+  rdfs:comment "The A2A contextId — groups the runs of one conversation (a LangSmith 'thread')." .
+
+apexec:a2aTaskId a owl:DatatypeProperty ;
+  rdfs:domain apexec:Door ; rdfs:range xsd:string ;
+  rdfs:label "a2aTaskId" .
+
+apexec:ModelInvocation a owl:Class ;
+  rdfs:subClassOf prov:Activity ;
+  rdfs:label "ModelInvocation" ;
+  rdfs:comment "One call to a language model the run made — to plan, to compose the reply, or for a structured choice inside a step (PROV-AGENT's model-call activity). Recorded by role, model, provider, the digest of the prompt TEMPLATE (never the rendered prompt), token counts and the route's reason. NOT a decision: a model proposes; the mandate authorizes (spec 350)." .
+
+apexec:hasModelInvocation a owl:ObjectProperty ;
+  rdfs:domain prov:Activity ; rdfs:range apexec:ModelInvocation ;
+  rdfs:label "hasModelInvocation" .
+
+apexec:invocationRole a owl:DatatypeProperty ;
+  rdfs:domain apexec:ModelInvocation ; rdfs:range xsd:string ;
+  rdfs:label "invocationRole" ;
+  rdfs:comment "plan | compose | structured | judge. judge = the call that chose which skill (if any) handles the request; structured = a step's own structured call." .
+
+apexec:modelId a owl:DatatypeProperty ;
+  rdfs:domain apexec:ModelInvocation ; rdfs:range xsd:string ;
+  rdfs:label "modelId" .
+
+apexec:modelProvider a owl:DatatypeProperty ;
+  rdfs:domain apexec:ModelInvocation ; rdfs:range xsd:string ;
+  rdfs:label "modelProvider" .
+
+apexec:promptTemplateDigest a owl:DatatypeProperty ;
+  rdfs:domain apexec:ModelInvocation ; rdfs:range xsd:string ;
+  rdfs:label "promptTemplateDigest" ;
+  rdfs:comment "A digest of the prompt the model was given, so two runs can be seen to share (or not share) a prompt. Never the prompt." .
+
+apexec:tokensIn a owl:DatatypeProperty ;
+  rdfs:domain apexec:ModelInvocation ; rdfs:range xsd:integer ;
+  rdfs:label "tokensIn" .
+
+apexec:tokensOut a owl:DatatypeProperty ;
+  rdfs:domain apexec:ModelInvocation ; rdfs:range xsd:integer ;
+  rdfs:label "tokensOut" .
+
+apexec:routeReason a owl:DatatypeProperty ;
+  rdfs:domain apexec:ModelInvocation ; rdfs:range xsd:string ;
+  rdfs:label "routeReason" ;
+  rdfs:comment "Why this provider carried the call (spec 388) — a reason code, never words of the ask." .
+
+apexec:Variant a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "Variant" ;
+  rdfs:comment "The configuration a run ran under, as the things a comparison may change one at a time: the playbook (by commitment), the planner kind, the model route policy, the harness build, and any harness-capability toggles. Named by its digest (RFC 8785 JCS + SHA-256), so two runs share a variant exactly when they share every part. The production variant is simply the current one. NOT authority: a variant changes behaviour, never what a mandate permits." .
+
+apexec:underVariant a owl:ObjectProperty ;
+  rdfs:subPropertyOf prov:used ;
+  rdfs:domain apexec:ServiceExecution ; rdfs:range apexec:Variant ;
+  rdfs:label "underVariant" .
+
+apexec:variantDigest a owl:DatatypeProperty ;
+  rdfs:domain apexec:Variant ; rdfs:range xsd:string ;
+  rdfs:label "variantDigest" .
+
+apexec:plannerKind a owl:DatatypeProperty ;
+  rdfs:domain apexec:Variant ; rdfs:range xsd:string ;
+  rdfs:label "plannerKind" ;
+  rdfs:comment "supplied | compiled | model | rule-based — who proposes plans under this variant." .
+
+apexec:routePolicy a owl:DatatypeProperty ;
+  rdfs:domain apexec:Variant ; rdfs:range xsd:string ;
+  rdfs:label "routePolicy" .
+
+apexec:harnessBuild a owl:DatatypeProperty ;
+  rdfs:domain apexec:Variant ; rdfs:range xsd:string ;
+  rdfs:label "harnessBuild" ;
+  rdfs:comment "The runtime's build identifier (a deployment version id or commit)." .
+
+apexec:capabilityToggle a owl:DatatypeProperty ;
+  rdfs:domain apexec:Variant ; rdfs:range xsd:string ;
+  rdfs:label "capabilityToggle" ;
+  rdfs:comment "`<capability notation>=<setting>` — e.g. `retrieval/kb=off`. One per toggle; absent ⇒ the default." .
+
+apexec:StartingState a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "StartingState" ;
+  rdfs:comment "The records a run began from when they were seeded for a comparison (a scenario's fixture), named by digest. Absent for live runs. Holding it fixed is one half of the change-one-component rule (spec 414 §7)." .
+
+apexec:fromStartingState a owl:ObjectProperty ;
+  rdfs:subPropertyOf prov:used ;
+  rdfs:domain apexec:ServiceExecution ; rdfs:range apexec:StartingState ;
+  rdfs:label "fromStartingState" .
+
+apexec:startingStateDigest a owl:DatatypeProperty ;
+  rdfs:domain apexec:StartingState ; rdfs:range xsd:string ;
+  rdfs:label "startingStateDigest" .
+
+apexec:governedBySkill a owl:ObjectProperty ;
+  rdfs:subPropertyOf prov:used ;
+  rdfs:domain prov:Activity ; rdfs:range apguide:AgentSkillPackage ;
+  rdfs:label "governedBySkill" ;
+  rdfs:comment "The SKILL.md contract (id, version, content digest — the IRI says all three) whose execution contract governed this step. Finer than the run's playbook (prov:hadPlan). NOT the advertised capability (apexec:realizesCapability) and NOT the operation (the plan step's tool): a capability is what is advertised, a skill is how it is done, the tool is what was called." .
+
+# ── Harness capabilities: what the harness DID, as a vocabulary (spec 414 §3.2) ─────────────────
+
+apexec:HarnessCapability a owl:Class ;
+  rdfs:subClassOf skos:Concept ;
+  rdfs:label "HarnessCapability" ;
+  rdfs:comment "A function of the harness itself (a planner, plan admission, retrieval, routing, memory, judgment …), as distinct from a capability an agent ADVERTISES (aps:Capability). Engaging one is recorded (apexec:CapabilityEngagement) so effectiveness can be read per capability. Declared once, here; code stamps engagements by notation." .
+
+apexec:HarnessCapabilities a skos:ConceptScheme ;
+  rdfs:label "Harness capabilities" .
+
+apexec:EngagementEffect a owl:Class ;
+  rdfs:subClassOf skos:Concept ;
+  rdfs:label "EngagementEffect" ;
+  rdfs:comment "What an engaged harness capability did to the run: changed the plan, changed a step, changed the answer, changed nothing, or refused." .
+
+apexec:ee-changedPlan a apexec:EngagementEffect ; skos:notation "changed-plan" ; skos:prefLabel "changed the plan" .
+apexec:ee-changedStep a apexec:EngagementEffect ; skos:notation "changed-step" ; skos:prefLabel "changed a step" .
+apexec:ee-changedAnswer a apexec:EngagementEffect ; skos:notation "changed-answer" ; skos:prefLabel "changed the answer" ; skos:definition "It shaped what the reply says, not what was done — retrieval grounding the composer (spec 413: passages ground what is said, never what is done)." .
+apexec:ee-noChange a apexec:EngagementEffect ; skos:notation "no-change" ; skos:prefLabel "changed nothing" .
+apexec:ee-refused a apexec:EngagementEffect ; skos:notation "refused" ; skos:prefLabel "refused" .
+
+apexec:CapabilityEngagement a owl:Class ;
+  rdfs:subClassOf prov:Influence ;
+  rdfs:label "CapabilityEngagement" ;
+  rdfs:comment "One engagement of a harness capability on a run or a step — the qualified form (PROV's Influence pattern) so each engagement carries its capability, the capability's version and its effect. Engaged-with-no-change is still recorded: 'did this capability matter?' is a query, not an opinion." .
+
+apexec:hasEngagement a owl:ObjectProperty ;
+  rdfs:domain prov:Activity ; rdfs:range apexec:CapabilityEngagement ;
+  rdfs:label "hasEngagement" .
+
+apexec:ofCapability a owl:ObjectProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range apexec:HarnessCapability ;
+  rdfs:label "ofCapability" .
+
+apexec:engagementEffect a owl:ObjectProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range apexec:EngagementEffect ;
+  rdfs:label "engagementEffect" .
+
+apexec:capabilityVersion a owl:DatatypeProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range xsd:string ;
+  rdfs:label "capabilityVersion" .
+
+# The scheme. `skos:notation` is the stable key code stamps by; the IRI local name is DERIVED from it —
+# `hc-` + the notation in camelCase over '/' and '-' (`planner/compiled-shape` → `hc-plannerCompiledShape`), and
+# `ee-` likewise for effects — so a serializer names the concept without a lookup table (asserted in the suite). Open: a new harness capability is a new concept here and nothing else.
+apexec:hc-plannerSupplied a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "planner/supplied" ; skos:prefLabel "supplied plan" ; skos:definition "The plan was given (a screen, a test, a replay), not proposed." .
+apexec:hc-plannerCompiledShape a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "planner/compiled-shape" ; skos:prefLabel "compiled plan shape" ; skos:definition "An ontology-compiled one-correct-plan shape proposed the plan (spec 355)." .
+apexec:hc-plannerModel a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "planner/model" ; skos:prefLabel "model planner" ; skos:definition "A language model proposed the plan (spec 388 route)." .
+apexec:hc-planAdmission a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "plan-admission" ; skos:prefLabel "plan admission" ; skos:definition "The behaviour plane admitted or refused the proposed plan (spec 367 W1); a refusal that forced a replan changed the plan." .
+apexec:hc-playbook a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "playbook" ; skos:prefLabel "playbook" ; skos:definition "A compiled archetype governed the run (spec 354)." .
+apexec:hc-retrievalKb a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "retrieval/kb" ; skos:prefLabel "public-tier retrieval" ; skos:definition "Passages or facts were read from the public knowledge tier (specs 357, 413)." .
+apexec:hc-retrievalVaultSelector a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "retrieval/vault-selector" ; skos:prefLabel "private-tier selector" ; skos:definition "Records were read from a vault by a compiled selector (spec 356)." .
+apexec:hc-standingInstructions a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "standing-instructions" ; skos:prefLabel "standing instructions" ; skos:definition "A standing instruction applied (spec 394)." .
+apexec:hc-confirmationMemory a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "confirmation-memory" ; skos:prefLabel "confirmation memory" ; skos:definition "A prior confirmation was reused (spec 385)." .
+apexec:hc-decisionRules a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "decision-rules" ; skos:prefLabel "decision rules" ; skos:definition "An ordered rule decided a decision point (spec 363)." .
+apexec:hc-routing a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "routing" ; skos:prefLabel "routing" ; skos:definition "Work was routed to another agent by its records (spec 366)." .
+apexec:hc-handoff a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "handoff" ; skos:prefLabel "hand-off" ; skos:definition "A step was handed to another agent's run." .
+apexec:hc-fanOut a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "fan-out" ; skos:prefLabel "fan-out" ; skos:definition "One step was split across many items or agents, each re-verified (spec 380)." .
+apexec:hc-contextOffload a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "context-offload" ; skos:prefLabel "context offload" ; skos:definition "A large result went to the vault and the run carried its summary (spec 391)." .
+apexec:hc-durableResume a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "durable-resume" ; skos:prefLabel "durable resume" ; skos:definition "The run resumed from a checkpoint, replaying completed steps (spec 362, 370 P1)." .
+apexec:hc-approval a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "approval" ; skos:prefLabel "approval" ; skos:definition "A step waited on a person's signature (specs 350, 393)." .
+apexec:hc-judgment a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "judgment" ; skos:prefLabel "judgment" ; skos:definition "A judgment was made about the run or a step against a stated criterion (spec 414 §3.4) — implementation-neutral; defined by principles J1–J8, filled by a later spec." .
+
+# ── Spec 415 §3a — SKILL SELECTION as a harness capability, and what it offered, chose and rejected ──
+# The APPROACH is the concept (implementation-neutral names: the mechanism behind each is a binding); a comparison
+# toggles it and holds the rest fixed. The engagement names the candidates it OFFERED, the one(s) it CHOSE and the
+# neighbour it REJECTED when two collided — as capability / skill IRIs, never words.
+apexec:hc-skillSelectionModel a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "skill-selection/model" ; skos:prefLabel "selection by description" ; skos:definition "A model chose the skill from descriptions — the baseline." .
+apexec:hc-skillSelectionOntology a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "skill-selection/ontology" ; skos:prefLabel "selection by ontology and canonical id" ; skos:definition "The skill was chosen by what the ontology says it is for and by its canonical identity (spec 355 compiled shapes are one such mechanism)." .
+apexec:hc-skillSelectionRules a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "skill-selection/rules" ; skos:prefLabel "selection by rules" ; skos:definition "Declared rules chose the skill." .
+apexec:hc-skillSelectionJudgment a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "skill-selection/judgment" ; skos:prefLabel "selection by judgment" ; skos:definition "A judgment against stated criteria chose or confirmed the skill (spec 414 §3.4)." .
+
+apexec:offeredCandidate a owl:ObjectProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range prov:Entity ;
+  rdfs:label "offeredCandidate" ; rdfs:comment "A skill / capability the selection could choose from (by IRI)." .
+apexec:chose a owl:ObjectProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range prov:Entity ;
+  rdfs:label "chose" ; rdfs:comment "What the selection chose (by IRI). More than one ⇒ over-selection." .
+apexec:rejectedNeighbour a owl:ObjectProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range prov:Entity ;
+  rdfs:label "rejectedNeighbour" ; rdfs:comment "The colliding candidate the selection passed over, when it can say so." .
+
+# Spec 415 A4 — THE INTENT, TYPED IN THE DOMAIN ONTOLOGY. A selection by judgment first says what the request asks FOR
+# as one domain class (the deliverable or activity) and what it is ABOUT; the skills whose declared coverage includes that
+# class are the only candidates. The values are CLASS IRIs from the agent's domain ontology (or apexec:OutsideDomain),
+# never words. Evidence of how the selection read the request; never authority.
+apexec:inferredRequest a owl:ObjectProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range rdfs:Class ;
+  rdfs:label "inferredRequest" ; rdfs:comment "The domain class the selection read the request as asking FOR — or apexec:OutsideDomain." .
+apexec:inferredAbout a owl:ObjectProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range rdfs:Class ;
+  rdfs:label "inferredAbout" ; rdfs:comment "A domain class the selection read the request as being ABOUT." .
+apexec:OutsideDomain a rdfs:Class ;
+  rdfs:label "OutsideDomain" ; rdfs:comment "What a request asks for when it is none of the domain's classes: no skill may be chosen for it." .

package/tbox/governance.ttl

@@ -0,0 +1,67 @@
+@prefix apgov: <https://agenticprimitives.dev/ns/governance#> .
+@prefix ap:    <https://agenticprimitives.dev/ns/core#> .
+@prefix rdf:   <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs:  <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:   <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:   <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:  <http://www.w3.org/ns/prov#> .
+@prefix skos:  <http://www.w3.org/2004/02/skos/core#> .
+
+<https://agenticprimitives.dev/ns/governance> a owl:Ontology ;
+    owl:versionInfo "0.1.0" ;
+    rdfs:label "Agentic Primitives — governance of the common model and of an estate (spec 410 §10)" ;
+    rdfs:comment "The twelfth principle's vocabulary: a shared term has a steward, a version and an adoption process; a participant may hold a LOCAL MEANING of a common term and both are recorded with their names; disputes have a path that does not run through the operator; who stewards what is public. Nothing here is authority — a steward record grants nothing, an adopted version is what a verifier binds, not who may act." .
+
+# ─── Versions and adoption ─────────────────────────────────────────────────────────────────────────
+
+apgov:AdoptedVersion a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "AdoptedVersion" ;
+    rdfs:comment "An ESTATE's adoption of one ontology manifest (spec 410 §5's `ONTOLOGY_MANIFEST_DIGEST`): which T-box set its verifiers bind into every mandate, adopted by a governance proposal (spec 410 §9) and anchored in the estate's public projection. A verifier redeeming a mandate reads the ESTATE's adopted manifest, never the package's latest — a T-box change is a proposal, not a deploy." .
+apgov:manifestDigest a owl:DatatypeProperty ;
+    rdfs:domain apgov:AdoptedVersion ; rdfs:range xsd:string ;
+    rdfs:label "manifestDigest" .
+apgov:adoptedAt a owl:DatatypeProperty ;
+    rdfs:domain apgov:AdoptedVersion ; rdfs:range xsd:dateTime ;
+    rdfs:label "adoptedAt" .
+apgov:proposalRef a owl:DatatypeProperty ;
+    rdfs:domain apgov:AdoptedVersion ; rdfs:range xsd:string ;
+    rdfs:label "proposalRef" ;
+    rdfs:comment "The governance proposal that adopted it (the timelock's operation id, spec 410 §9)." .
+
+# ─── Local meanings — two organizations, both right ───────────────────────────────────────────────
+
+apgov:LocalMeaning a owl:Class ;
+    rdfs:subClassOf skos:Concept ;
+    rdfs:label "LocalMeaning" ;
+    rdfs:comment "An organization's OWN meaning of a COMMON term, recorded as a SKOS mapping onto it — never a second class in the common T-box (ADR-0054: never a different semantic model per door). 'Member' may be a baptized adult to one organization and a household to another; both publish a LocalMeaning with skos:narrowMatch / skos:broadMatch / skos:relatedMatch to aporg:member and a scope note saying what differs; both are right; a grant issued by either names its own (the intent preimage's meaningRefs), so a third party reading the receipt sees which meaning the grant used. An organization with no LocalMeaning falls to the common term." .
+apgov:ofTerm a owl:ObjectProperty ;
+    rdfs:domain apgov:LocalMeaning ; rdfs:range rdfs:Resource ;
+    rdfs:label "ofTerm" ;
+    rdfs:comment "The COMMON term this is a local meaning of (an IRI of the shared T-box)." .
+apgov:heldBy a owl:ObjectProperty ;
+    rdfs:domain apgov:LocalMeaning ; rdfs:range ap:Agent ;
+    rdfs:label "heldBy" ;
+    rdfs:comment "The organization whose meaning it is — the record lives on ITS Smart Agent." .
+apgov:mappingRelation a owl:DatatypeProperty ;
+    rdfs:domain apgov:LocalMeaning ; rdfs:range xsd:string ;
+    rdfs:label "mappingRelation" ;
+    rdfs:comment "Which SKOS mapping predicate relates the local meaning to the common term: narrowMatch | broadMatch | relatedMatch. Never exactMatch (that would be no local meaning) and never a new class." .
+
+# ─── Stewardship of the model ─────────────────────────────────────────────────────────────────────
+
+apgov:Steward a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Steward" ;
+    rdfs:comment "WHO STEWARDS WHAT, publicly: the Smart Agent named to resolve disagreements, manage versions and name exceptions for one term or module of the common model, registered through the term registry under the estate's governance and readable from the registry without a session (a steward's identity is public by construction, ADR-0040). A steward record grants nothing: a determination in a dispute (the dispute interaction profile) is evidence the run's provenance links, never a reversal." .
+apgov:stewards a owl:ObjectProperty ;
+    rdfs:domain apgov:Steward ; rdfs:range rdfs:Resource ;
+    rdfs:label "stewards" ;
+    rdfs:comment "The term or module IRI stewarded." .
+apgov:stewardAgent a owl:ObjectProperty ;
+    rdfs:domain apgov:Steward ; rdfs:range ap:Agent ;
+    rdfs:label "stewardAgent" .
+apgov:charterRef a owl:DatatypeProperty ;
+    rdfs:domain apgov:Steward ; rdfs:range xsd:string ;
+    rdfs:label "charterRef" ;
+    rdfs:comment "The estate charter (spec 410 §9) under which the steward was named — its hash as anchored." .

package/tbox/identity.ttl

@@ -14,6 +14,11 @@ apcr:CredentialFacet a owl:Class ;
     rdfs:label "CredentialFacet" ;
     rdfs:comment "A control credential (passkey / SIWE-EOA / hardware / OIDC) that CONTROLS an Agent under its custody policy. Rotates without changing the Agent (ADR-0011). NEVER an owner." .
 
+apcr:ChannelFacet a owl:Class ;
+    rdfs:subClassOf ap:Facet ;
+    rdfs:label "ChannelFacet" ;
+    rdfs:comment "An email address or phone number linked to an Agent's home (spec 319/320, spec 422 §3.3). It OPENS the home (login-grade, ADR-0017) and is where the home TELLS the person something — a credential change, a recovery request — so she can cancel. It is NOT a CredentialFacet: it signs nothing, it is never a quorum slot, a step-up or a recovery signer. A phone-bootstrapped home's custody credential is its server-held C_sub (spec 235), not the phone." .
+
 apnam:NameFacet a owl:Class ;
     rdfs:subClassOf ap:Facet ;
     rdfs:label "NameFacet" ;

package/tbox/intents.ttl

@@ -5,6 +5,7 @@
 
 @prefix ap:     <https://agenticprimitives.dev/ns/core#> .
 @prefix apint:  <https://agenticprimitives.dev/ns/intent#> .
+@prefix aps:    <https://agenticprimitives.dev/ns/skill#> .
 @prefix apcst:  <https://agenticprimitives.dev/ns/constraint#> .
 @prefix apres:  <https://agenticprimitives.dev/ns/resolution#> .
 @prefix rdf:    <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@@ -33,6 +34,44 @@ apint:Intent a owl:Class ;
     rdfs:label "Intent" ;
     rdfs:comment "An actor's signed declarative statement of a desired end-state. NOT a plan; not a transaction; not a wire envelope. Layer 2 of the spine." .
 
+# ─── Spec 410 §6 — OPEN INTENTS: the stated outcome, and what it entails ───────────────────────────────
+# A CLOSED intent names its effects ("pay Alice 10"); the mandate binds them. An OPEN intent names an OUTCOME
+# ("organize the gathering for under two thousand") and leaves the effects to a plan — which is where an
+# adversarial instruction inside the plan's inputs can surface an effect the outcome never entailed: the
+# disclosure, the over-budget deposit, the substitute venue. These terms let the ontology say, per outcome
+# class, which effect kinds the outcome ENTAILS and which BOUNDS it carries; the harness's conformance stage
+# (`orchestration.outcomeConformance`) refuses, before anything is offered for signature, every consequential
+# effect the outcome does not entail. Behaviour, never authority: no verifier reads these; the mandate still
+# authorizes what it names.
+
+apint:Outcome a owl:Class ;
+    rdfs:subClassOf apint:Intent ;
+    rdfs:label "Outcome" ;
+    rdfs:comment "The stated end-state of an OPEN intent, as a class: what a plan under that intent may be composed of is what this class ENTAILS (apint:entailsCapability), within the BOUNDS the intent stated (apint:boundedBy). What it is NOT: authority (a mandate still authorizes each effect), and not a plan (it names kinds, never steps)." .
+
+apint:entailsCapability a owl:ObjectProperty ;
+    rdfs:domain apint:Outcome ; rdfs:range aps:Capability ;
+    rdfs:label "entailsCapability" ;
+    rdfs:comment "A capability whose exercise the outcome entails. A consequential effect under an open intent whose capability the outcome does not entail is refused at conformance — an omission here is a refusal there, by design." .
+
+apint:OutcomeBound a owl:Class ;
+    rdfs:label "OutcomeBound" ;
+    rdfs:comment "A bound an open intent states over one argument of an entailed capability: an AMOUNT (\"under two thousand\" — the argument may not exceed it) or a NAMED value (\"at the hall\" — the argument may not differ from it). Read from the intent, never inferred." .
+
+apint:boundedBy a owl:ObjectProperty ;
+    rdfs:domain apint:Outcome ; rdfs:range apint:OutcomeBound ;
+    rdfs:label "boundedBy" .
+
+apint:boundsArgument a owl:DatatypeProperty ;
+    rdfs:domain apint:OutcomeBound ; rdfs:range xsd:string ;
+    rdfs:label "boundsArgument" ;
+    rdfs:comment "The argument name of the entailed capability the bound applies to (\"amount\", \"location\")." .
+
+apint:OrganizedGathering a owl:Class ;
+    rdfs:subClassOf apint:Outcome ;
+    rdfs:label "OrganizedGathering" ;
+    rdfs:comment "A gathering organized for a group: a time and place set, the people told, a deposit paid within budget. Entails: a calendar event (bounded by the named venue), messages to the attendees (carrying contact details, never records about them), a payment (bounded by the stated budget). The reference outcome class of spec 410 §6; a domain adds its own the same way." .
+
 # ─── Intent hierarchy extension (spec 324 §9) ─────────────────────────
 
 apint:ResourceExchangeIntent a owl:Class ;

package/tbox/payload.ttl

@@ -0,0 +1,94 @@
+# T-box — WHAT A WRITE CARRIES (spec 410 §7, THESIS-6/THESIS-7's information-flow half).
+#
+# An aggregate limit at the resource says how MUCH may leave (`TreasurySpendPolicy`); this says WHAT KIND of
+# information an act may carry out of the estate. A tool's adapter declares, per argument, the classes its payload
+# carries (`ToolSpec.carries`, `SkillExecutionContractV1.carries`); a mandate's payload-classes caveat
+# (`PayloadClassesEnforcer`) names what the write MAY carry; the verifier compares the two. An argument whose class
+# the caveat does not name is refused — an undeclared payload is not within it.
+#
+# THESE ARE CLASSES OF INFORMATION, NOT OF VALUES. `apval:EmailAddress` says how an argument is READ ("is this
+# well-formed?"); `appay:ContactEmail` says what it DISCLOSES when it leaves ("someone's address is now in the
+# message"). One value can carry several: a free-text body may carry an email address the person typed. The
+# declaration is the ADAPTER AUTHOR's claim about the argument's kind, never an inspection of its content — a
+# classifier reading bodies for phone numbers is exactly the heuristic this vocabulary exists to replace.
+#
+# The one class every free-text argument carries is appay:FreeText: the person's own words, which may carry
+# anything. A mandate that permits FreeText permits what the person chose to write; a mandate that does not
+# refuses a body the planner composed. That is the honest floor, and it is why "text" arguments are declared
+# rather than left undeclared (undeclared = denied under any caveat).
+
+@prefix appay: <https://agenticprimitives.dev/ns/payload#> .
+@prefix apval: <https://agenticprimitives.dev/ns/value#> .
+@prefix ap:    <https://agenticprimitives.dev/ns/core#> .
+@prefix rdfs:  <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:   <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:   <http://www.w3.org/2001/XMLSchema#> .
+@prefix skos:  <http://www.w3.org/2004/02/skos/core#> .
+
+appay: a owl:Ontology ;
+    rdfs:label "Agentic Primitives — Payload classes (what a write carries)" ;
+    rdfs:comment "The kinds of information an act may carry out of the estate: declared per argument by a tool's adapter, permitted by a mandate's payload-classes caveat, compared by the verifier (spec 410 §7). Classes of DISCLOSURE, not of value syntax (apval:)." .
+
+appay:PayloadClass a owl:Class ;
+    rdfs:label "PayloadClass" ;
+    rdfs:comment "A kind of information a write may carry. Every payload class is a subclass; a caveat names subclasses, never this root (naming the root would permit everything, which is the absence of a caveat said twice)." .
+
+appay:FreeText a owl:Class ;
+    rdfs:subClassOf appay:PayloadClass ;
+    rdfs:label "FreeText" ;
+    rdfs:comment "The person's own words, or a body composed on their behalf: may carry anything. The floor every text argument declares. A mandate that does not permit it refuses composed bodies." .
+
+appay:ContactEmail a owl:Class ;
+    rdfs:subClassOf appay:PayloadClass ;
+    rdfs:label "ContactEmail" ;
+    rdfs:comment "Someone's email address leaves with the write (an invitation carrying it; a message body that names one)." .
+
+appay:ContactPhone a owl:Class ;
+    rdfs:subClassOf appay:PayloadClass ;
+    rdfs:label "ContactPhone" ;
+    rdfs:comment "Someone's phone number leaves with the write." .
+
+appay:PostalAddress a owl:Class ;
+    rdfs:subClassOf appay:PayloadClass ;
+    rdfs:label "PostalAddress" ;
+    rdfs:comment "Where someone lives or receives mail leaves with the write." .
+
+appay:EventDetails a owl:Class ;
+    rdfs:subClassOf appay:PayloadClass ;
+    rdfs:label "EventDetails" ;
+    rdfs:comment "When and where a gathering happens, and its title — what an invitation or a calendar entry carries." .
+
+appay:GivingHistory a owl:Class ;
+    rdfs:subClassOf appay:PayloadClass ;
+    rdfs:label "GivingHistory" ;
+    rdfs:comment "What someone has given, to whom, when — a treasury's or a person's giving records." .
+
+appay:Money a owl:Class ;
+    rdfs:subClassOf appay:PayloadClass ;
+    rdfs:label "Money" ;
+    rdfs:comment "Value moves with the write: an amount of an asset. The AMOUNT is bounded by the spend policy and the value caveat; this class says only that the write is a transfer, so a payload caveat that omits it refuses a payment outright." .
+
+appay:File a owl:Class ;
+    rdfs:subClassOf appay:PayloadClass ;
+    rdfs:label "File" ;
+    rdfs:comment "A document or attachment leaves with the write, whatever it contains — the file's own classes are not inspected." .
+
+appay:MembershipTerms a owl:Class ;
+    rdfs:subClassOf appay:PayloadClass ;
+    rdfs:label "MembershipTerms" ;
+    rdfs:comment "The terms of a membership or a household relation (a role, a kinship word) leave with the write." .
+
+appay:PersonalPreference a owl:Class ;
+    rdfs:subClassOf appay:PayloadClass ;
+    rdfs:label "PersonalPreference" ;
+    rdfs:comment "Something the person wants remembered about how they are answered, what they call things, when their routines run — written into their own agent's records." .
+
+appay:Instruction a owl:Class ;
+    rdfs:subClassOf appay:PayloadClass ;
+    rdfs:label "Instruction" ;
+    rdfs:comment "A standing instruction or a routine's rule: words that will shape future acts, written into the agent's own records." .
+
+appay:CodeChange a owl:Class ;
+    rdfs:subClassOf appay:PayloadClass ;
+    rdfs:label "CodeChange" ;
+    rdfs:comment "Source files or a pull request leave with the write — a build artifact, a PR body." .