@agenticprimitives/ontology 1.0.0-alpha.4 → 1.0.0-alpha.40

package/tbox/agent-resolution.ttl

@@ -0,0 +1,308 @@
+# T-box — agent resolution vocabulary (spec 338; ADR-0056).
+#
+# VOCABULARY HAZARD — READ BEFORE EXTENDING:
+#   `apres:` (ns/resolution#) is INTENT resolution — apres:Resolver, apres:ResolutionReceipt,
+#   the ERC-7683 Resolver pattern owned by `intent-resolver`. THIS module is AGENT resolution and
+#   uses `apar:` (ns/agent-resolution#). Never reuse the bare terms Resolver / ResolutionReceipt
+#   here; this plane's receipt is apar:AgentResolutionReceipt.
+#
+# THE GAP THIS MODULE OWNS: an agent's canonical identity is stable, but WHERE it is right now, and
+# WHO may find that out, are separate mutable questions. Public naming answers neither privately nor
+# freshly. A signed card proves a snapshot was not modified; it does not prove the snapshot is still
+# in force.
+#
+# THE RULE THAT GOVERNS EVERY TERM BELOW:
+#   A resolution grant answers      "may this party DISCOVER how to reach this agent?"
+#   It NEVER answers                "may this party USE this agent?"
+# Service use remains delegation ∩ entitlement ∩ tool/action policy ∩ invocation proof ∩ revocation
+# ∩ audit. Resolution is a FOURTH orthogonal concern beside custody, admission and authority.
+#
+# FOUR INDEPENDENT DIMENSIONS (apar:AgentDiscoveryPolicy): naming, listing, resolution, inbound.
+# "Nameless" describes only the absence of a public label — it never implies "unresolvable".
+
+@prefix apar:   <https://agenticprimitives.dev/ns/agent-resolution#> .
+@prefix ap:     <https://agenticprimitives.dev/ns/core#> .
+@prefix apdisc: <https://agenticprimitives.dev/ns/discovery#> .
+@prefix apsec:  <https://agenticprimitives.dev/ns/security-exposure#> .
+@prefix rdf:    <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs:   <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:    <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:    <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:   <http://www.w3.org/ns/prov#> .
+@prefix skos:   <http://www.w3.org/2004/02/skos/core#> .
+
+apar: a owl:Ontology ;
+    rdfs:label "Agentic Primitives — agent resolution ontology" ;
+    owl:versionInfo "0.2.0" ;
+    rdfs:comment "Spec 338 / ADR-0056. Private and public agent resolution: discovery policy, signed sequenced service publication, private resolution grants, connection invitations, rendezvous services, and privacy-minimized resolution receipts. Distinct from apres: (intent resolution)." .
+
+# ─── Discovery policy — four independent dimensions ───────────────────────
+
+apar:AgentDiscoveryPolicy a owl:Class ;
+    rdfs:label "Agent Discovery Policy" ;
+    rdfs:comment "The four INDEPENDENT postures of an agent: naming (public/private-label/none), listing (public/consented-projection/none), resolution (public/authenticated/invitation/pairwise/direct/none), inbound (open/known-peer/delegation-required/outbound-only). Never a single enum — collapsing them is the modelling error spec 338 corrects." .
+
+apar:namingPosture a owl:DatatypeProperty ;
+    rdfs:domain apar:AgentDiscoveryPolicy ;
+    rdfs:range xsd:string ;
+    rdfs:label "naming posture" ;
+    rdfs:comment "public | private-label | none. Says nothing about resolvability." .
+
+apar:listingPosture a owl:DatatypeProperty ;
+    rdfs:domain apar:AgentDiscoveryPolicy ;
+    rdfs:range xsd:string ;
+    rdfs:label "listing posture" ;
+    rdfs:comment "public | consented-projection | none. A private agent enters search ONLY via an explicit, revocable consent record." .
+
+apar:resolutionPosture a owl:DatatypeProperty ;
+    rdfs:domain apar:AgentDiscoveryPolicy ;
+    rdfs:range xsd:string ;
+    rdfs:label "resolution posture" ;
+    rdfs:comment "public | authenticated | invitation | pairwise | direct | none." .
+
+apar:inboundPosture a owl:DatatypeProperty ;
+    rdfs:domain apar:AgentDiscoveryPolicy ;
+    rdfs:range xsd:string ;
+    rdfs:label "inbound posture" ;
+    rdfs:comment "open | known-peer | delegation-required | outbound-only. Resolving is not connecting." .
+
+apar:hasDiscoveryPolicy a owl:ObjectProperty ;
+    rdfs:domain ap:Agent ;
+    rdfs:range apar:AgentDiscoveryPolicy ;
+    rdfs:label "has discovery policy" .
+
+# ─── Resolution references + methods ──────────────────────────────────────
+
+apar:AgentResolutionMethod a owl:Class ;
+    rdfs:subClassOf skos:Concept ;
+    rdfs:label "Agent Resolution Method" ;
+    rdfs:comment "ans | private-grant | direct-invitation | canonical-id | dntls | did | local-directory | …. Open-ended (ADR-0038): a new method is a Ring-1 adapter, never a change to verification rules." .
+
+apar:AgentResolutionReference a owl:Class ;
+    rdfs:label "Agent Resolution Reference" ;
+    rdfs:comment "A portable 'how do I look this agent up' value, tagged with its method. Holding one is not authority to resolve, let alone to invoke." .
+
+apar:hasResolutionMethod a owl:ObjectProperty ;
+    rdfs:domain apar:AgentResolutionReference ;
+    rdfs:range apar:AgentResolutionMethod ;
+    rdfs:label "has resolution method" .
+
+# ─── Service publication — signed, sequenced, expiring ────────────────────
+
+apar:AgentServicePublication a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Agent Service Publication" ;
+    rdfs:comment "The CURRENT signed operational projection of an agent's surfaces: endpoints, transport keys, protocol versions, audience, status and freshness. Distinct from the durable agent profile and from a design-time surface descriptor. A content hash proves it was not modified; sequence + expiry + status prove it is current." .
+
+apar:ServiceSurface a owl:Class ;
+    rdfs:label "Service Surface" ;
+    rdfs:comment "One callable or readable endpoint within a publication: protocol, version, URI, exposure, audience, security requirements, optional transport key and endpoint-control proof." .
+
+apar:PublicationAuthority a owl:Class ;
+    rdfs:label "Publication Authority" ;
+    rdfs:comment "The record permitting an agent to sign publications on behalf of a target agent. A valid signature by an unauthorized publisher is still a forgery." .
+
+apar:describesAgent a owl:ObjectProperty ;
+    rdfs:domain apar:AgentServicePublication ;
+    rdfs:range ap:Agent ;
+    rdfs:label "describes agent" ;
+    rdfs:comment "Exactly one canonical Smart Agent per publication (ADR-0010)." .
+
+apar:hasServiceSurface a owl:ObjectProperty ;
+    rdfs:domain apar:AgentServicePublication ;
+    rdfs:range apar:ServiceSurface ;
+    rdfs:label "has service surface" .
+
+apar:publishedBy a owl:ObjectProperty ;
+    rdfs:domain apar:AgentServicePublication ;
+    rdfs:range ap:Agent ;
+    rdfs:label "published by" .
+
+apar:authorizedBy a owl:ObjectProperty ;
+    rdfs:domain apar:AgentServicePublication ;
+    rdfs:range apar:PublicationAuthority ;
+    rdfs:label "authorized by" .
+
+apar:publicationSequence a owl:DatatypeProperty ;
+    rdfs:domain apar:AgentServicePublication ;
+    rdfs:range xsd:nonNegativeInteger ;
+    rdfs:label "publication sequence" ;
+    rdfs:comment "Monotonic WITHIN a channel. The anti-rollback axis: a lower sequence is rejected, an equal sequence with a different digest is publisher equivocation." .
+
+apar:previousPublication a owl:ObjectProperty ;
+    rdfs:domain apar:AgentServicePublication ;
+    rdfs:range apar:AgentServicePublication ;
+    rdfs:label "previous publication" .
+
+apar:supersedesPublication a owl:ObjectProperty ;
+    owl:inverseOf apar:previousPublication ;
+    rdfs:label "supersedes publication" .
+
+apar:publicationDigest a owl:DatatypeProperty ;
+    rdfs:domain apar:AgentServicePublication ;
+    rdfs:range xsd:string ;
+    rdfs:label "publication digest" .
+
+apar:publicationStatus a owl:DatatypeProperty ;
+    rdfs:domain apar:AgentServicePublication ;
+    rdfs:range xsd:string ;
+    rdfs:label "publication status" ;
+    rdfs:comment "active | superseded | suspended | revoked | compromised. Only active may be used to reach an agent." .
+
+apar:surfaceExposure a owl:DatatypeProperty ;
+    rdfs:domain apar:ServiceSurface ;
+    rdfs:range xsd:string ;
+    rdfs:label "surface exposure" ;
+    rdfs:comment "public | authenticated | private | service-only. A private surface with no audience is visible to NOBODY (fail-closed)." .
+
+apar:disclosedTo a owl:ObjectProperty ;
+    rdfs:domain apar:ServiceSurface ;
+    rdfs:range ap:Agent ;
+    rdfs:label "disclosed to" ;
+    rdfs:comment "The audience of a private surface. Never projected into any public graph." .
+
+# ─── Endpoint + transport-key evidence ────────────────────────────────────
+
+apar:EndpointControlProof a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Endpoint Control Proof" ;
+    rdfs:comment "Evidence that the publisher CONTROLS the endpoint it published — the difference between claiming a URI and controlling it." .
+
+apar:TransportKeyBinding a owl:Class ;
+    rdfs:label "Transport Key Binding" ;
+    rdfs:comment "A transport key bound to a surface, with a purpose and a validity interval. Rotating it republishes at sequence+1; it never changes the canonical agent." .
+
+apar:hasEndpointControlProof a owl:ObjectProperty ;
+    rdfs:domain apar:ServiceSurface ;
+    rdfs:range apar:EndpointControlProof ;
+    rdfs:label "has endpoint control proof" .
+
+apar:hasTransportKeyBinding a owl:ObjectProperty ;
+    rdfs:domain apar:ServiceSurface ;
+    rdfs:range apar:TransportKeyBinding ;
+    rdfs:label "has transport key binding" .
+
+# ─── Private resolution grants + invitations ──────────────────────────────
+
+apar:PrivateResolutionGrant a owl:Class ;
+    rdfs:label "Private Resolution Grant" ;
+    rdfs:comment "A capability to DISCOVER, never to USE. High-entropy opaque id — never a salted hash of a human-readable name. Modes: subject-bound (default; a copied grant is inert), pairwise (per-relationship id/projection/label), bearer-bootstrap (short-lived, exchanged for a subject-bound grant)." .
+
+apar:PairwiseAgentAlias a owl:Class ;
+    rdfs:label "Pairwise Agent Alias" ;
+    rdfs:comment "A per-counterparty private label for the same canonical agent. MUST NOT have a public projection — a public row is a common identifier that defeats unlinkability." .
+
+apar:AgentConnectionInvitation a owl:Class ;
+    rdfs:label "Agent Connection Invitation" ;
+    rdfs:comment "Bootstrap: carries an initial signed publication (connect now, resolver-independent) AND a grant plus rendezvous locator (refresh forever). This is why an endpoint change never requires a new invitation." .
+
+apar:RendezvousService a owl:Class ;
+    rdfs:subClassOf ap:ServiceAgent ;
+    rdfs:label "Rendezvous Service" ;
+    rdfs:comment "A shared resolution endpoint for an organization. Reveals only that the org operates one — not which agents exist, their names, endpoints, capabilities or partners. Replaceable; cannot forge a target publication; cannot grant action authority." .
+
+apar:permitsDiscoveryOf a owl:ObjectProperty ;
+    rdfs:domain apar:PrivateResolutionGrant ;
+    rdfs:range ap:Agent ;
+    rdfs:label "permits discovery of" ;
+    rdfs:comment "The target agent, signed into the grant so it cannot be retargeted. This is DISCOVERY permission only." .
+
+apar:permitsProjection a owl:DatatypeProperty ;
+    rdfs:domain apar:PrivateResolutionGrant ;
+    rdfs:range xsd:string ;
+    rdfs:label "permits projection" ;
+    rdfs:comment "The named projection profile. A grant NARROWS a projection; it can never widen past the profile's exposure ceiling." .
+
+apar:grantMode a owl:DatatypeProperty ;
+    rdfs:domain apar:PrivateResolutionGrant ;
+    rdfs:range xsd:string ;
+    rdfs:label "grant mode" ;
+    rdfs:comment "subject-bound | pairwise | bearer-bootstrap." .
+
+apar:aliasOfAgent a owl:ObjectProperty ;
+    rdfs:domain apar:PairwiseAgentAlias ;
+    rdfs:range ap:Agent ;
+    rdfs:label "alias of agent" .
+
+apar:carriesGrant a owl:ObjectProperty ;
+    rdfs:domain apar:AgentConnectionInvitation ;
+    rdfs:range apar:PrivateResolutionGrant ;
+    rdfs:label "carries grant" .
+
+apar:carriesInitialPublication a owl:ObjectProperty ;
+    rdfs:domain apar:AgentConnectionInvitation ;
+    rdfs:range apar:AgentServicePublication ;
+    rdfs:label "carries initial publication" .
+
+# ─── Resolution requests, decisions, receipts ─────────────────────────────
+
+apar:ResolutionRequest a owl:Class ;
+    rdfs:subClassOf prov:Activity ;
+    rdfs:label "Resolution Request" ;
+    rdfs:comment "A presented reference plus a challenge response. Distinct from apdisc:CandidateQuery, which searches; this one LOCATES an already-identified agent." .
+
+apar:ResolutionDecision a owl:Class ;
+    rdfs:label "Resolution Decision" ;
+    rdfs:comment "allowed | denied. Every DENIAL is uniform on the wire — distinguishing unknown/expired/unauthorized is a grant-existence oracle." .
+
+apar:AgentResolutionReceipt a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Agent Resolution Receipt" ;
+    rdfs:comment "Privacy-minimized evidence of one resolution: grant-id DIGEST, publication id/digest/sequence, projection profile, disclosed field CLASSES, decision. NEVER the raw grant, a bearer secret, or a private label in global logs — audit metadata about resolution is itself relationship data. Distinct from apres:ResolutionReceipt (intent resolution)." .
+
+apar:usedResolutionGrant a owl:ObjectProperty ;
+    rdfs:domain apar:ResolutionRequest ;
+    rdfs:range apar:PrivateResolutionGrant ;
+    rdfs:label "used resolution grant" .
+
+apar:resolvedBy a owl:ObjectProperty ;
+    rdfs:domain apar:ResolutionRequest ;
+    rdfs:range apar:RendezvousService ;
+    rdfs:label "resolved by" .
+
+apar:hasResolutionDecision a owl:ObjectProperty ;
+    rdfs:domain apar:ResolutionRequest ;
+    rdfs:range apar:ResolutionDecision ;
+    rdfs:label "has resolution decision" .
+
+apar:resolutionAssurance a owl:DatatypeProperty ;
+    rdfs:domain apar:AgentResolutionReceipt ;
+    rdfs:range xsd:string ;
+    rdfs:label "resolution assurance" ;
+    rdfs:comment "unverified | asserted | signed-publication | endpoint-control-verified | peer-authenticated. A consumer states a MINIMUM; a weaker level is never silently accepted (ADR-0013)." .
+
+apar:grantIdDigest a owl:DatatypeProperty ;
+    rdfs:domain apar:AgentResolutionReceipt ;
+    rdfs:range xsd:string ;
+    rdfs:label "grant id digest" ;
+    rdfs:comment "A keyed digest. The raw grant id MUST NOT appear in any receipt, log, URL, trace, or graph projection." .
+
+# ─── Boundary axioms (normative commentary; SHACL enforces) ───────────────
+#
+#  1. Exactly one apar:describesAgent per publication.
+#  2. An active publication has a sequence, an expiry, a digest and a proof.
+#  3. Every grant has a target and an expiry; subject-bound/pairwise grants identify a subject.
+#  4. bearer-bootstrap grants carry a bounded maximum lifetime.
+#  5. A PairwiseAgentAlias MUST NOT have a public projection.
+#  6. A surface with exposure private/service-only MUST NOT appear in a public publication.
+#  7. Every ServiceSurface has a protocol, a version, an exposure and a security requirement.
+#  8. Every TransportKeyBinding has a purpose and a validity interval.
+#  9. publicationSequence is non-negative; a superseding publication references its prior digest
+#     where continuity is required.
+# 10. NEVER project into a public graph (extends apsec: exposure rules + ADR-0040): grant ids,
+#     private labels, partner identities, private endpoints, pairwise relationships, private
+#     capabilities, resolution logs, private transport keys.
+# 11. apar:PrivateResolutionGrant is NEVER an input to an authorization decision. Discovery
+#     permission and action authority are disjoint (ADR-0056).
+
+# ─── Spec 435 §5 — the signed MCP tool manifest: what a server CLAIMS to serve, pinned by digest at attach ─────────
+apar:McpToolManifest a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "McpToolManifest" ;
+  rdfs:comment "The server's name and versions and each tool's name, description and input-schema digest — no secrets, no bodies — signed by the publishing agent. A holder pins its digest; a served manifest that differs is refused, never re-pinned (ADR-0013). Publication still authorizes nothing (ADR-0056)." .
+apar:manifestDigest a owl:DatatypeProperty ; rdfs:domain apar:McpToolManifest ; rdfs:range xsd:string ; rdfs:label "manifestDigest" .
+apar:manifestServerUrl a owl:DatatypeProperty ; rdfs:domain apar:McpToolManifest ; rdfs:range xsd:string ; rdfs:label "manifestServerUrl" .
+apar:McpToolBundle a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "McpToolBundle" ;
+  rdfs:comment "A town-published set of catalog entries a steward attaches to an agent in one act; each attach still writes its own connector record and pin (spec 435 §5)." .

package/tbox/agreement.ttl

@@ -0,0 +1,77 @@
+# T-box — agreement vocabulary (spine Layer 8).
+# Hyperledger Indy commitments + Sidetree anchor pattern; W3C VC envelope.
+# Spec 225 §11.5; ADR-0024 Decision 2 (single-row commitment-only).
+# Owning runtime SHACL: packages/agreements/src/shapes/agreement.shacl.ttl.
+
+@prefix apagr:  <https://agenticprimitives.dev/ns/agreement#> .
+@prefix apvc:   <https://agenticprimitives.dev/ns/verifiable-credential#> .
+@prefix apint:  <https://agenticprimitives.dev/ns/intent#> .
+@prefix ap:     <https://agenticprimitives.dev/ns/core#> .
+@prefix rdfs:   <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:    <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:    <http://www.w3.org/2001/XMLSchema#> .
+@prefix vf:     <https://w3id.org/valueflows#> .
+@prefix prov:   <http://www.w3.org/ns/prov#> .
+
+apagr: a owl:Ontology ;
+    rdfs:label "Agentic Primitives — agreement ontology" ;
+    owl:versionInfo "0.1.0" ;
+    rdfs:comment "Layer 8 of the spine. Commitment-only on chain; body in vaults." .
+
+apagr:AgreementCommitment a owl:Class ;
+    rdfs:subClassOf vf:Commitment ;
+    rdfs:label "AgreementCommitment" ;
+    rdfs:comment "On-chain commitment-only row in AgreementRegistry.sol. Body in vaults; only commitment hash + issuer + schema + status + epoch on chain. AR-12: party SA addresses never in calldata." .
+
+apagr:AgreementCredential a owl:Class ;
+    rdfs:subClassOf apvc:VerifiableCredential ;
+    rdfs:label "AgreementCredential" ;
+    rdfs:comment "DOLCE+DnS Situation — the off-chain VC describing a two-party agreement. Issued by an issuer Agent (e.g. Global Church). Held in each party's PV. Per PD-22 — lives in agreements package." .
+
+apagr:AgreementStatus a owl:Class ;
+    rdfs:label "AgreementStatus" ;
+    rdfs:comment "Status state-machine codelist: ACTIVE | COMPLETED | DISPUTED | REVOKED (per spec 241 §5.4.1)." .
+
+# ─── Properties ───────────────────────────────────────────────────────
+
+apagr:hasIssuer a owl:ObjectProperty ;
+    rdfs:domain apagr:AgreementCommitment ;
+    rdfs:range ap:Agent ;
+    rdfs:label "hasIssuer" ;
+    rdfs:comment "The issuer SA whose EIP-712 attestation backs the commitment." .
+
+apagr:hasParty a owl:ObjectProperty ;
+    rdfs:domain apagr:AgreementCredential ;
+    rdfs:range ap:Agent ;
+    rdfs:label "hasParty" ;
+    rdfs:comment "The two parties to the agreement. Cardinality 2 (enforced by SHACL in agreements package)." .
+
+apagr:agreementCommitmentHash a owl:DatatypeProperty ;
+    rdfs:domain apagr:AgreementCommitment ;
+    rdfs:range xsd:hexBinary ;
+    rdfs:label "agreementCommitmentHash" ;
+    rdfs:comment "The canonical commitment hash (per spec 241 §3 + IA §10)." .
+
+apagr:schemaHash a owl:DatatypeProperty ;
+    rdfs:domain apagr:AgreementCommitment ;
+    rdfs:range xsd:hexBinary ;
+    rdfs:label "schemaHash" ;
+    rdfs:comment "Reference to the on-chain ShapeRegistry SHACL shape (PD-12)." .
+
+apagr:status a owl:DatatypeProperty ;
+    rdfs:domain apagr:AgreementCommitment ;
+    rdfs:range xsd:string ;
+    rdfs:label "status" ;
+    rdfs:comment "ACTIVE | COMPLETED | DISPUTED | REVOKED. Bilateral signing for ACTIVE→COMPLETED/REVOKED; either party for ACTIVE→DISPUTED." .
+
+apagr:createdEpochBucket a owl:DatatypeProperty ;
+    rdfs:domain apagr:AgreementCommitment ;
+    rdfs:range xsd:integer ;
+    rdfs:label "createdEpochBucket" ;
+    rdfs:comment "Creation time in EPOCH_SECONDS buckets. Raw block.timestamp never stored." .
+
+apagr:fromIntentMatch a owl:ObjectProperty ;
+    rdfs:domain apagr:AgreementCommitment ;
+    rdfs:range apint:IntentMatch ;
+    rdfs:label "fromIntentMatch" ;
+    rdfs:comment "Optional reference to the IntentMatch (Layer 7) that produced the Commitment input." .

package/tbox/attestation.ttl

@@ -0,0 +1,156 @@
+# T-box — attestation vocabulary (spine Layers 12–15 credential types).
+# EAS-aligned per ADR-0023. Spec 225 §11.5.
+# Owning runtime SHACL: packages/attestations/src/shapes/credentials.shacl.ttl.
+# All credential types share AttestationRegistry.sol per ADR-0024 Decision 2
+# (architectural inverse of the smart-contract-per-credential anti-pattern).
+
+@prefix apatt:  <https://agenticprimitives.dev/ns/attestation#> .
+@prefix apvc:   <https://agenticprimitives.dev/ns/verifiable-credential#> .
+@prefix apint:  <https://agenticprimitives.dev/ns/intent#> .
+@prefix apagr:  <https://agenticprimitives.dev/ns/agreement#> .
+@prefix apful:  <https://agenticprimitives.dev/ns/fulfillment#> .
+@prefix ap:     <https://agenticprimitives.dev/ns/core#> .
+@prefix rdfs:   <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:    <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:    <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:   <http://www.w3.org/ns/prov#> .
+
+apatt: a owl:Ontology ;
+    rdfs:label "Agentic Primitives — attestation ontology" ;
+    owl:versionInfo "0.2.0" ;
+    rdfs:comment "Credential types for layers 12–15. All share one on-chain AttestationRegistry per ADR-0024 Decision 2." .
+
+# ─── On-chain row type ────────────────────────────────────────────────
+
+# ─── The credential root the spine subclasses (spec 225 §11.5) ────────────────────────────────────
+# `apvc:` IS https://agenticprimitives.dev/ns/verifiable-credential# — the IRI the TS surface (NS.apvc), context.jsonld
+# and the W3C crosswalk have always used. Until 2026-10-15 five T-box files bound the prefix to /ns/credential# (apcr's,
+# the CONTROL credentials of ADR-0011), so the subclass axioms below pointed at a class nobody declared under a namespace
+# that means something else. Declared here, once, under the right IRI; the crosswalk says it is w3cvc:VerifiableCredential.
+apvc:VerifiableCredential a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "VerifiableCredential" ;
+    rdfs:comment "A signed, verifiable claim set in the W3C VC shape (mappings/spine-standards.ttl: owl:equivalentClass w3cvc:VerifiableCredential). The root every spine credential subclasses — attestation credentials, agreements, payment mandates, anonymous credentials. NOT a control credential (apcr:CredentialFacet): nothing here controls an agent." .
+
+apatt:Attestation a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Attestation" ;
+    rdfs:comment "On-chain row in AttestationRegistry.sol. EAS-aligned: deterministic UID + refUID + EIP-712 + ERC-1271. Per-credential-class discrimination via credentialType. ADR-0023." .
+
+# ─── Credential types (Layer 12: Evidence) ────────────────────────────
+
+apatt:EvidenceCredential a owl:Class ;
+    rdfs:subClassOf apvc:VerifiableCredential ;
+    rdfs:label "EvidenceCredential" ;
+    rdfs:comment "Holder-asserted evidence credential bound to an Artifact. Holder-only on-chain revoke (D-18 + AR-10). Layer 12." .
+
+# ─── Credential types (Layer 13: Outcome) ─────────────────────────────
+
+apatt:OutcomeCredential a owl:Class ;
+    rdfs:subClassOf apvc:VerifiableCredential ;
+    rdfs:label "OutcomeCredential" ;
+    rdfs:comment "Outcome credential bound to an Intent. FLF-OUT-1: MUST cite at least one EvidenceCredential UID. Holder-only revoke. Layer 13." .
+
+# ─── Credential types (Layer 14: Validation) ──────────────────────────
+
+apatt:ValidationCredential a owl:Class ;
+    rdfs:subClassOf apvc:VerifiableCredential ;
+    rdfs:label "ValidationCredential" ;
+    rdfs:comment "Validator's attestation of an Outcome. Validator-type discriminated (human | agent | oracle | TEE | zkML | re-execution per ERC-8004). Validator-only revoke. Layer 14." .
+
+apatt:Validator a owl:Class ;
+    rdfs:subClassOf ap:ServiceAgent ;
+    rdfs:label "Validator" ;
+    rdfs:comment "A service Agent that produces ValidationCredentials — a KIND OF SERVICE (⊑ ap:ServiceAgent). Independence requirement: validator SA ≠ executor SA." .
+
+apatt:ValidatorKind a owl:Class ;
+    rdfs:label "ValidatorKind" ;
+    rdfs:comment "Discriminator: human | agent | oracle | TEE | zkML | re-execution." .
+
+# ─── Credential types (Layer 15: TrustUpdate) ─────────────────────────
+
+apatt:TrustUpdate a owl:Class ;
+    rdfs:subClassOf apvc:VerifiableCredential ;
+    rdfs:label "TrustUpdate" ;
+    rdfs:comment "Reputation mutation. D-40 hard substrate invariant: MUST cite at least one ValidationCredential UID. Sybil resistance via credential-cost, never KYC. Validator-only revoke. Layer 15." .
+
+apatt:AssociationCredential a owl:Class ;
+    rdfs:subClassOf apvc:VerifiableCredential ;
+    rdfs:label "AssociationCredential" ;
+    rdfs:comment "Holder asserts membership/association with an issuer. Holder-only revoke. Substrate-generic; vertical instances (JpAssociationCredential, etc.) compose on top." .
+
+# ─── Properties ───────────────────────────────────────────────────────
+
+apatt:uid a owl:DatatypeProperty ;
+    rdfs:domain apatt:Attestation ;
+    rdfs:range xsd:hexBinary ;
+    rdfs:label "uid" ;
+    rdfs:comment "Deterministic UID per EAS pattern." .
+
+apatt:credentialType a owl:DatatypeProperty ;
+    rdfs:domain apatt:Attestation ;
+    rdfs:range xsd:hexBinary ;
+    rdfs:label "credentialType" ;
+    rdfs:comment "keccak256 hash discriminator (AssociationCredential / EvidenceCredential / OutcomeCredential / ValidationCredential / TrustUpdate / PaymentReceipt)." .
+
+apatt:credentialHash a owl:DatatypeProperty ;
+    rdfs:domain apatt:Attestation ;
+    rdfs:range xsd:hexBinary ;
+    rdfs:label "credentialHash" ;
+    rdfs:comment "RFC 8785 JCS canonical hash of off-chain VC body." .
+
+apatt:refUID a owl:DatatypeProperty ;
+    rdfs:domain apatt:Attestation ;
+    rdfs:range xsd:hexBinary ;
+    rdfs:label "refUID" ;
+    rdfs:comment "EAS-style single back-pointer. Used by JointAgreement to reference AgreementCommitment." .
+
+apatt:bilateralConsentRef a owl:DatatypeProperty ;
+    rdfs:domain apatt:Attestation ;
+    rdfs:range xsd:hexBinary ;
+    rdfs:label "bilateralConsentRef" ;
+    rdfs:comment "References signatures-bundle hash OR pinned-delegation hash for joint attestations. 0 for unilateral." .
+
+apatt:basedOnIntent a owl:ObjectProperty ;
+    rdfs:domain apatt:OutcomeCredential ;
+    rdfs:range apint:Intent ;
+    rdfs:label "basedOnIntent" .
+
+apatt:basedOnArtifact a owl:ObjectProperty ;
+    rdfs:domain apatt:EvidenceCredential ;
+    rdfs:range apful:Artifact ;
+    rdfs:label "basedOnArtifact" .
+
+apatt:citesEvidence a owl:ObjectProperty ;
+    rdfs:domain apatt:OutcomeCredential ;
+    rdfs:range apatt:EvidenceCredential ;
+    rdfs:label "citesEvidence" ;
+    rdfs:comment "FLF-OUT-1: MANDATORY. At least one EvidenceCredential UID citation required." .
+
+apatt:citesValidation a owl:ObjectProperty ;
+    rdfs:domain apatt:TrustUpdate ;
+    rdfs:range apatt:ValidationCredential ;
+    rdfs:label "citesValidation" ;
+    rdfs:comment "D-40: MANDATORY. TrustUpdate cannot precede ValidationCredential." .
+
+apatt:validatorKind a owl:DatatypeProperty ;
+    rdfs:domain apatt:ValidationCredential ;
+    rdfs:range xsd:string ;
+    rdfs:label "validatorKind" .
+
+apatt:offchainCredentialStatusList a owl:DatatypeProperty ;
+    rdfs:domain apatt:Attestation ;
+    rdfs:range xsd:anyURI ;
+    rdfs:label "offchainCredentialStatusList" ;
+    rdfs:comment "W3C VC StatusList2021 pointer. Holder revocation on-chain ≠ issuer revocation off-chain — independently meaningful." .
+
+# ─── Spec 435 §3 — TownStanding: the one opt-in way a steward becomes public (ADR-0025 amended, not broken) ────────
+apatt:TownStanding a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "TownStanding" ;
+  rdfs:comment "A JOINT attestation on the AttestationRegistry signed by the agent (under its custody) and by its steward, scoped to a town and an estate, expiring, revocable by either party. Evidence that someone answers for this agent; NO GATE READS IT — standing is still derived from the private credential and the wire." .
+apatt:standingTown a owl:DatatypeProperty ; rdfs:domain apatt:TownStanding ; rdfs:range xsd:string ; rdfs:label "standingTown" .
+apatt:standingEstate a owl:DatatypeProperty ; rdfs:domain apatt:TownStanding ; rdfs:range xsd:string ; rdfs:label "standingEstate" .
+apatt:standingSteward a owl:DatatypeProperty ; rdfs:domain apatt:TownStanding ; rdfs:range xsd:string ; rdfs:label "standingSteward" ;
+  rdfs:comment "The steward who countersigned — named by consent, revocable, expiring." .
+apatt:standingValidUntil a owl:DatatypeProperty ; rdfs:domain apatt:TownStanding ; rdfs:range xsd:dateTime ; rdfs:label "standingValidUntil" .