@agenticprimitives/ontology 1.0.0-alpha.37 → 1.0.0-alpha.38

package/cbox/controlled-vocabularies.ttl

@@ -13,6 +13,7 @@
 @prefix aporg: <https://agenticprimitives.dev/ns/org#> .
 @prefix skos: <http://www.w3.org/2004/02/skos/core#> .
 @prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix appc:   <https://agenticprimitives.dev/ns/privacy-credential#> .
 
 # ─── agentKind — 3 values, on-chain-bound (ADR-0009 enum / types.AgentType) ──
 ap:agentKind a skos:ConceptScheme ;
@@ -223,3 +224,54 @@ ap:ConfigurationDigestRole       a skos:Concept ; skos:inScheme ap:digestRoleSch
 ap:ArtifactDigestRole            a skos:Concept ; skos:inScheme ap:digestRoleScheme ; skos:prefLabel "artifact" ;             rdfs:seeAlso ap:hasArtifactDigest .
 ap:CanonicalProfileDigestRole    a skos:Concept ; skos:inScheme ap:digestRoleScheme ; skos:prefLabel "canonical-profile" ;    rdfs:seeAlso ap:hasCanonicalProfileDigest .
 ap:SelectedCardDigestRole        a skos:Concept ; skos:inScheme ap:digestRoleScheme ; skos:prefLabel "selected-card" ;        rdfs:seeAlso ap:hasSelectedCardDigest .
+
+# ─── Anonymous credentials (tbox/privacy-credential.ttl; specs 304 / 305 / 442 §7.2 / 443 W5) ───────────────
+# Suites and grades are CODELISTS here so no product name enters the T-box; the proving system behind a suite is
+# informative and lives in the package that binds it (spec 414 doctrine).
+appc:presentationSuiteScheme a skos:ConceptScheme ;
+    rdfs:label "presentationSuite" ;
+    rdfs:comment "ONE suite per request (ADR-0013). `openac-sd-jwt-p256` proves predicates in zero knowledge over the same container `es256-sd-jwt` discloses from; `bbs-bls12381-g2` is reserved." ;
+    skos:hasTopConcept appc:SuiteEs256SdJwt, appc:SuiteOpenAcSdJwtP256, appc:SuiteBbsBls12381G2 .
+appc:SuiteEs256SdJwt       a skos:Concept ; skos:inScheme appc:presentationSuiteScheme ; skos:prefLabel "es256-sd-jwt" .
+appc:SuiteOpenAcSdJwtP256  a skos:Concept ; skos:inScheme appc:presentationSuiteScheme ; skos:prefLabel "openac-sd-jwt-p256" .
+appc:SuiteBbsBls12381G2    a skos:Concept ; skos:inScheme appc:presentationSuiteScheme ; skos:prefLabel "bbs-bls12381-g2" ; skos:note "reserved" .
+
+appc:issuerKeySuiteScheme a skos:ConceptScheme ;
+    rdfs:label "issuerKeySuite" ;
+    rdfs:comment "One suite per facet (INV-304-3)." ;
+    skos:hasTopConcept appc:IssuerSuiteEs256SdJwt, appc:IssuerSuiteBbsBls12381G2, appc:IssuerSuiteEd25519Di, appc:IssuerSuiteAnoncredsCl .
+appc:IssuerSuiteEs256SdJwt    a skos:Concept ; skos:inScheme appc:issuerKeySuiteScheme ; skos:prefLabel "es256-sd-jwt" .
+appc:IssuerSuiteBbsBls12381G2 a skos:Concept ; skos:inScheme appc:issuerKeySuiteScheme ; skos:prefLabel "bbs-bls12381-g2" .
+appc:IssuerSuiteEd25519Di     a skos:Concept ; skos:inScheme appc:issuerKeySuiteScheme ; skos:prefLabel "ed25519-di" .
+appc:IssuerSuiteAnoncredsCl   a skos:Concept ; skos:inScheme appc:issuerKeySuiteScheme ; skos:prefLabel "anoncreds-cl" .
+
+appc:nullifierGradeScheme a skos:ConceptScheme ;
+    rdfs:label "nullifierGrade" ;
+    rdfs:comment "Ordered low→high: asserted (honest-holder-exact; nothing about its derivation is checked) < in-circuit (proved inside the presentation; reserved until the profile emits it)." ;
+    skos:hasTopConcept appc:NullifierAsserted, appc:NullifierInCircuit .
+appc:NullifierAsserted  a skos:Concept ; skos:inScheme appc:nullifierGradeScheme ; skos:prefLabel "asserted" ; skos:notation "0" .
+appc:NullifierInCircuit a skos:Concept ; skos:inScheme appc:nullifierGradeScheme ; skos:prefLabel "in-circuit" ; skos:notation "1" ; skos:broader appc:NullifierAsserted .
+
+appc:predicateOpScheme a skos:ConceptScheme ;
+    rdfs:label "predicateOp" ;
+    skos:hasTopConcept appc:OpGte, appc:OpLte, appc:OpInSet, appc:OpBefore, appc:OpAfter .
+appc:OpGte    a skos:Concept ; skos:inScheme appc:predicateOpScheme ; skos:prefLabel "gte" .
+appc:OpLte    a skos:Concept ; skos:inScheme appc:predicateOpScheme ; skos:prefLabel "lte" .
+appc:OpInSet  a skos:Concept ; skos:inScheme appc:predicateOpScheme ; skos:prefLabel "in-set" .
+appc:OpBefore a skos:Concept ; skos:inScheme appc:predicateOpScheme ; skos:prefLabel "before" .
+appc:OpAfter  a skos:Concept ; skos:inScheme appc:predicateOpScheme ; skos:prefLabel "after" .
+
+appc:verifierPlacementScheme a skos:ConceptScheme ;
+    rdfs:label "verifierPlacement" ;
+    rdfs:comment "`node`: the verifying keys do not fit the edge runtime, so a service beside it verifies; `worker`: verified in the edge runtime itself. A receipt names which." ;
+    skos:hasTopConcept appc:PlacementNode, appc:PlacementWorker .
+appc:PlacementNode   a skos:Concept ; skos:inScheme appc:verifierPlacementScheme ; skos:prefLabel "node" .
+appc:PlacementWorker a skos:Concept ; skos:inScheme appc:verifierPlacementScheme ; skos:prefLabel "worker" .
+
+appc:proofGradeScheme a skos:ConceptScheme ;
+    rdfs:label "proofGrade" ;
+    rdfs:comment "Spec 442 §7.2 — what a visitor presents at a door. A grade is a KIND, never a rank: a door says which it accepts." ;
+    skos:hasTopConcept appc:GradeIdentity, appc:GradeStanding, appc:GradePredicate .
+appc:GradeIdentity  a skos:Concept ; skos:inScheme appc:proofGradeScheme ; skos:prefLabel "identity" ; skos:definition "the agent asks as itself (a principal-signed request proof)" .
+appc:GradeStanding  a skos:Concept ; skos:inScheme appc:proofGradeScheme ; skos:prefLabel "standing" ; skos:definition "a leaf of another estate's authority projection, proved against a root read from neutral ground" .
+appc:GradePredicate a skos:Concept ; skos:inScheme appc:proofGradeScheme ; skos:prefLabel "predicate" ; skos:definition "a predicate over a credential, proved in zero knowledge under an issuer facet resolved through the chain" .

package/cbox/privacy-credential-shapes.shacl.ttl

@@ -0,0 +1,187 @@
+# C-box — SHACL shapes for anonymous credentials (tbox/privacy-credential.ttl; specs 304 / 305 / 442 §7.2 / 443 W5).
+#
+# STRUCTURE, NEVER PERMISSION. A conformant presentation is still only a claim a verifier has yet to check; a
+# conformant mandate authorizes nothing by being well-formed; conformant evidence is evidence. What these refuse is a
+# record that would MISLEAD ON ITS FACE or LEAK BY ITS SHAPE:
+#
+#   a pairwise account linked to a person          — the one join this vocabulary exists to withhold (INV-305-1)
+#   a presentation carrying a claim value          — the suite reveals none; a record that does was not made by it
+#   a presentation answering no request            — a proof of nothing in particular
+#   a nullifier with no audience or no grade       — "one visit" per what, worth how much?
+#   a facet whose subject is a person              — a person's agent holds credentials; it does not issue them
+#   a facet with no attestation                    — a document alone proves nothing; the chain does
+#   a mandate naming no audience                   — a device key that may sign for anyone
+#   evidence with no facet or no predicate digest  — "a predicate held" with neither named is not evidence
+#
+# SUBCLASS HANDLING. sh:class against ap:Agent relies on the rdfs:subClassOf* closure; the house test materializes it
+# from the T-box first. The SPARQL constraints need the cbox codelists in the data graph (they join on skos:inScheme).
+
+@prefix appc:  <https://agenticprimitives.dev/ns/privacy-credential#> .
+@prefix apatt: <https://agenticprimitives.dev/ns/attestation#> .
+@prefix ap:    <https://agenticprimitives.dev/ns/core#> .
+@prefix skos:  <http://www.w3.org/2004/02/skos/core#> .
+@prefix sh:    <http://www.w3.org/ns/shacl#> .
+@prefix rdfs:  <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix xsd:   <http://www.w3.org/2001/XMLSchema#> .
+
+# ─── The pairwise account names no person ────────────────────────────────────────────────────────
+appc:PairwiseAccountShape a sh:NodeShape ;
+  rdfs:label "PairwiseAccount shape" ;
+  sh:targetClass appc:PairwiseAccount ;
+  sh:property [
+    sh:path appc:pairwiseFor ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:datatype xsd:anyURI ;
+    sh:message "A pairwise account exists for exactly ONE verifier origin (appc:pairwiseFor). The same holder at another origin is another account." ;
+  ] ;
+  sh:sparql [
+    sh:message "A pairwise account MUST NOT be linked to any Agent: the join from the account a verifier sees to the person exists only in her vault (INV-305-1, ADR-0025). A triple from this account to an ap:Agent, under any property, is the disclosure this vocabulary withholds." ;
+    sh:select """
+      SELECT $this ?p ?agent WHERE {
+        $this ?p ?agent .
+        ?agent a/<http://www.w3.org/2000/01/rdf-schema#subClassOf>* <https://agenticprimitives.dev/ns/core#Agent> .
+      }
+    """ ;
+  ] .
+
+# ─── A presentation answers one request, names its facet, and carries no claim value ────────────
+appc:PrivatePresentationShape a sh:NodeShape ;
+  rdfs:label "PrivatePresentation shape" ;
+  sh:targetClass appc:PrivatePresentation ;
+  sh:property [
+    sh:path appc:answersRequest ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:class appc:ProofRequest ;
+    sh:message "A presentation answers exactly ONE proof request — the verifier's own, with its audience and single-use nonce. A proof answering no request is a proof of nothing in particular." ;
+  ] ;
+  sh:property [
+    sh:path appc:presentedUnder ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:class appc:IssuerKeyFacet ;
+    sh:message "A presentation names the ONE issuer facet it was made under; the verifier resolves it through the chain and checks the proven key against it." ;
+  ] ;
+  sh:property [
+    sh:path appc:provesPredicate ;
+    sh:maxCount 1 ; sh:class appc:PredicateProgram ;
+    sh:message "At most one predicate program per presentation — the request's." ;
+  ] ;
+  sh:property [
+    sh:path appc:carriesNullifier ;
+    sh:maxCount 1 ; sh:class appc:Nullifier ;
+    sh:message "At most one nullifier, for the request's audience." ;
+  ] ;
+  sh:property [
+    sh:path appc:predicateClaim ;
+    sh:maxCount 0 ;
+    sh:message "A presentation carries NO claim name or value of its own: the suite reveals none, and a record that does was not made by it. Claims belong to the predicate PROGRAM (the verifier's thresholds), never to the presentation." ;
+  ] ;
+  sh:property [
+    sh:path appc:predicateOperand ;
+    sh:maxCount 0 ;
+    sh:message "A presentation carries no operand — see appc:predicateClaim." ;
+  ] .
+
+# ─── A nullifier is scoped and graded ─────────────────────────────────────────────────────────────
+appc:NullifierShape a sh:NodeShape ;
+  rdfs:label "Nullifier shape" ;
+  sh:targetClass appc:Nullifier ;
+  sh:property [
+    sh:path appc:audience ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:datatype xsd:anyURI ;
+    sh:message "A nullifier is one-per-AUDIENCE: without the audience it is a value that links nothing to nothing, or everything to everything." ;
+  ] ;
+  sh:property [
+    sh:path appc:nullifierValue ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:datatype xsd:string ;
+    sh:message "Exactly one value." ;
+  ] ;
+  sh:property [
+    sh:path appc:nullifierGrade ;
+    sh:minCount 1 ; sh:maxCount 1 ;
+    sh:message "A nullifier says what it is worth: its grade (appc:nullifierGradeScheme — asserted | in-circuit). An ungraded nullifier would be read as the stronger one." ;
+  ] ;
+  sh:sparql [
+    sh:message "The grade MUST be a concept of appc:nullifierGradeScheme." ;
+    sh:select """
+      SELECT $this ?g WHERE {
+        $this <https://agenticprimitives.dev/ns/privacy-credential#nullifierGrade> ?g .
+        FILTER NOT EXISTS { ?g <http://www.w3.org/2004/02/skos/core#inScheme> <https://agenticprimitives.dev/ns/privacy-credential#nullifierGradeScheme> }
+      }
+    """ ;
+  ] .
+
+# ─── An issuer facet is an organization's or a service's, anchored ───────────────────────────────
+appc:IssuerKeyFacetShape a sh:NodeShape ;
+  rdfs:label "IssuerKeyFacet shape" ;
+  sh:targetClass appc:IssuerKeyFacet ;
+  sh:property [
+    sh:path appc:facetSubject ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:class ap:Agent ;
+    sh:message "A facet speaks for exactly one agent." ;
+  ] ;
+  sh:property [
+    sh:path appc:facetKeyId ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:datatype xsd:string ;
+    sh:message "One key id — what a credential names and a verifier resolves by." ;
+  ] ;
+  sh:property [
+    sh:path appc:facetHash ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:datatype xsd:string ;
+    sh:message "The facet hash the agent signed and the attestation carries." ;
+  ] ;
+  sh:property [
+    sh:path appc:anchoredBy ;
+    sh:minCount 1 ; sh:class apatt:Attestation ;
+    sh:message "A facet is ANCHORED: an attestation on the issuer's chain binds it to the agent. A facet document with no attestation proves nothing to a stranger — the chain does." ;
+  ] ;
+  sh:sparql [
+    sh:message "A facet's subject is an organization or a service — NEVER a person. A person's agent holds credentials; it does not issue them (spec 443 §2)." ;
+    sh:select """
+      SELECT $this ?subject WHERE {
+        $this <https://agenticprimitives.dev/ns/privacy-credential#facetSubject> ?subject .
+        ?subject a/<http://www.w3.org/2000/01/rdf-schema#subClassOf>* <https://agenticprimitives.dev/ns/core#PersonAgent> .
+      }
+    """ ;
+  ] .
+
+# ─── A presentation mandate is bounded ───────────────────────────────────────────────────────────
+appc:PresentationMandateShape a sh:NodeShape ;
+  rdfs:label "PresentationMandate shape" ;
+  sh:targetClass appc:PresentationMandate ;
+  sh:property [
+    sh:path appc:mandateAudience ;
+    sh:minCount 1 ; sh:datatype xsd:anyURI ;
+    sh:message "A presentation mandate names at least one verifier origin. A device key that may sign for ANY audience is a key that may be phished by any door." ;
+  ] ;
+  sh:property [
+    sh:path appc:mandatePredicateDigest ;
+    sh:minCount 1 ; sh:datatype xsd:string ;
+    sh:message "A presentation mandate names at least one predicate program by digest — what the person agreed may be proved." ;
+  ] ;
+  sh:property [
+    sh:path appc:mandateIssuerKeyId ;
+    sh:minCount 1 ; sh:datatype xsd:string ;
+    sh:message "A presentation mandate names at least one issuer facet." ;
+  ] .
+
+# ─── Evidence names what held ────────────────────────────────────────────────────────────────────
+appc:PredicateAdmissionEvidenceShape a sh:NodeShape ;
+  rdfs:label "PredicateAdmissionEvidence shape" ;
+  sh:targetClass appc:PredicateAdmissionEvidence ;
+  sh:property [
+    sh:path appc:evidenceFacet ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:class appc:IssuerKeyFacet ;
+    sh:message "Evidence names the facet the proof verified under." ;
+  ] ;
+  sh:property [
+    sh:path appc:evidencePredicateDigest ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:datatype xsd:string ;
+    sh:message "Evidence names the predicate program the DOOR asked, by digest. \"A predicate held\" with none named is not evidence." ;
+  ] ;
+  sh:property [
+    sh:path appc:verifierPlacement ;
+    sh:minCount 1 ; sh:maxCount 1 ;
+    sh:message "Evidence says WHERE the proof was verified (appc:verifierPlacementScheme). A receipt that cannot is not a receipt." ;
+  ] ;
+  sh:property [
+    sh:path appc:predicateOperand ;
+    sh:maxCount 0 ;
+    sh:message "Evidence carries no claim value and no operand — the digest of the program is what it names." ;
+  ] .

package/context.jsonld

@@ -38,6 +38,7 @@
     "apactor": "https://agenticprimitives.dev/ns/actor#",
     "apguide": "https://agenticprimitives.dev/ns/guidance#",
     "apcoord": "https://agenticprimitives.dev/ns/coordination#",
+    "appc": "https://agenticprimitives.dev/ns/privacy-credential#",
 
     "rdf": "http://www.w3.org/1999/02/22-rdf-syntax-ns#",
     "rdfs": "http://www.w3.org/2000/01/rdf-schema#",

package/dist/artifacts.d.ts

@@ -11,8 +11,8 @@ export declare const ARTIFACTS: {
     readonly runMeasuresContext: "run-measures.jsonld";
     /** Spec 415 S0/SEL-1 — replay sets (DCAT) and judgments (EARL). */
     readonly evaluationContext: "evaluation.jsonld";
-    readonly tbox: readonly ["tbox/core.ttl", "tbox/identity.ttl", "tbox/contact.ttl", "tbox/naming.ttl", "tbox/intents.ttl", "tbox/constraints.ttl", "tbox/resolution.ttl", "tbox/agreement.ttl", "tbox/payment.ttl", "tbox/fulfillment.ttl", "tbox/attestation.ttl", "tbox/skills.ttl", "tbox/geo.ttl", "tbox/content.ttl", "tbox/registry.ttl", "tbox/discovery.ttl", "tbox/trust.ttl", "tbox/security-exposure.ttl", "tbox/agent-resolution.ttl", "tbox/verification-receipt.ttl", "tbox/scope.ttl", "tbox/situation.ttl", "tbox/org.ttl", "tbox/familyoffice.ttl", "tbox/entitlement.ttl", "tbox/interaction.ttl", "tbox/messaging.ttl", "tbox/guidance.ttl", "tbox/actor-context.ttl", "tbox/context.ttl", "tbox/profile.ttl", "tbox/execution.ttl", "tbox/plan.ttl", "tbox/prov-imports.ttl", "tbox/skos-imports.ttl", "tbox/dqv-imports.ttl", "tbox/earl-imports.ttl", "tbox/dcat-imports.ttl", "tbox/evaluation.ttl", "tbox/coordination.ttl", "tbox/engagement.ttl", "tbox/card-projection.ttl", "tbox/estate.ttl"];
-    readonly cbox: readonly ["cbox/canonical-agent-id-shape.shacl.ttl", "cbox/controlled-vocabularies.ttl", "cbox/registry-vocabulary.ttl", "cbox/skill-vocabulary.ttl", "cbox/geo-vocabulary.ttl", "cbox/scope-vocabulary.ttl", "cbox/content-vocabulary.ttl", "cbox/discovery-graph-shapes.shacl.ttl", "cbox/interaction-vocabulary.ttl", "cbox/familyoffice-vocabulary.ttl", "cbox/familyoffice-shapes.shacl.ttl", "cbox/consultation-shapes.shacl.ttl", "cbox/interaction-shapes.shacl.ttl", "cbox/skill-grounding-vocabulary.ttl", "cbox/guidance-vocabulary.ttl", "cbox/profile-facet-vocabulary.ttl", "cbox/agent-facet-shapes.shacl.ttl", "cbox/capability-catalog-shapes.shacl.ttl", "cbox/org-team-shapes.shacl.ttl", "cbox/naming-registry-shapes.shacl.ttl", "cbox/run-provenance-shapes.shacl.ttl", "cbox/run-measures-shapes.shacl.ttl", "cbox/judgment-shapes.shacl.ttl", "cbox/card-projection-shapes.shacl.ttl"];
+    readonly tbox: readonly ["tbox/core.ttl", "tbox/identity.ttl", "tbox/contact.ttl", "tbox/naming.ttl", "tbox/intents.ttl", "tbox/constraints.ttl", "tbox/resolution.ttl", "tbox/agreement.ttl", "tbox/payment.ttl", "tbox/fulfillment.ttl", "tbox/attestation.ttl", "tbox/skills.ttl", "tbox/geo.ttl", "tbox/content.ttl", "tbox/registry.ttl", "tbox/discovery.ttl", "tbox/trust.ttl", "tbox/security-exposure.ttl", "tbox/agent-resolution.ttl", "tbox/verification-receipt.ttl", "tbox/scope.ttl", "tbox/situation.ttl", "tbox/org.ttl", "tbox/familyoffice.ttl", "tbox/entitlement.ttl", "tbox/interaction.ttl", "tbox/messaging.ttl", "tbox/guidance.ttl", "tbox/actor-context.ttl", "tbox/context.ttl", "tbox/profile.ttl", "tbox/execution.ttl", "tbox/plan.ttl", "tbox/prov-imports.ttl", "tbox/skos-imports.ttl", "tbox/dqv-imports.ttl", "tbox/earl-imports.ttl", "tbox/dcat-imports.ttl", "tbox/evaluation.ttl", "tbox/coordination.ttl", "tbox/engagement.ttl", "tbox/card-projection.ttl", "tbox/estate.ttl", "tbox/privacy-credential.ttl"];
+    readonly cbox: readonly ["cbox/canonical-agent-id-shape.shacl.ttl", "cbox/controlled-vocabularies.ttl", "cbox/registry-vocabulary.ttl", "cbox/skill-vocabulary.ttl", "cbox/geo-vocabulary.ttl", "cbox/scope-vocabulary.ttl", "cbox/content-vocabulary.ttl", "cbox/discovery-graph-shapes.shacl.ttl", "cbox/interaction-vocabulary.ttl", "cbox/familyoffice-vocabulary.ttl", "cbox/familyoffice-shapes.shacl.ttl", "cbox/privacy-credential-shapes.shacl.ttl", "cbox/consultation-shapes.shacl.ttl", "cbox/interaction-shapes.shacl.ttl", "cbox/skill-grounding-vocabulary.ttl", "cbox/guidance-vocabulary.ttl", "cbox/profile-facet-vocabulary.ttl", "cbox/agent-facet-shapes.shacl.ttl", "cbox/capability-catalog-shapes.shacl.ttl", "cbox/org-team-shapes.shacl.ttl", "cbox/naming-registry-shapes.shacl.ttl", "cbox/run-provenance-shapes.shacl.ttl", "cbox/run-measures-shapes.shacl.ttl", "cbox/judgment-shapes.shacl.ttl", "cbox/card-projection-shapes.shacl.ttl"];
     readonly mappings: readonly ["mappings/spine-standards.ttl", "mappings/agent-discovery-standards.ttl", "mappings/collaboration-profile.ttl", "mappings/collaboration-crosswalk-actors.ttl", "mappings/collaboration-crosswalk-organization.ttl", "mappings/collaboration-crosswalk-messaging.ttl", "mappings/collaboration-crosswalk-intent.ttl", "mappings/collaboration-crosswalk-skills.ttl", "mappings/collaboration-crosswalk-authority.ttl", "mappings/collaboration-crosswalk-protocols.ttl", "mappings/collaboration-crosswalk-guidance.ttl", "mappings/actor-context-standards.ttl", "mappings/commerce-engagement-crosswalk.ttl"];
 };
 /**

package/dist/artifacts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":"AASA;;;;GAIG;AACH,eAAO,MAAM,SAAS;;IAEpB,6GAA6G;;IAE7G,0GAA0G;;IAE1G,mEAAmE;;;;;CAmJ3D,CAAC;AAEX;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEzD"}
+{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":"AASA;;;;GAIG;AACH,eAAO,MAAM,SAAS;;IAEpB,6GAA6G;;IAE7G,0GAA0G;;IAE1G,mEAAmE;;;;;CAqJ3D,CAAC;AAEX;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEzD"}

package/dist/artifacts.js

@@ -95,6 +95,7 @@ export const ARTIFACTS = {
         // Estate projection (spec 410 §4) — what an estate vouches for on neutral ground and the opening it
         // keeps. Declared because the openings became a vault record and a vault record needs a class.
         'tbox/estate.ttl',
+        'tbox/privacy-credential.ttl',
     ],
     cbox: [
         'cbox/canonical-agent-id-shape.shacl.ttl',
@@ -117,6 +118,7 @@ export const ARTIFACTS = {
         // FamilyOffice relationship-archetype shapes (New City AI) — a NodeShape per apfo relationship,
         // validating role bindings + typed body before a portal vault-first write.
         'cbox/familyoffice-shapes.shacl.ttl',
+        'cbox/privacy-credential-shapes.shacl.ttl',
         // Routed-consultation artifact shapes (spec 329 §6)
         'cbox/consultation-shapes.shacl.ttl',
         // Agentic Interaction shapes (spec 340; ADR-0058) — structure, never permission

package/dist/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,6EAA6E;AAC7E,yCAAyC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,OAAO,EAAE,gBAAgB;IACzB,6GAA6G;IAC7G,oBAAoB,EAAE,uBAAuB;IAC7C,0GAA0G;IAC1G,kBAAkB,EAAE,qBAAqB;IACzC,mEAAmE;IACnE,iBAAiB,EAAE,mBAAmB;IACtC,IAAI,EAAE;QACJ,4BAA4B;QAC5B,eAAe;QACf,mBAAmB;QACnB,kBAAkB;QAClB,kGAAkG;QAClG,iBAAiB;QACjB,8DAA8D;QAC9D,kBAAkB;QAClB,sBAAsB;QACtB,qBAAqB;QACrB,oBAAoB;QACpB,kBAAkB;QAClB,sBAAsB;QACtB,sBAAsB;QACtB,4CAA4C;QAC5C,iBAAiB;QACjB,cAAc;QACd,kDAAkD;QAClD,kBAAkB;QAClB,oEAAoE;QACpE,mBAAmB;QACnB,oBAAoB;QACpB,gBAAgB;QAChB,4BAA4B;QAC5B,uFAAuF;QACvF,wFAAwF;QACxF,2BAA2B;QAC3B,8DAA8D;QAC9D,+BAA+B;QAC/B,yBAAyB;QACzB,gBAAgB;QAChB,oDAAoD;QACpD,oBAAoB;QACpB,cAAc;QACd,8EAA8E;QAC9E,4EAA4E;QAC5E,uBAAuB;QACvB,sBAAsB;QACtB,sBAAsB;QACtB,oBAAoB;QACpB,oFAAoF;QACpF,mBAAmB;QACnB,gEAAgE;QAChE,wBAAwB;QACxB,uFAAuF;QACvF,kBAAkB;QAClB,2FAA2F;QAC3F,2FAA2F;QAC3F,kBAAkB;QAClB,oFAAoF;QACpF,6FAA6F;QAC7F,iDAAiD;QACjD,oBAAoB;QACpB,2EAA2E;QAC3E,eAAe;QACf,iHAAiH;QACjH,uBAAuB;QACvB,+GAA+G;QAC/G,uBAAuB;QACvB,uDAAuD;QACvD,sBAAsB;QACtB,mFAAmF;QACnF,uBAAuB;QACvB,uBAAuB;QACvB,uDAAuD;QACvD,qBAAqB;QACrB,+FAA+F;QAC/F,uBAAuB;QACvB,qGAAqG;QACrG,qBAAqB;QACrB,4FAA4F;QAC5F,wEAAwE;QACxE,0BAA0B;QAC1B,oGAAoG;QACpG,+FAA+F;QAC/F,iBAAiB;KAClB;IACD,IAAI,EAAE;QACJ,yCAAyC;QACzC,kCAAkC;QAClC,yFAAyF;QACzF,8BAA8B;QAC9B,6EAA6E;QAC7E,2BAA2B;QAC3B,yBAAyB;QACzB,0DAA0D;QAC1D,2BAA2B;QAC3B,oEAAoE;QACpE,6BAA6B;QAC7B,kEAAkE;QAClE,uCAAuC;QACvC,kDAAkD;QAClD,iCAAiC;QACjC,gFAAgF;QAChF,kCAAkC;QAClC,gGAAgG;QAChG,2EAA2E;QAC3E,oCAAoC;QACpC,oDAAoD;QACpD,oCAAoC;QACpC,gFAAgF;QAChF,mCAAmC;QACnC,uCAAuC;QACvC,qCAAqC;QACrC,8BAA8B;QAC9B,wFAAwF;QACxF,mCAAmC;QACnC,iDAAiD;QACjD,mCAAmC;QACnC,yFAAyF;QACzF,0CAA0C;QAC1C,wFAAwF;QACxF,gCAAgC;QAChC,+FAA+F;QAC/F,+CAA+C;QAC/C,uCAAuC;QACvC,uFAAuF;QACvF,sCAAsC;QACtC,uDAAuD;QACvD,oCAAoC;QACpC,8FAA8F;QAC9F,gCAAgC;QAChC,sFAAsF;QACtF,oDAAoD;QACpD,uCAAuC;KACxC;IACD,QAAQ,EAAE;QACR,8BAA8B;QAC9B,wCAAwC;QACxC,wDAAwD;QACxD,oCAAoC;QACpC,6CAA6C;QAC7C,mDAAmD;QACnD,gDAAgD;QAChD,6CAA6C;QAC7C,6CAA6C;QAC7C,gDAAgD;QAChD,gDAAgD;QAChD,+CAA+C;QAC/C,yFAAyF;QACzF,sCAAsC;QACtC,uGAAuG;QACvG,4CAA4C;KAC7C;CACO,CAAC;AAEX;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB;IAC/C,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,MAAM,YAAY,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC"}
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,6EAA6E;AAC7E,yCAAyC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,OAAO,EAAE,gBAAgB;IACzB,6GAA6G;IAC7G,oBAAoB,EAAE,uBAAuB;IAC7C,0GAA0G;IAC1G,kBAAkB,EAAE,qBAAqB;IACzC,mEAAmE;IACnE,iBAAiB,EAAE,mBAAmB;IACtC,IAAI,EAAE;QACJ,4BAA4B;QAC5B,eAAe;QACf,mBAAmB;QACnB,kBAAkB;QAClB,kGAAkG;QAClG,iBAAiB;QACjB,8DAA8D;QAC9D,kBAAkB;QAClB,sBAAsB;QACtB,qBAAqB;QACrB,oBAAoB;QACpB,kBAAkB;QAClB,sBAAsB;QACtB,sBAAsB;QACtB,4CAA4C;QAC5C,iBAAiB;QACjB,cAAc;QACd,kDAAkD;QAClD,kBAAkB;QAClB,oEAAoE;QACpE,mBAAmB;QACnB,oBAAoB;QACpB,gBAAgB;QAChB,4BAA4B;QAC5B,uFAAuF;QACvF,wFAAwF;QACxF,2BAA2B;QAC3B,8DAA8D;QAC9D,+BAA+B;QAC/B,yBAAyB;QACzB,gBAAgB;QAChB,oDAAoD;QACpD,oBAAoB;QACpB,cAAc;QACd,8EAA8E;QAC9E,4EAA4E;QAC5E,uBAAuB;QACvB,sBAAsB;QACtB,sBAAsB;QACtB,oBAAoB;QACpB,oFAAoF;QACpF,mBAAmB;QACnB,gEAAgE;QAChE,wBAAwB;QACxB,uFAAuF;QACvF,kBAAkB;QAClB,2FAA2F;QAC3F,2FAA2F;QAC3F,kBAAkB;QAClB,oFAAoF;QACpF,6FAA6F;QAC7F,iDAAiD;QACjD,oBAAoB;QACpB,2EAA2E;QAC3E,eAAe;QACf,iHAAiH;QACjH,uBAAuB;QACvB,+GAA+G;QAC/G,uBAAuB;QACvB,uDAAuD;QACvD,sBAAsB;QACtB,mFAAmF;QACnF,uBAAuB;QACvB,uBAAuB;QACvB,uDAAuD;QACvD,qBAAqB;QACrB,+FAA+F;QAC/F,uBAAuB;QACvB,qGAAqG;QACrG,qBAAqB;QACrB,4FAA4F;QAC5F,wEAAwE;QACxE,0BAA0B;QAC1B,oGAAoG;QACpG,+FAA+F;QAC/F,iBAAiB;QACjB,6BAA6B;KAC9B;IACD,IAAI,EAAE;QACJ,yCAAyC;QACzC,kCAAkC;QAClC,yFAAyF;QACzF,8BAA8B;QAC9B,6EAA6E;QAC7E,2BAA2B;QAC3B,yBAAyB;QACzB,0DAA0D;QAC1D,2BAA2B;QAC3B,oEAAoE;QACpE,6BAA6B;QAC7B,kEAAkE;QAClE,uCAAuC;QACvC,kDAAkD;QAClD,iCAAiC;QACjC,gFAAgF;QAChF,kCAAkC;QAClC,gGAAgG;QAChG,2EAA2E;QAC3E,oCAAoC;QACpC,0CAA0C;QAC1C,oDAAoD;QACpD,oCAAoC;QACpC,gFAAgF;QAChF,mCAAmC;QACnC,uCAAuC;QACvC,qCAAqC;QACrC,8BAA8B;QAC9B,wFAAwF;QACxF,mCAAmC;QACnC,iDAAiD;QACjD,mCAAmC;QACnC,yFAAyF;QACzF,0CAA0C;QAC1C,wFAAwF;QACxF,gCAAgC;QAChC,+FAA+F;QAC/F,+CAA+C;QAC/C,uCAAuC;QACvC,uFAAuF;QACvF,sCAAsC;QACtC,uDAAuD;QACvD,oCAAoC;QACpC,8FAA8F;QAC9F,gCAAgC;QAChC,sFAAsF;QACtF,oDAAoD;QACpD,uCAAuC;KACxC;IACD,QAAQ,EAAE;QACR,8BAA8B;QAC9B,wCAAwC;QACxC,wDAAwD;QACxD,oCAAoC;QACpC,6CAA6C;QAC7C,mDAAmD;QACnD,gDAAgD;QAChD,6CAA6C;QAC7C,6CAA6C;QAC7C,gDAAgD;QAChD,gDAAgD;QAChD,+CAA+C;QAC/C,yFAAyF;QACzF,sCAAsC;QACtC,uGAAuG;QACvG,4CAA4C;KAC7C;CACO,CAAC;AAEX;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB;IAC/C,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,MAAM,YAAY,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/index.d.ts

@@ -54,6 +54,7 @@ export declare const NS: {
     readonly apcoord: "https://agenticprimitives.dev/ns/coordination#";
     readonly apeng: "https://agenticprimitives.dev/ns/engagement#";
     readonly apest: "https://agenticprimitives.dev/ns/estate#";
+    readonly appc: "https://agenticprimitives.dev/ns/privacy-credential#";
 };
 /**
  * EXTERNAL namespaces the substrate emits terms under (not AP-owned, so not in {@link NS} —
@@ -383,6 +384,36 @@ export declare const CLASS: {
     readonly FailedActivity: "https://w3id.org/ep-plan#FailedActivity";
     /** One thing an estate vouches for, WITH its opening — the estate's own record behind a public root. */
     readonly ProjectionSubmission: "https://agenticprimitives.dev/ns/estate#ProjectionSubmission";
+    /** A key an issuing agent (org or service, never a person) signs credentials with; anchored as an attestation. */
+    readonly IssuerKeyFacet: "https://agenticprimitives.dev/ns/privacy-credential#IssuerKeyFacet";
+    /** The issuer's live-credential root on neutral ground — its own, tagged row; revocation is retire + re-anchor. */
+    readonly IssuerRow: "https://agenticprimitives.dev/ns/privacy-credential#IssuerRow";
+    /** A credential made to be proved about, not shown: holder-bound, selectively disclosable; the holder's vault record. */
+    readonly AnonymousCredential: "https://agenticprimitives.dev/ns/privacy-credential#AnonymousCredential";
+    /** The custodied holder-binding key; signs only under a presentation mandate, judged per signature. */
+    readonly DeviceKey: "https://agenticprimitives.dev/ns/privacy-credential#DeviceKey";
+    /** The account a verifier sees: one per verifier origin, unlinkable across them; never the person. */
+    readonly PairwiseAccount: "https://agenticprimitives.dev/ns/privacy-credential#PairwiseAccount";
+    /** What a verifier asks — built from ITS policy and ITS challenge, never from a presentation. */
+    readonly ProofRequest: "https://agenticprimitives.dev/ns/privacy-credential#ProofRequest";
+    /** The statement proved: predicates compiled to canonical form and digested; what a mandate names. */
+    readonly PredicateProgram: "https://agenticprimitives.dev/ns/privacy-credential#PredicateProgram";
+    /** One claim, one operator, one operand — the verifier's threshold, never the holder's value. */
+    readonly Predicate: "https://agenticprimitives.dev/ns/privacy-credential#Predicate";
+    /** The holder's answer: a zero-knowledge proof, hidden keys and claims; held by a door for minutes under a reference. */
+    readonly PrivatePresentation: "https://agenticprimitives.dev/ns/privacy-credential#PrivatePresentation";
+    /** One visit per audience: deterministic per (device key, audience), consumed atomically by the verifier's store. */
+    readonly Nullifier: "https://agenticprimitives.dev/ns/privacy-credential#Nullifier";
+    /** The issuer still stands behind this credential as of a sequence — proved against the root the verifier READ. */
+    readonly CredentialStatusPresentation: "https://agenticprimitives.dev/ns/privacy-credential#CredentialStatusPresentation";
+    /** The person's standing permission for her device key to sign — a delegation bounded to venues, programs, facets. */
+    readonly PresentationMandate: "https://agenticprimitives.dev/ns/privacy-credential#PresentationMandate";
+    /** One judgement of the mandate for one device-key signature; every outcome is receipt material. */
+    readonly PresentationRelease: "https://agenticprimitives.dev/ns/privacy-credential#PresentationRelease";
+    /** What a verifier asks and accepts, declared where a holder can read it. Says what the door looks at; grants nothing. */
+    readonly VerifierPolicy: "https://agenticprimitives.dev/ns/privacy-credential#VerifierPolicy";
+    /** The predicate held, as what a door kept beside its decision — evidence, never authority. */
+    readonly PredicateAdmissionEvidence: "https://agenticprimitives.dev/ns/privacy-credential#PredicateAdmissionEvidence";
 };
 /** Predicate / property IRIs (T-box). */
 export declare const PREDICATE: {
@@ -879,6 +910,71 @@ export declare const PREDICATE: {
     readonly submissionSource: "https://agenticprimitives.dev/ns/estate#submissionSource";
     readonly vouchExpiresAt: "https://agenticprimitives.dev/ns/estate#vouchExpiresAt";
     readonly retiredReason: "https://agenticprimitives.dev/ns/estate#retiredReason";
+    readonly facetSubject: "https://agenticprimitives.dev/ns/privacy-credential#facetSubject";
+    readonly facetKeyId: "https://agenticprimitives.dev/ns/privacy-credential#facetKeyId";
+    readonly facetSuite: "https://agenticprimitives.dev/ns/privacy-credential#facetSuite";
+    readonly facetPublicKeyThumbprint: "https://agenticprimitives.dev/ns/privacy-credential#facetPublicKeyThumbprint";
+    readonly facetHash: "https://agenticprimitives.dev/ns/privacy-credential#facetHash";
+    readonly facetValidFrom: "https://agenticprimitives.dev/ns/privacy-credential#facetValidFrom";
+    readonly facetValidUntil: "https://agenticprimitives.dev/ns/privacy-credential#facetValidUntil";
+    readonly anchoredBy: "https://agenticprimitives.dev/ns/privacy-credential#anchoredBy";
+    readonly issuerRowOf: "https://agenticprimitives.dev/ns/privacy-credential#issuerRowOf";
+    readonly issuerRowId: "https://agenticprimitives.dev/ns/privacy-credential#issuerRowId";
+    readonly liveCredentialRoot: "https://agenticprimitives.dev/ns/privacy-credential#liveCredentialRoot";
+    readonly anchoredSequence: "https://agenticprimitives.dev/ns/privacy-credential#anchoredSequence";
+    readonly anchoredAt: "https://agenticprimitives.dev/ns/privacy-credential#anchoredAt";
+    readonly hasLiveCredentialLeaf: "https://agenticprimitives.dev/ns/privacy-credential#hasLiveCredentialLeaf";
+    readonly issuedUnder: "https://agenticprimitives.dev/ns/privacy-credential#issuedUnder";
+    readonly boundToDeviceKey: "https://agenticprimitives.dev/ns/privacy-credential#boundToDeviceKey";
+    readonly credentialDigest: "https://agenticprimitives.dev/ns/privacy-credential#credentialDigest";
+    readonly claimSchema: "https://agenticprimitives.dev/ns/privacy-credential#claimSchema";
+    readonly deviceKeyThumbprint: "https://agenticprimitives.dev/ns/privacy-credential#deviceKeyThumbprint";
+    readonly pairwiseFor: "https://agenticprimitives.dev/ns/privacy-credential#pairwiseFor";
+    readonly requestSuite: "https://agenticprimitives.dev/ns/privacy-credential#requestSuite";
+    readonly verifierId: "https://agenticprimitives.dev/ns/privacy-credential#verifierId";
+    readonly audience: "https://agenticprimitives.dev/ns/privacy-credential#audience";
+    readonly challengeNonce: "https://agenticprimitives.dev/ns/privacy-credential#challengeNonce";
+    readonly asksPredicate: "https://agenticprimitives.dev/ns/privacy-credential#asksPredicate";
+    readonly acceptedBundleVersion: "https://agenticprimitives.dev/ns/privacy-credential#acceptedBundleVersion";
+    readonly predicateDigest: "https://agenticprimitives.dev/ns/privacy-credential#predicateDigest";
+    readonly hasPredicate: "https://agenticprimitives.dev/ns/privacy-credential#hasPredicate";
+    readonly predicateClaim: "https://agenticprimitives.dev/ns/privacy-credential#predicateClaim";
+    readonly predicateOp: "https://agenticprimitives.dev/ns/privacy-credential#predicateOp";
+    readonly predicateOperand: "https://agenticprimitives.dev/ns/privacy-credential#predicateOperand";
+    readonly answersRequest: "https://agenticprimitives.dev/ns/privacy-credential#answersRequest";
+    readonly presentedUnder: "https://agenticprimitives.dev/ns/privacy-credential#presentedUnder";
+    readonly provesPredicate: "https://agenticprimitives.dev/ns/privacy-credential#provesPredicate";
+    readonly bundleVersion: "https://agenticprimitives.dev/ns/privacy-credential#bundleVersion";
+    readonly relationshipHandle: "https://agenticprimitives.dev/ns/privacy-credential#relationshipHandle";
+    readonly carriesNullifier: "https://agenticprimitives.dev/ns/privacy-credential#carriesNullifier";
+    readonly carriesStatus: "https://agenticprimitives.dev/ns/privacy-credential#carriesStatus";
+    readonly signedByDeviceKey: "https://agenticprimitives.dev/ns/privacy-credential#signedByDeviceKey";
+    readonly madeUnderMandate: "https://agenticprimitives.dev/ns/privacy-credential#madeUnderMandate";
+    readonly presents: "https://agenticprimitives.dev/ns/privacy-credential#presents";
+    readonly nullifierValue: "https://agenticprimitives.dev/ns/privacy-credential#nullifierValue";
+    readonly nullifierGrade: "https://agenticprimitives.dev/ns/privacy-credential#nullifierGrade";
+    readonly statusOf: "https://agenticprimitives.dev/ns/privacy-credential#statusOf";
+    readonly statusSequence: "https://agenticprimitives.dev/ns/privacy-credential#statusSequence";
+    readonly mandateAudience: "https://agenticprimitives.dev/ns/privacy-credential#mandateAudience";
+    readonly mandatePredicateDigest: "https://agenticprimitives.dev/ns/privacy-credential#mandatePredicateDigest";
+    readonly mandateIssuerKeyId: "https://agenticprimitives.dev/ns/privacy-credential#mandateIssuerKeyId";
+    readonly maxPresentations: "https://agenticprimitives.dev/ns/privacy-credential#maxPresentations";
+    readonly releasedUnder: "https://agenticprimitives.dev/ns/privacy-credential#releasedUnder";
+    readonly releaseOutcome: "https://agenticprimitives.dev/ns/privacy-credential#releaseOutcome";
+    readonly policyAsksPredicate: "https://agenticprimitives.dev/ns/privacy-credential#policyAsksPredicate";
+    readonly requiresNullifier: "https://agenticprimitives.dev/ns/privacy-credential#requiresNullifier";
+    readonly acceptsNullifierGrade: "https://agenticprimitives.dev/ns/privacy-credential#acceptsNullifierGrade";
+    readonly nullifierWindowSeconds: "https://agenticprimitives.dev/ns/privacy-credential#nullifierWindowSeconds";
+    readonly requiresStatus: "https://agenticprimitives.dev/ns/privacy-credential#requiresStatus";
+    readonly statusMaxAgeSeconds: "https://agenticprimitives.dev/ns/privacy-credential#statusMaxAgeSeconds";
+    readonly trustsIssuerFacet: "https://agenticprimitives.dev/ns/privacy-credential#trustsIssuerFacet";
+    readonly verifierPlacement: "https://agenticprimitives.dev/ns/privacy-credential#verifierPlacement";
+    readonly evidenceFacet: "https://agenticprimitives.dev/ns/privacy-credential#evidenceFacet";
+    readonly evidencePredicateDigest: "https://agenticprimitives.dev/ns/privacy-credential#evidencePredicateDigest";
+    readonly evidenceNullifierGrade: "https://agenticprimitives.dev/ns/privacy-credential#evidenceNullifierGrade";
+    readonly evidenceStatusSequence: "https://agenticprimitives.dev/ns/privacy-credential#evidenceStatusSequence";
+    readonly evidencedIn: "https://agenticprimitives.dev/ns/privacy-credential#evidencedIn";
+    readonly proofGrade: "https://agenticprimitives.dev/ns/privacy-credential#proofGrade";
 };
 /** SHACL shape IRIs (C-box).
  *
@@ -891,6 +987,12 @@ export declare const PREDICATE: {
 export declare const SHAPE: {
     readonly CanonicalAgentId: "https://agenticprimitives.dev/ns/core#CanonicalAgentIdShape";
     readonly CredentialFacet: "https://agenticprimitives.dev/ns/credential#CredentialFacetShape";
+    readonly PairwiseAccount: "https://agenticprimitives.dev/ns/privacy-credential#PairwiseAccountShape";
+    readonly PrivatePresentation: "https://agenticprimitives.dev/ns/privacy-credential#PrivatePresentationShape";
+    readonly Nullifier: "https://agenticprimitives.dev/ns/privacy-credential#NullifierShape";
+    readonly IssuerKeyFacet: "https://agenticprimitives.dev/ns/privacy-credential#IssuerKeyFacetShape";
+    readonly PresentationMandate: "https://agenticprimitives.dev/ns/privacy-credential#PresentationMandateShape";
+    readonly PredicateAdmissionEvidence: "https://agenticprimitives.dev/ns/privacy-credential#PredicateAdmissionEvidenceShape";
     readonly ContentDescriptor: "https://agenticprimitives.dev/ns/content#ContentDescriptorShape";
     readonly RegistryEntry: "https://agenticprimitives.dev/ns/registry#RegistryEntryShape";
     readonly SignedAgentCard: "https://agenticprimitives.dev/ns/registry#SignedAgentCardShape";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmBA,+DAA+D;AAC/D,eAAO,MAAM,gBAAgB,EAAG,OAAgB,CAAC;AAEjD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgFL,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,WAAW;;;;CASd,CAAC;AAEX,4DAA4D;AAC5D,eAAO,MAAM,KAAK;;;;;;;;;;;IAiBhB,kDAAkD;;IAElD,gFAAgF;;IAEhF,sGAAsG;;IAEtG,2FAA2F;;;IAG3F,qFAAqF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmNrF,2CAA2C;;;IAG3C,0CAA0C;;;IAG1C,mDAAmD;;;IAGnD,4CAA4C;;;;IAK5C,wCAAwC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAoHxC,4EAA4E;;IAE5E,kEAAkE;;;;IAIlE,sHAAsH;;;;;;;;;;;IActH,wGAAwG;;CAEhG,CAAC;AAEX,yCAAyC;AACzC,eAAO,MAAM,SAAS;;;;;;;;;;;;IAgBpB,kEAAkE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmKlE,qGAAqG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAiGrG,wEAAwE;;;;IAIxE,gEAAgE;;;;;;;IAOhE,wFAAwF;;;;;;;;;;;IAYxF,+EAA+E;;;;;;;;;;;;;IAc/E,sGAAsG;;;IAGtG,kGAAkG;;;;;;;;;;;;;;;;IAqBlG,wGAAwG;;;;;;;;;;;;IAgBxG;;;;2GAIuG;;IAEvG;6EACyE;;IAEzE,+FAA+F;;IAE/F,+FAA+F;;IAE/F,gGAAgG;;IAEhG;;yGAEqG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA0JrG,gDAAgD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCxC,CAAC;AAEX;;;;;;;GAOG;AACH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;IA0BhB,oFAAoF;;;IAKpF,uFAAuF;;;;;IAKvF,8EAA8E;;IAE9E,uFAAuF;;IAEvF,sFAAsF;;;;;;;;;;;;IAiBtF,wFAAwF;;;;;;;;;;;;;;;;;;;;IAyBxF,+EAA+E;;IAE/E;0EACsE;;;IAGtE;;kGAE8F;;IAE9F,0FAA0F;;;;;;;;IAc1F,6DAA6D;;IAE7D,wFAAwF;;IAExF,gFAAgF;;IAEhF,mGAAmG;;IAEnG,oGAAoG;;IAEpG,4GAA4G;;CAEpG,CAAC;AAQX,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAI7E,cAAc,kBAAkB,CAAC;AAGjC,cAAc,oBAAoB,CAAC;AAGnC,cAAc,kBAAkB,CAAC;AAGjC,cAAc,gBAAgB,CAAC;AAG/B,cAAc,gBAAgB,CAAC;AAG/B,cAAc,gBAAgB,CAAC;AAI/B,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAIrJ,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,cAAc,6BAA6B,CAAC;AAE5C,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEtF,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACnJ,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAElI,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEjV,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEtF,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,sBAAsB,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmBA,+DAA+D;AAC/D,eAAO,MAAM,gBAAgB,EAAG,OAAgB,CAAC;AAEjD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsFL,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,WAAW;;;;CASd,CAAC;AAEX,4DAA4D;AAC5D,eAAO,MAAM,KAAK;;;;;;;;;;;IAiBhB,kDAAkD;;IAElD,gFAAgF;;IAEhF,sGAAsG;;IAEtG,2FAA2F;;;IAG3F,qFAAqF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmNrF,2CAA2C;;;IAG3C,0CAA0C;;;IAG1C,mDAAmD;;;IAGnD,4CAA4C;;;;IAK5C,wCAAwC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAoHxC,4EAA4E;;IAE5E,kEAAkE;;;;IAIlE,sHAAsH;;;;;;;;;;;IActH,wGAAwG;;IAGxG,kHAAkH;;IAElH,mHAAmH;;IAEnH,yHAAyH;;IAEzH,uGAAuG;;IAEvG,sGAAsG;;IAEtG,iGAAiG;;IAEjG,sGAAsG;;IAEtG,iGAAiG;;IAEjG,yHAAyH;;IAEzH,qHAAqH;;IAErH,mHAAmH;;IAEnH,sHAAsH;;IAEtH,oGAAoG;;IAEpG,0HAA0H;;IAE1H,+FAA+F;;CAEvF,CAAC;AAEX,yCAAyC;AACzC,eAAO,MAAM,SAAS;;;;;;;;;;;;IAgBpB,kEAAkE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmKlE,qGAAqG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAiGrG,wEAAwE;;;;IAIxE,gEAAgE;;;;;;;IAOhE,wFAAwF;;;;;;;;;;;IAYxF,+EAA+E;;;;;;;;;;;;;IAc/E,sGAAsG;;;IAGtG,kGAAkG;;;;;;;;;;;;;;;;IAqBlG,wGAAwG;;;;;;;;;;;;IAgBxG;;;;2GAIuG;;IAEvG;6EACyE;;IAEzE,+FAA+F;;IAE/F,+FAA+F;;IAE/F,gGAAgG;;IAEhG;;yGAEqG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA0JrG,gDAAgD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuGxC,CAAC;AAEX;;;;;;;GAOG;AACH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmChB,oFAAoF;;;IAKpF,uFAAuF;;;;;IAKvF,8EAA8E;;IAE9E,uFAAuF;;IAEvF,sFAAsF;;;;;;;;;;;;IAiBtF,wFAAwF;;;;;;;;;;;;;;;;;;;;IAyBxF,+EAA+E;;IAE/E;0EACsE;;;IAGtE;;kGAE8F;;IAE9F,0FAA0F;;;;;;;;IAc1F,6DAA6D;;IAE7D,wFAAwF;;IAExF,gFAAgF;;IAEhF,mGAAmG;;IAEnG,oGAAoG;;IAEpG,4GAA4G;;CAEpG,CAAC;AAQX,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAI7E,cAAc,kBAAkB,CAAC;AAGjC,cAAc,oBAAoB,CAAC;AAGnC,cAAc,kBAAkB,CAAC;AAGjC,cAAc,gBAAgB,CAAC;AAG/B,cAAc,gBAAgB,CAAC;AAG/B,cAAc,gBAAgB,CAAC;AAI/B,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAIrJ,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,cAAc,6BAA6B,CAAC;AAE5C,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEtF,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACnJ,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAElI,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEjV,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEtF,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,sBAAsB,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -109,6 +109,12 @@ export const NS = {
     // they are a vault record and not a cache (ADR-0055). Evidence, never authority: inclusion says a grant
     // was live when the tree was last built, never that a party may act.
     apest: 'https://agenticprimitives.dev/ns/estate#',
+    // Anonymous credentials (specs 304 / 305 / 442 §7.2 / 443 W5; tbox/privacy-credential.ttl) — issuer-key facets,
+    // holder-bound credentials, proof requests and predicate programs, zero-knowledge presentations with their
+    // nullifier and status, the issuer's live-credential row, the presentation mandate, the predicate as admission
+    // evidence. PROOF IS EVIDENCE, THE MANDATE IS AUTHORITY, THE RECEIPT BINDS THE TWO: no gate reads an appc:
+    // record as a permission, and no property leads from a pairwise account or a presentation to the person.
+    appc: 'https://agenticprimitives.dev/ns/privacy-credential#',
 };
 /**
  * EXTERNAL namespaces the substrate emits terms under (not AP-owned, so not in {@link NS} —
@@ -515,6 +521,37 @@ export const CLASS = {
     // ── Estate projection (tbox/estate.ttl; spec 410 §4) ──
     /** One thing an estate vouches for, WITH its opening — the estate's own record behind a public root. */
     ProjectionSubmission: `${NS.apest}ProjectionSubmission`,
+    // ── Anonymous credentials (tbox/privacy-credential.ttl; specs 304 / 305 / 442 §7.2 / 443 W5) ──
+    /** A key an issuing agent (org or service, never a person) signs credentials with; anchored as an attestation. */
+    IssuerKeyFacet: `${NS.appc}IssuerKeyFacet`,
+    /** The issuer's live-credential root on neutral ground — its own, tagged row; revocation is retire + re-anchor. */
+    IssuerRow: `${NS.appc}IssuerRow`,
+    /** A credential made to be proved about, not shown: holder-bound, selectively disclosable; the holder's vault record. */
+    AnonymousCredential: `${NS.appc}AnonymousCredential`,
+    /** The custodied holder-binding key; signs only under a presentation mandate, judged per signature. */
+    DeviceKey: `${NS.appc}DeviceKey`,
+    /** The account a verifier sees: one per verifier origin, unlinkable across them; never the person. */
+    PairwiseAccount: `${NS.appc}PairwiseAccount`,
+    /** What a verifier asks — built from ITS policy and ITS challenge, never from a presentation. */
+    ProofRequest: `${NS.appc}ProofRequest`,
+    /** The statement proved: predicates compiled to canonical form and digested; what a mandate names. */
+    PredicateProgram: `${NS.appc}PredicateProgram`,
+    /** One claim, one operator, one operand — the verifier's threshold, never the holder's value. */
+    Predicate: `${NS.appc}Predicate`,
+    /** The holder's answer: a zero-knowledge proof, hidden keys and claims; held by a door for minutes under a reference. */
+    PrivatePresentation: `${NS.appc}PrivatePresentation`,
+    /** One visit per audience: deterministic per (device key, audience), consumed atomically by the verifier's store. */
+    Nullifier: `${NS.appc}Nullifier`,
+    /** The issuer still stands behind this credential as of a sequence — proved against the root the verifier READ. */
+    CredentialStatusPresentation: `${NS.appc}CredentialStatusPresentation`,
+    /** The person's standing permission for her device key to sign — a delegation bounded to venues, programs, facets. */
+    PresentationMandate: `${NS.appc}PresentationMandate`,
+    /** One judgement of the mandate for one device-key signature; every outcome is receipt material. */
+    PresentationRelease: `${NS.appc}PresentationRelease`,
+    /** What a verifier asks and accepts, declared where a holder can read it. Says what the door looks at; grants nothing. */
+    VerifierPolicy: `${NS.appc}VerifierPolicy`,
+    /** The predicate held, as what a door kept beside its decision — evidence, never authority. */
+    PredicateAdmissionEvidence: `${NS.appc}PredicateAdmissionEvidence`,
 };
 /** Predicate / property IRIs (T-box). */
 export const PREDICATE = {
@@ -1077,6 +1114,73 @@ export const PREDICATE = {
     submissionSource: `${NS.apest}submissionSource`,
     vouchExpiresAt: `${NS.apest}vouchExpiresAt`,
     retiredReason: `${NS.apest}retiredReason`,
+    // Anonymous credentials (tbox/privacy-credential.ttl) — the issuer side, the holder side, the exchange, the
+    // authority around the proof, the verifier's policy and the evidence a door keeps.
+    facetSubject: `${NS.appc}facetSubject`,
+    facetKeyId: `${NS.appc}facetKeyId`,
+    facetSuite: `${NS.appc}facetSuite`,
+    facetPublicKeyThumbprint: `${NS.appc}facetPublicKeyThumbprint`,
+    facetHash: `${NS.appc}facetHash`,
+    facetValidFrom: `${NS.appc}facetValidFrom`,
+    facetValidUntil: `${NS.appc}facetValidUntil`,
+    anchoredBy: `${NS.appc}anchoredBy`,
+    issuerRowOf: `${NS.appc}issuerRowOf`,
+    issuerRowId: `${NS.appc}issuerRowId`,
+    liveCredentialRoot: `${NS.appc}liveCredentialRoot`,
+    anchoredSequence: `${NS.appc}anchoredSequence`,
+    anchoredAt: `${NS.appc}anchoredAt`,
+    hasLiveCredentialLeaf: `${NS.appc}hasLiveCredentialLeaf`,
+    issuedUnder: `${NS.appc}issuedUnder`,
+    boundToDeviceKey: `${NS.appc}boundToDeviceKey`,
+    credentialDigest: `${NS.appc}credentialDigest`,
+    claimSchema: `${NS.appc}claimSchema`,
+    deviceKeyThumbprint: `${NS.appc}deviceKeyThumbprint`,
+    pairwiseFor: `${NS.appc}pairwiseFor`,
+    requestSuite: `${NS.appc}requestSuite`,
+    verifierId: `${NS.appc}verifierId`,
+    audience: `${NS.appc}audience`,
+    challengeNonce: `${NS.appc}challengeNonce`,
+    asksPredicate: `${NS.appc}asksPredicate`,
+    acceptedBundleVersion: `${NS.appc}acceptedBundleVersion`,
+    predicateDigest: `${NS.appc}predicateDigest`,
+    hasPredicate: `${NS.appc}hasPredicate`,
+    predicateClaim: `${NS.appc}predicateClaim`,
+    predicateOp: `${NS.appc}predicateOp`,
+    predicateOperand: `${NS.appc}predicateOperand`,
+    answersRequest: `${NS.appc}answersRequest`,
+    presentedUnder: `${NS.appc}presentedUnder`,
+    provesPredicate: `${NS.appc}provesPredicate`,
+    bundleVersion: `${NS.appc}bundleVersion`,
+    relationshipHandle: `${NS.appc}relationshipHandle`,
+    carriesNullifier: `${NS.appc}carriesNullifier`,
+    carriesStatus: `${NS.appc}carriesStatus`,
+    signedByDeviceKey: `${NS.appc}signedByDeviceKey`,
+    madeUnderMandate: `${NS.appc}madeUnderMandate`,
+    presents: `${NS.appc}presents`,
+    nullifierValue: `${NS.appc}nullifierValue`,
+    nullifierGrade: `${NS.appc}nullifierGrade`,
+    statusOf: `${NS.appc}statusOf`,
+    statusSequence: `${NS.appc}statusSequence`,
+    mandateAudience: `${NS.appc}mandateAudience`,
+    mandatePredicateDigest: `${NS.appc}mandatePredicateDigest`,
+    mandateIssuerKeyId: `${NS.appc}mandateIssuerKeyId`,
+    maxPresentations: `${NS.appc}maxPresentations`,
+    releasedUnder: `${NS.appc}releasedUnder`,
+    releaseOutcome: `${NS.appc}releaseOutcome`,
+    policyAsksPredicate: `${NS.appc}policyAsksPredicate`,
+    requiresNullifier: `${NS.appc}requiresNullifier`,
+    acceptsNullifierGrade: `${NS.appc}acceptsNullifierGrade`,
+    nullifierWindowSeconds: `${NS.appc}nullifierWindowSeconds`,
+    requiresStatus: `${NS.appc}requiresStatus`,
+    statusMaxAgeSeconds: `${NS.appc}statusMaxAgeSeconds`,
+    trustsIssuerFacet: `${NS.appc}trustsIssuerFacet`,
+    verifierPlacement: `${NS.appc}verifierPlacement`,
+    evidenceFacet: `${NS.appc}evidenceFacet`,
+    evidencePredicateDigest: `${NS.appc}evidencePredicateDigest`,
+    evidenceNullifierGrade: `${NS.appc}evidenceNullifierGrade`,
+    evidenceStatusSequence: `${NS.appc}evidenceStatusSequence`,
+    evidencedIn: `${NS.appc}evidencedIn`,
+    proofGrade: `${NS.appc}proofGrade`,
 };
 /** SHACL shape IRIs (C-box).
  *
@@ -1089,6 +1193,15 @@ export const PREDICATE = {
 export const SHAPE = {
     CanonicalAgentId: `${NS.ap}CanonicalAgentIdShape`,
     CredentialFacet: `${NS.apcr}CredentialFacetShape`,
+    // Anonymous credentials (cbox/privacy-credential-shapes.shacl.ttl): a pairwise account names no person; a
+    // presentation answers one request and carries no claim value; a nullifier is scoped and graded; a facet is an
+    // org's or a service's and anchored; a mandate is bounded; evidence names what held. Structure, never permission.
+    PairwiseAccount: `${NS.appc}PairwiseAccountShape`,
+    PrivatePresentation: `${NS.appc}PrivatePresentationShape`,
+    Nullifier: `${NS.appc}NullifierShape`,
+    IssuerKeyFacet: `${NS.appc}IssuerKeyFacetShape`,
+    PresentationMandate: `${NS.appc}PresentationMandateShape`,
+    PredicateAdmissionEvidence: `${NS.appc}PredicateAdmissionEvidenceShape`,
     // Verifiable-content substrate (spec 266) — encodes ADR-0033 R3 (no inline text).
     ContentDescriptor: `${NS.apcnt}ContentDescriptorShape`,
     RegistryEntry: `${NS.apreg}RegistryEntryShape`,