@agenticprimitives/ontology 1.0.0-alpha.4 → 1.0.0-alpha.40

package/run-provenance.jsonld

@@ -0,0 +1,314 @@
+{
+  "@context": {
+    "@version": 1.1,
+    "@base": "urn:ap:prov:",
+    "prov": "http://www.w3.org/ns/prov#",
+    "p-plan": "http://purl.org/net/p-plan#",
+    "ep-plan": "https://w3id.org/ep-plan#",
+    "xsd": "http://www.w3.org/2001/XMLSchema#",
+    "ap": "https://agenticprimitives.dev/ns/core#",
+    "apexec": "https://agenticprimitives.dev/ns/execution#",
+    "apactor": "https://agenticprimitives.dev/ns/actor#",
+    "apguide": "https://agenticprimitives.dev/ns/guidance#",
+    "apdel": "https://agenticprimitives.dev/ns/delegation#",
+    "apvr": "https://agenticprimitives.dev/ns/verification-receipt#",
+    "apcoord": "https://agenticprimitives.dev/ns/coordination#",
+    "apix": "https://agenticprimitives.dev/ns/interaction#",
+    "id": "@id",
+    "type": "@type",
+    "graph": "@graph",
+    "startedAtTime": {
+      "@id": "prov:startedAtTime",
+      "@type": "xsd:dateTime"
+    },
+    "endedAtTime": {
+      "@id": "prov:endedAtTime",
+      "@type": "xsd:dateTime"
+    },
+    "endedAt": {
+      "@id": "apexec:endedAt",
+      "@type": "xsd:dateTime"
+    },
+    "wasAssociatedWith": {
+      "@id": "prov:wasAssociatedWith",
+      "@type": "@id"
+    },
+    "actedOnBehalfOf": {
+      "@id": "prov:actedOnBehalfOf",
+      "@type": "@id"
+    },
+    "wasAttributedTo": {
+      "@id": "prov:wasAttributedTo",
+      "@type": "@id"
+    },
+    "used": {
+      "@id": "prov:used",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "usedDelegation": {
+      "@id": "apvr:usedDelegation",
+      "@type": "@id"
+    },
+    "generated": {
+      "@id": "prov:generated",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "wasGeneratedBy": {
+      "@id": "prov:wasGeneratedBy",
+      "@type": "@id"
+    },
+    "wasInformedBy": {
+      "@id": "prov:wasInformedBy",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "wasDerivedFrom": {
+      "@id": "prov:wasDerivedFrom",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "wasRevisionOf": {
+      "@id": "prov:wasRevisionOf",
+      "@type": "@id"
+    },
+    "qualifiedAssociation": {
+      "@id": "prov:qualifiedAssociation",
+      "@container": "@set"
+    },
+    "agent": {
+      "@id": "prov:agent",
+      "@type": "@id"
+    },
+    "hadPlan": {
+      "@id": "prov:hadPlan",
+      "@type": "@id"
+    },
+    "hadRole": {
+      "@id": "prov:hadRole",
+      "@type": "@id"
+    },
+    "hasTraceElement": {
+      "@id": "ep-plan:hasTraceElement",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "isStepOfPlan": {
+      "@id": "p-plan:isStepOfPlan",
+      "@type": "@id"
+    },
+    "isPrecededBy": {
+      "@id": "p-plan:isPrecededBy",
+      "@type": "@id"
+    },
+    "correspondsToStep": {
+      "@id": "p-plan:correspondsToStep",
+      "@type": "@id"
+    },
+    "isDecomposedAsPlan": {
+      "@id": "ep-plan:isDecomposedAsPlan",
+      "@type": "@id"
+    },
+    "hasStep": {
+      "@id": "apexec:hasStep",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "runRef": "apexec:runRef",
+    "intentDigest": "apexec:intentDigest",
+    "completionState": {
+      "@id": "apexec:completionState",
+      "@type": "@vocab"
+    },
+    "receiptDigest": "apexec:receiptDigest",
+    "usedPlanContentHash": "apexec:usedPlanContentHash",
+    "realizesCapability": {
+      "@id": "apexec:realizesCapability",
+      "@type": "@id"
+    },
+    "authorityDecision": "apexec:authorityDecision",
+    "afterApproval": {
+      "@id": "apexec:afterApproval",
+      "@type": "xsd:boolean"
+    },
+    "chainDigest": "apexec:chainDigest",
+    "accountabilityRoot": {
+      "@id": "apexec:accountabilityRoot",
+      "@type": "@id"
+    },
+    "actorContext": {
+      "@id": "apexec:actorContext",
+      "@type": "@id"
+    },
+    "delegatedToAgent": {
+      "@id": "apexec:delegatedToAgent",
+      "@type": "@id"
+    },
+    "errorClass": "apexec:errorClass",
+    "observedOutcome": {
+      "@id": "apexec:observedOutcome",
+      "@type": "@vocab"
+    },
+    "providerRef": "apexec:providerRef",
+    "observedAt": {
+      "@id": "apexec:observedAt",
+      "@type": "xsd:dateTime"
+    },
+    "traceId": "apexec:traceId",
+    "spanId": "apexec:spanId",
+    "estate": "apexec:estate",
+    "effectProduces": "apexec:effectProduces",
+    "effectSucceeded": {
+      "@id": "apexec:effectSucceeded",
+      "@type": "xsd:boolean"
+    },
+    "decisionPoint": "apexec:decisionPoint",
+    "decisionRule": "apexec:decisionRule",
+    "artifactBytes": {
+      "@id": "apexec:artifactBytes",
+      "@type": "xsd:integer"
+    },
+    "artifactDigest": "apexec:artifactDigest",
+    "actingAgent": {
+      "@id": "apactor:actingAgent",
+      "@type": "@id"
+    },
+    "originatingAgent": {
+      "@id": "apactor:originatingAgent",
+      "@type": "@id"
+    },
+    "rootPrincipal": {
+      "@id": "apactor:rootPrincipal",
+      "@type": "@id"
+    },
+    "arrivedBy": {
+      "@id": "apexec:arrivedBy",
+      "@type": "@id"
+    },
+    "doorKind": "apexec:doorKind",
+    "a2aMessageId": "apexec:a2aMessageId",
+    "a2aContextId": "apexec:a2aContextId",
+    "a2aTaskId": "apexec:a2aTaskId",
+    "hasModelInvocation": {
+      "@id": "apexec:hasModelInvocation",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "invocationRole": "apexec:invocationRole",
+    "modelId": "apexec:modelId",
+    "modelProvider": "apexec:modelProvider",
+    "promptTemplateDigest": "apexec:promptTemplateDigest",
+    "tokensIn": {
+      "@id": "apexec:tokensIn",
+      "@type": "xsd:integer"
+    },
+    "tokensOut": {
+      "@id": "apexec:tokensOut",
+      "@type": "xsd:integer"
+    },
+    "routeReason": "apexec:routeReason",
+    "underVariant": {
+      "@id": "apexec:underVariant",
+      "@type": "@id"
+    },
+    "variantDigest": "apexec:variantDigest",
+    "plannerKind": "apexec:plannerKind",
+    "routePolicy": "apexec:routePolicy",
+    "harnessBuild": "apexec:harnessBuild",
+    "capabilityToggle": {
+      "@id": "apexec:capabilityToggle",
+      "@container": "@set"
+    },
+    "fromStartingState": {
+      "@id": "apexec:fromStartingState",
+      "@type": "@id"
+    },
+    "startingStateDigest": "apexec:startingStateDigest",
+    "governedBySkill": {
+      "@id": "apexec:governedBySkill",
+      "@type": "@id"
+    },
+    "hasEngagement": {
+      "@id": "apexec:hasEngagement",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "ofCapability": {
+      "@id": "apexec:ofCapability",
+      "@type": "@id"
+    },
+    "engagementEffect": {
+      "@id": "apexec:engagementEffect",
+      "@type": "@id"
+    },
+    "capabilityVersion": "apexec:capabilityVersion",
+    "offeredCandidate": {
+      "@id": "apexec:offeredCandidate",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "chose": {
+      "@id": "apexec:chose",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "rejectedNeighbour": {
+      "@id": "apexec:rejectedNeighbour",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "inferredRequest": {
+      "@id": "apexec:inferredRequest",
+      "@type": "@id"
+    },
+    "inferredAbout": {
+      "@id": "apexec:inferredAbout",
+      "@type": "@id",
+      "@container": "@set"
+    },
+    "Agent": "ap:Agent",
+    "SoftwareAgent": "prov:SoftwareAgent",
+    "Person": "prov:Person",
+    "Organization": "prov:Organization",
+    "AgentRuntime": "apexec:AgentRuntime",
+    "Activity": "prov:Activity",
+    "Entity": "prov:Entity",
+    "Plan": "p-plan:Plan",
+    "Step": "p-plan:Step",
+    "Bundle": "prov:Bundle",
+    "Association": "prov:Association",
+    "ExecutionTraceBundle": "ep-plan:ExecutionTraceBundle",
+    "FailedActivity": "ep-plan:FailedActivity",
+    "ServiceExecution": "apexec:ServiceExecution",
+    "SkillExecution": "apexec:SkillExecution",
+    "ExecutionPlan": "apexec:ExecutionPlan",
+    "AgentSkillPackage": "apguide:AgentSkillPackage",
+    "Delegation": "apdel:Delegation",
+    "StepReceipt": "apexec:StepReceipt",
+    "ChainTransaction": "apexec:ChainTransaction",
+    "Effect": "apexec:Effect",
+    "DecisionRecord": "apexec:DecisionRecord",
+    "RunArtifact": "apexec:RunArtifact",
+    "ActorContext": "apactor:ActorContext",
+    "CommunicationDelivery": "apix:CommunicationDelivery",
+    "IntentInvocation": "apix:IntentInvocation",
+    "OrchestratedTask": "apix:OrchestratedTask",
+    "CoordinationPlan": "apcoord:CoordinationPlan",
+    "PlanStep": "apcoord:PlanStep",
+    "Door": "apexec:Door",
+    "ModelInvocation": "apexec:ModelInvocation",
+    "Variant": "apexec:Variant",
+    "StartingState": "apexec:StartingState",
+    "CapabilityEngagement": "apexec:CapabilityEngagement",
+    "Completed": "apexec:Completed",
+    "Failed": "apexec:Failed",
+    "Refused": "apexec:Refused",
+    "Skipped": "apexec:Skipped",
+    "Suspended": "apexec:Suspended",
+    "attempted": "apexec:attempted",
+    "accepted": "apexec:accepted",
+    "committed": "apexec:committed",
+    "confirmed": "apexec:confirmed"
+  }
+}

package/tbox/actor-context.ttl

@@ -0,0 +1,145 @@
+# Actor context + portable authority chain T-box — spec 326 W1 (ADR-0052).
+#
+# The vocabulary of "who is answerable, who acts, which instance runs, and how external identifiers relate
+# WITHOUT identifier equality." Every term is dual-grounded to a web2 IAM/legal concept AND a web3 concept in
+# `mappings/actor-context-standards.ttl` (+ the machine-readable `GROUNDED_VOCABULARY` TS export). Structural
+# grounding here is PROV-O. Roles are NOT authority; presentation is NOT authority; a binding is NOT equality.
+
+@prefix apactor: <https://agenticprimitives.dev/ns/actor#> .
+@prefix ap:      <https://agenticprimitives.dev/ns/core#> .
+@prefix apsit:   <https://agenticprimitives.dev/ns/situation#> .
+@prefix apdel:   <https://agenticprimitives.dev/ns/delegation#> .
+@prefix aporg:   <https://agenticprimitives.dev/ns/org#> .
+@prefix prov:    <http://www.w3.org/ns/prov#> .
+@prefix owl:     <http://www.w3.org/2002/07/owl#> .
+@prefix rdfs:    <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix skos:    <http://www.w3.org/2004/02/skos/core#> .
+
+<https://agenticprimitives.dev/ns/actor> a owl:Ontology ;
+    rdfs:label "Actor context and portable authority chain (spec 326)" ;
+    rdfs:comment "Explicit actor roles, typed cross-bindings, portable authority-chain projection. Web3 authority is sole authority (ADR-0041); these terms carry CONTEXT and EVIDENCE, never a competing authority source." .
+
+# ─── Anchors ─────────────────────────────────────────────────────────────────
+
+apactor:AccountabilityRoot a owl:Class ;
+    rdfs:subClassOf prov:Agent ;
+    rdfs:label "AccountabilityRoot" ;
+    rdfs:comment "The durable anchor custody / revocation / dispute / audit always trace back to — the CAIP-10 Smart Agent. Web2: the accountable party (GDPR controller); web3: the ERC-4337 account. NOT the default presentation identifier (ADR-0010 amendment)." .
+
+apactor:PresentationIdentifier a owl:Class ;
+    rdfs:subClassOf ap:Facet ;
+    rdfs:label "PresentationIdentifier" ;
+    rdfs:comment "What a specific counterparty or public surface is shown in one context — a name, a relationship-scoped pseudonym, or a predicate proof. A FACET that points at the AccountabilityRoot; chosen per reliance class; NEVER authority (ADR-0010 amendment, ADR-0020)." .
+
+# ─── Subject references + cross-binding ──────────────────────────────────────
+
+apactor:SubjectRef a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "SubjectRef" ;
+    rdfs:comment "A reference to a subject in any trust domain AP recognizes (caip10 / oidc / did / spiffe / oauth-agent-instance). Ring 0 uses the caip10 SubjectRef for authority; the rest appear in bindings + projections only." .
+
+apactor:SubjectBinding a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "SubjectBinding" ;
+    rdfs:comment "A signed, scoped, revocable RELATIONSHIP between two SubjectRefs (a proved cross-domain link). Bilateral (both sides sign one digest) is strongest. NEVER owl:sameAs / identifier equality — that is the whole point (ADR-0052 §3)." .
+
+apactor:AgentInstance a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "AgentInstance" ;
+    rdfs:comment "A particular task / session / process / container runtime. Web2: a WIMSE/SPIFFE workload instance. Distinct from the account; workload attestations (TEE, image digest) are FACETS of the instance, not persistent agent identity." .
+
+apactor:ConfirmationKey a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ConfirmationKey" ;
+    rdfs:comment "A key proving possession — NOT who the agent is. Web2: OAuth/OIDC cnf (RFC 7800); web3: the session-key / passkey signer. Rotating it must not change agent or instance identity." .
+
+# ─── The per-hop context bundle + portable chain ─────────────────────────────
+
+apactor:ActorContext a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ActorContext" ;
+    rdfs:comment "The explicit actor roles carried on one hop. Roles may overlap and are INDEPENDENT of AgentKind. accountabilityRoot ≠ rootPrincipal: the anchor is durable while the principal-as-represented may be pairwise/pseudonymous." .
+
+apactor:AuthorityChainEnvelope a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "AuthorityChainEnvelope" ;
+    rdfs:comment "Portable ordered projection of the on-chain Delegation parent-hash chain (built in @agenticprimitives/delegation, W2). The chain is the source of truth; the envelope is the portable evidence — it never widens authority." .
+
+# ─── Role properties (on ActorContext) — CONTEXT, not authority ──────────────
+
+apactor:accountabilityRoot a owl:ObjectProperty ;
+    rdfs:domain apactor:ActorContext ; rdfs:range apactor:SubjectRef ;
+    rdfs:label "accountabilityRoot" ;
+    rdfs:comment "The durable anchor this hop is answerable to." .
+
+apactor:rootPrincipal a owl:ObjectProperty ;
+    rdfs:domain apactor:ActorContext ; rdfs:range apactor:SubjectRef ;
+    rdfs:label "rootPrincipal" ;
+    rdfs:comment "The human/org ultimately represented — MAY be pairwise / pseudonymous. Web2: OAuth / agency-law principal." .
+
+apactor:originatingAgent a owl:ObjectProperty ;
+    rdfs:domain apactor:ActorContext ; rdfs:range apactor:SubjectRef ;
+    rdfs:label "originatingAgent" ;
+    rdfs:comment "The agent that started the overall task." .
+
+apactor:actingAgent a owl:ObjectProperty ;
+    rdfs:domain apactor:ActorContext ; rdfs:range apactor:SubjectRef ;
+    rdfs:label "actingAgent" ;
+    rdfs:comment "The agent performing THIS hop (may be a sub-agent). Web2: OAuth token-exchange act actor." .
+
+apactor:agentInstance a owl:ObjectProperty ;
+    rdfs:domain apactor:ActorContext ; rdfs:range apactor:AgentInstance ;
+    rdfs:label "agentInstance" ;
+    rdfs:comment "The runtime instance performing this hop." .
+
+apactor:confirmationKey a owl:ObjectProperty ;
+    rdfs:domain apactor:ActorContext ; rdfs:range apactor:ConfirmationKey ;
+    rdfs:label "confirmationKey" ;
+    rdfs:comment "The possession key bound to this hop — proves control, not identity." .
+
+# ─── Binding relationship properties (typed cross-bindings) ──────────────────
+
+apactor:accountabilityRootOf a owl:ObjectProperty ;
+    rdfs:domain apactor:SubjectRef ; rdfs:range apactor:SubjectRef ;
+    rdfs:label "accountabilityRootOf" ;
+    rdfs:comment "SubjectBinding relationship: the subject is the durable accountability anchor of the object." .
+
+apactor:representsPrincipal a owl:ObjectProperty ;
+    rdfs:domain apactor:SubjectRef ; rdfs:range apactor:SubjectRef ;
+    rdfs:label "representsPrincipal" ;
+    rdfs:comment "SubjectBinding relationship: the subject (a Person/Org SA) represents the object principal — may be pairwise." .
+
+apactor:agentIdentityOf a owl:ObjectProperty ;
+    rdfs:domain apactor:SubjectRef ; rdfs:range apactor:SubjectRef ;
+    rdfs:label "agentIdentityOf" ;
+    rdfs:comment "SubjectBinding relationship: an external agent identity (e.g. did:aip, registry handle) is a facet of the object SA — bound by proof, never equal." .
+
+apactor:runtimeInstanceOf a owl:ObjectProperty ;
+    rdfs:domain apactor:SubjectRef ; rdfs:range apactor:SubjectRef ;
+    rdfs:label "runtimeInstanceOf" ;
+    rdfs:comment "SubjectBinding relationship: a workload/runtime instance is running as the object agent (web2: WIMSE workload ↔ agent)." .
+
+apactor:controlledBy a owl:ObjectProperty ;
+    rdfs:domain apactor:SubjectRef ; rdfs:range apactor:SubjectRef ;
+    rdfs:label "controlledBy" ;
+    rdfs:comment "SubjectBinding relationship: the subject is controlled by the object under custody policy (a control credential — never a delegation)." .
+
+apactor:delegatedTo a owl:ObjectProperty ;
+    rdfs:domain apactor:SubjectRef ; rdfs:range apactor:SubjectRef ;
+    rdfs:label "delegatedTo" ;
+    rdfs:comment "SubjectBinding relationship: authority was delegated from the subject to the object (projection of an apdel:Delegation; authority itself stays on-chain)." .
+
+apactor:executedByWorkload a owl:ObjectProperty ;
+    rdfs:domain apactor:SubjectRef ; rdfs:range apactor:SubjectRef ;
+    rdfs:label "executedByWorkload" ;
+    rdfs:comment "SubjectBinding relationship: the operation was executed by the object workload on behalf of the subject agent." .
+
+# ─── The Activities edge into the workspace plane (spec 344 §4.3) ──────────
+
+apactor:withinWorkspace a owl:ObjectProperty ;
+    rdfs:domain apactor:ActorContext ; rdfs:range aporg:Workspace ;
+    rdfs:label "withinWorkspace" ;
+    rdfs:comment """The workspace this hop was performed within, when one applies. Joins the portable
+      authority chain (actingAgent / rootPrincipal / AuthorityChainEnvelope) to the coordination
+      plane — the review's WorkspaceContext realized ON spec 326, not beside it. Makes the
+      workspace an audit context: filtering acts by workspace becomes a query.""" .