@agenticprimitives/ontology 1.0.0-alpha.4 → 1.0.0-alpha.40

package/tbox/execution.ttl

@@ -0,0 +1,720 @@
+# T-box — the EXECUTION plane: what actually happened (spec 330 §8, W0 remainder;
+# capability-architecture.md §5). PROV-O-grounded throughout.
+#
+# ── Why this file exists now, and why it is SMALL ───────────────────────────────────────────────
+# `cbox/capability-catalog-shapes.shacl.ttl` has shipped two realization contracts since spec 331,
+# and both of them target classes that were declared NOWHERE:
+# `apexec:MemberConsultationActivity`, `apexec:ConsultationSynthesisActivity`, `apexec:AgentRuntime`,
+# `apexec:completionState`, `apexec:usedPlanContentHash`, `aprole:ConsultResponder`,
+# `aprole:ConsultRouter`. Spec 330's checklist records the gap in as many words — "referenced by IRI
+# in the contracts but not yet declared". A contract whose `sh:targetClass` names a class no module
+# declares does not validate anything: it has an empty target set, and it passes by vacuity. That is
+# precisely the "unenforceable contract" the catalog's own governing rule forbids.
+#
+# So this module declares EXACTLY the terms the shipped contracts reference, plus the one new term
+# the parameterised advisory contract needs — and NOT the rest of spec 330 §8. The other twelve
+# `apexec:` classes and the six environment specializations stay parked with W1, because nothing
+# references them yet and a vocabulary minted ahead of a reader is the other half of the same
+# mistake. When W1 lands its emission records, it extends this file; it does not rewrite it.
+#
+# ── The doctrine that governs everything below (architecture §2 axioms 5–6, §6) ─────────────────
+# Provenance is EVIDENCE, never an authorization input. No gate may branch on an `apexec:` record.
+# A role (`prov:hadRole`) is a CAPACITY, not a permission: `aprole:ConsultResponder` says what the
+# runtime was doing, never that it was allowed to. Authority is delegation ∩ entitlement ∩ policy,
+# evaluated at the gate at the moment of use, and it reads none of these terms.
+
+@prefix apexec:  <https://agenticprimitives.dev/ns/execution#> .
+@prefix aprole:  <https://agenticprimitives.dev/ns/role#> .
+@prefix apcoord: <https://agenticprimitives.dev/ns/coordination#> .
+@prefix ap:      <https://agenticprimitives.dev/ns/core#> .
+@prefix apactor: <https://agenticprimitives.dev/ns/actor#> .
+@prefix aps:     <https://agenticprimitives.dev/ns/skill#> .
+@prefix apguide: <https://agenticprimitives.dev/ns/guidance#> .
+@prefix rdfs:    <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:     <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:     <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:    <http://www.w3.org/ns/prov#> .
+@prefix dul:     <http://www.ontologydesignpatterns.org/ont/dul/DUL.owl#> .
+@prefix skos:    <http://www.w3.org/2004/02/skos/core#> .
+@prefix dcterms: <http://purl.org/dc/terms/> .
+
+apexec: a owl:Ontology ;
+  rdfs:label "Agentic Primitives — execution ontology (W0 subset)" ;
+  owl:versionInfo "0.3.1" ;
+  rdfs:comment "The execution plane: activities that realize capabilities, the runtimes that bore responsibility, and the completion conditions that separate a realization from an attempt. W0 SUBSET — only the terms the shipped realization contracts reference. Spec 330 W1 extends it." ;
+  skos:scopeNote "WITHIN-AGENT plane (coordination-vs-orchestration.md). Orchestration sequences one agent's run: the executor's knowledge is local — harness-activated Agent Skill packages (apguide:AgentSkillPackage / SKILL.md, pinned by apexec:usedPlanContentHash) and injected tools — and the loop never queries naming/registry/apdisc: discovery. Distinct from apcoord: (the BETWEEN-AGENTS coordination plane); an apexec:ExecutionPlan compiles FROM an apcoord:PlanStep (plan.ttl), it never is one." .
+
+aprole: a owl:Ontology ;
+  rdfs:label "Agentic Primitives — execution roles" ;
+  owl:versionInfo "0.1.0" ;
+  rdfs:comment "prov:Role individuals naming the CAPACITY an agent functioned in during an activity. A role is never an authorization (architecture §6): it answers 'what was it doing', not 'what was it allowed to do'." .
+
+# ═══ Runtimes ═══════════════════════════════════════════════════════════════
+
+apexec:AgentRuntime a owl:Class ;
+  rdfs:subClassOf prov:SoftwareAgent ;
+  rdfs:label "AgentRuntime" ;
+  rdfs:comment "The durable, IDENTIFIED runtime that bore responsibility for an activity — in this substrate, one Smart Agent's A2aTaskDO + InteractionsDO pair. NOT the environment it runs in, and NOT the model it called: a model is swapped without changing who is answerable. It `prov:actedOnBehalfOf` the ap:Agent whose authority it acted under, and that edge is what lets a realization be attributed to a party rather than to a process." .
+
+# ═══ Activities ═════════════════════════════════════════════════════════════
+
+apexec:ServiceExecution a owl:Class ;
+  rdfs:subClassOf prov:Activity , dul:Action ;
+  rdfs:label "ServiceExecution" ;
+  rdfs:comment "The externally meaningful activity that REALIZES a capability: an A2A task fulfillment, an assistant turn, an automation run. Distinct from the apful:Task that TRACKS it (architecture §2 axiom 3) and from the SkillExecutions it contains." .
+
+apexec:SkillExecution a owl:Class ;
+  rdfs:subClassOf prov:Activity , dul:Action ;
+  rdfs:label "SkillExecution" ;
+  rdfs:comment "Work performed under ONE activated playbook, with a prov:qualifiedAssociation whose prov:hadPlan is that playbook. A sub-activity of a ServiceExecution, and never evidence of authority — activating a plan grants nothing (ADR-0050)." .
+
+apexec:MemberConsultationActivity a owl:Class ;
+  rdfs:subClassOf apexec:SkillExecution ;
+  rdfs:label "MemberConsultationActivity" ;
+  rdfs:comment "ONE member agent's turn answering ONE routed consultation (spec 329 §3.2): it prov:used the ConsultRequestV1 and the member's own vault playbook, and prov:generated the answered-XOR-declined ConsultAnswerV1 with the actor pinned to the member. Depth-1 by construction — a member never re-routes. This is the target class of aps:MemberConsultationRealizationContract, and — when the turn carries apexec:routedOnCapability — also of the parameterised advisory contract: ONE activity, TWO realizations, which is the whole point of separating capability identity from activity type." .
+
+apexec:ConsultationSynthesisActivity a owl:Class ;
+  rdfs:subClassOf apexec:ServiceExecution ;
+  rdfs:label "ConsultationSynthesisActivity" ;
+  rdfs:comment "The ORG side of a routed consultation (spec 329 §4/§6): structural eligibility, spec-281 ranking, fan-out, and the synthesis post whose attribution names each contributing member. A ServiceExecution rather than a SkillExecution because it composes several member turns plus its own playbook-guided synthesis." .
+
+# ═══ Completion — the part that makes a contract about REALIZATION ══════════
+# A capability is not a prov:Activity: the capability is what COULD be achieved, an activity is an
+# occurrence that attempted it. Without a terminal state and an end time, a contract validates
+# attempts and calls them realizations.
+
+apexec:CompletionState a owl:Class ;
+  rdfs:subClassOf skos:Concept ;
+  rdfs:label "CompletionState" ;
+  rdfs:comment "The TERMINAL state of an activity. A closed codelist per contract (the contract pins which members it accepts with sh:in) — never an open string, because an unrecognised terminal state would read as 'not completed' in some consumers and 'completed' in others." .
+
+apexec:Answered a apexec:CompletionState ;
+  rdfs:label "Answered" ;
+  rdfs:comment "The consulted member produced answer text attributed to itself." .
+
+apexec:Declined a apexec:CompletionState ;
+  rdfs:label "Declined" ;
+  rdfs:comment "The consulted member explicitly declined. A CONFORMING REALIZATION, not a failure: the contract governs shape, not outcome, and treating a decline as non-realization would create an incentive to answer outside one's documented positions — the opposite of what the consult path exists for. `buildConsultAnswer` already makes answered-xor-declined structural." .
+
+apexec:NoEligibleMember a apexec:CompletionState ;
+  rdfs:label "NoEligibleMember" ;
+  rdfs:comment "The ORG side terminated with an empty eligible set — nobody held both the consultability hint and the grant. A conforming realization of routing: correctly finding nobody is a result, and a router that hid it would be a router that guessed." .
+
+apexec:completionState a owl:ObjectProperty ;
+  rdfs:domain prov:Activity ; rdfs:range apexec:CompletionState ;
+  rdfs:label "completionState" ;
+  rdfs:comment "The activity's terminal state. Required by every realization contract, together with prov:endedAtTime: an activity with neither is an attempt in progress, and crediting it as a realization is how a demonstrated-capability signal starts counting abandonments." .
+
+# ═══ Run provenance (spec 381) — what a run's record keeps in the acting agent's vault ═══
+# The durable half of a harness run: one activity per step, what it ran under, what it left. Read by
+# people and auditors after the fact; consulted by no verifier (a recorded allow grants nothing).
+
+apexec:endedAt a owl:DatatypeProperty ;
+  rdfs:subPropertyOf prov:endedAtTime ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:dateTime ;
+  rdfs:label "endedAt" ;
+  rdfs:comment "When the run (or a step of it) ended — PROV's endedAtTime, named as the record field that carries it (spec 381). NOT when the record was written or exported." .
+
+apexec:receiptDigest a owl:DatatypeProperty ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:string ;
+  rdfs:label "receiptDigest" ;
+  rdfs:comment "SHA-256 over the canonical step receipt the activity left (spec 381): a commitment to what was done — capability, authority reference, verdict, timings — that an export may carry in place of the receipt itself. NOT the receipt, NOT evidence a verifier reads, and never a digest of the arguments alone." .
+
+apexec:usedPlanContentHash a owl:DatatypeProperty ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:string ;
+  rdfs:label "usedPlanContentHash" ;
+  rdfs:comment "The content hash of the playbook AS PINNED AT ACTIVATION — not as it reads now. LOAD-BEARING, NOT BOOKKEEPING: without it, 'which realizations must be re-examined now this playbook changed?' is unanswerable, and any demonstrated-capability signal computed over unpinned plans is unfalsifiable. Same role apdisc:cardDigest plays for a crawled advertisement." .
+
+# ═══ The routing parameter — what an advisory realization is a realization OF ═══
+#
+# READ THIS BEFORE USING IT. This term is DECLARED, and is NOT EMITTED by anything today. It is the
+# single datum that stands between the parameterised advisory realization contract and
+# enforceability, and it is declared here so that the gap is a named, testable, one-field gap
+# rather than a paragraph of prose. See cbox/capability-catalog-shapes.shacl.ttl §4.
+
+apexec:routedOnCapability a owl:ObjectProperty ;
+  rdfs:subPropertyOf apexec:realizesCapability ;
+  rdfs:domain prov:Activity ; rdfs:range aps:Capability ;
+  rdfs:label "routedOnCapability" ;
+  rdfs:comment "The capability the ORG's routing selected this responder ON — the intersection of the question's resolved need and the responder's declared ids, which `rankConsultCandidates` already computes and then discards into a free-text evidence line. WHY IT MUST BE THE ROUTED-ON ID AND NOT MERELY A DECLARED ONE: an agent may declare up to twelve capabilities, so crediting a realization to every id it happens to declare would let one answered question realize twelve capabilities at once — turning the only assertion strength that cannot be faked by writing a string into one that can. A subproperty of apexec:realizesCapability because it is a realization claim with a stated basis, not a second kind of claim." .
+
+# ═══ Roles — capacity, never permission ═════════════════════════════════════
+
+aprole:ConsultResponder a prov:Role ;
+  rdfs:label "ConsultResponder" ;
+  rdfs:comment "The capacity a member's runtime functioned in while answering a routed consultation. The AUTHORITY for that turn is the consultability delegation checked at the member's gate; this term records what was done, and no gate reads it." .
+
+aprole:ConsultRouter a prov:Role ;
+  rdfs:label "ConsultRouter" ;
+  rdfs:comment "The capacity an org's runtime functioned in while selecting members and synthesizing their attributed answers." .
+
+# ═══ The run as a PROV graph — spec 389 ══════════════════════════════════════
+#
+# What a harness run's provenance record (`run.provenance:<runRef>`, the acting agent's vault) says in
+# T-box terms, so that a stock PROV tool loads it and a SHACL shape can refuse a forged one. Every term
+# here is EVIDENCE — read by people, auditors and the Home after the fact — and is consulted by no
+# verifier: recording that a step was allowed grants nothing (spec 354 §1 / ADR-0041). Reused rather than
+# re-declared: prov:*, p-plan:*, ep-plan:* (plan.ttl), apvr:usedDelegation (verification-receipt.ttl),
+# apactor:ActorContext + its role properties (actor-context.ttl), apguide:AgentSkillPackage, apdel:Delegation.
+
+apexec:hasStep a owl:ObjectProperty ;
+  rdfs:domain apexec:ServiceExecution ; rdfs:range prov:Activity ;
+  rdfs:label "hasStep" ;
+  rdfs:comment "The run CONTAINS this step activity. PROV has no containment relation between activities (wasInformedBy is communication, not nesting), and reading step order off wasInformedBy would make a fan-out look sequential. Order lives on the plan (p-plan:isPrecededBy between the p-plan:Steps each activity correspondsToStep); this says only which run a step belongs to." .
+
+apexec:actorContext a owl:ObjectProperty ;
+  rdfs:domain prov:Activity ; rdfs:range apactor:ActorContext ;
+  rdfs:label "actorContext" ;
+  rdfs:comment "Who acted, for whom, and who started it, on THIS hop (spec 383): the apactor:ActorContext entity carrying actingAgent / originatingAgent / rootPrincipal. Context, never authority — the accountability root is the verified chain's root delegator (apexec:accountabilityRoot), not restated here." .
+
+apexec:delegatedToAgent a owl:ObjectProperty ;
+  rdfs:domain prov:Activity ; rdfs:range ap:Agent ;
+  rdfs:label "delegatedToAgent" ;
+  rdfs:comment "The agent a step was HANDED TO (spec 376): its run is a child of this one under a child mandate cut from the parent's. Distinct from apactor:delegatedTo, which relates two SubjectRefs inside an actor context; this relates an activity to the agent whose bundle it prov:wasInformedBy." .
+
+apexec:runRef a owl:DatatypeProperty ;
+  rdfs:domain apexec:ServiceExecution ; rdfs:range xsd:string ;
+  rdfs:label "runRef" ;
+  rdfs:comment "The run's reference — the key its record, its progress lines and its spans are kept under, and the string a done reply and a task artifact cite (hasProvenance). An identifier, never a digest of anything." .
+
+apexec:intentDigest a owl:DatatypeProperty ;
+  rdfs:domain apexec:ServiceExecution ; rdfs:range xsd:string ;
+  rdfs:label "intentDigest" ;
+  rdfs:comment "keccak256 of the ExecutionIntent (goal + context) the run served — the same digest the mandate's caveat binds (spec 336 §8.3). The record carries the digest so a reader can match a mandate to a run; it never carries the goal's words (spec 381 §1)." .
+
+apexec:authorityDecision a owl:DatatypeProperty ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:string ;
+  rdfs:label "authorityDecision" ;
+  rdfs:comment "What the verifier decided for this step — `allow` or `deny` — AS RECORDED. A recorded allow is history, not permission: a replay re-derives the verdict against the chain as it is now (spec 370 P6), and no gate reads this field." .
+
+apexec:afterApproval a owl:DatatypeProperty ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:boolean ;
+  rdfs:label "afterApproval" ;
+  rdfs:comment "True when the verdict was taken AFTER a human approval (a suspended step resumed with the person's signature) — the second verification spec 350 requires, so an approval is never mistaken for the verdict itself." .
+
+apexec:chainDigest a owl:DatatypeProperty ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:string ;
+  rdfs:label "chainDigest" ;
+  rdfs:comment "The digest of the VERIFIED delegation chain the step ran under (spec 383): every grant by reference from the accountability root to the acting agent. The links themselves are prov:used entities; the digest is the one value that names the whole chain." .
+
+apexec:accountabilityRoot a owl:ObjectProperty ;
+  rdfs:domain prov:Activity ; rdfs:range ap:Agent ;
+  rdfs:label "accountabilityRoot" ;
+  rdfs:comment "WHOSE AUTHORITY WAS SPENT: the root delegator of the verified chain (spec 383). Read off the verifier's evidence, never off the actor context — an actor context says who is acting, this says who answers for it." .
+
+apexec:errorClass a owl:DatatypeProperty ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:string ;
+  rdfs:label "errorClass" ;
+  rdfs:comment "The CLASS of a step's failure (`authority_denied`, `tool_error`, `input_required` …), never its message: a message can carry a counterparty's name or an argument, a class cannot." .
+
+# ─── Spec 410 §2 — the adapter's observation ──────────────────────────
+# A resolved value is not "done". For an externally ordered effect the harness records WHAT THE ADAPTER SAW, in
+# four words, and which one the receipt attests. "Verified at commit" may be said of `confirmed` only.
+
+apexec:ObservedOutcome a owl:Class ;
+  rdfs:subClassOf skos:Concept ;
+  rdfs:label "ObservedOutcome" ;
+  rdfs:comment "What an adapter observed of the effect it made (spec 410 §2): attempted (the call left; nothing came back the adapter can vouch for), accepted (the provider acknowledged and has not committed), committed (the provider says it is done), confirmed (the harness read the effect back independently of the call that made it). What it is NOT: an authorization input, or a claim about the outcome class the tool establishes (apexec:OutcomeClass says what a success MEANS; this says what was SEEN)." .
+apexec:attempted a apexec:ObservedOutcome ; rdfs:label "attempted" .
+apexec:accepted a apexec:ObservedOutcome ; rdfs:label "accepted" .
+apexec:committed a apexec:ObservedOutcome ; rdfs:label "committed" .
+apexec:confirmed a apexec:ObservedOutcome ; rdfs:label "confirmed" .
+
+apexec:observedOutcome a owl:ObjectProperty ;
+  rdfs:domain prov:Activity ; rdfs:range apexec:ObservedOutcome ;
+  rdfs:label "observedOutcome" ;
+  rdfs:comment "The ObservedOutcome this step's adapter reported, bounded by what its tool establishes — a submission never records more than accepted from the call alone." .
+apexec:providerRef a owl:DatatypeProperty ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:string ;
+  rdfs:label "providerRef" ;
+  rdfs:comment "The provider's own identifier for the effect (a message id, a task id, a record version, a transaction hash) — what a stranger would quote to the provider. Never a secret." .
+apexec:observedAt a owl:DatatypeProperty ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:dateTime ;
+  rdfs:label "observedAt" ;
+  rdfs:comment "The harness clock when the adapter returned what it saw." .
+
+# ─── Spec 410 §4.4 — the estate an act was performed in ──────────────
+# A person's Home lives in ONE estate; she participates in any estate that admits her (the thesis's design
+# commitment, THESIS-9). An act she performs in estate B is redeemed under a B-chain mandate and anchored in B's
+# receipt registry, and its record lands in HER vault, held in estate A. The record must therefore say where the
+# act happened, because the vault it lives in no longer implies it.
+
+apexec:estate a owl:DatatypeProperty ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:string ;
+  rdfs:label "estate" ;
+  rdfs:comment "THE ESTATE THIS RUN WAS PERFORMED IN (spec 410 §4.4): the estate id — keccak256(\"eip155:<chainId>:<governance>\"), the same derivation EstateProjectionRegistry.estateIdOf and the estate-projection package use — of the chain whose mandate was redeemed and whose registry anchored the receipt. Stamped by the RUNTIME that ran the act, from its own deployment, on the HarnessRun activity; a step inherits its run's. Absent on a record older than this term, and on a runtime that has not declared its governance. What it is NOT: authority (a verifier reads the mandate's chain from the mandate's own domain, never from this), and NOT the chain the acting agent's address is named under (the agent IRIs carry that; an agent has the same address in every estate by construction, ADR-0010 + CREATE2)." .
+
+apexec:ReceiptAnchor a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "ReceiptAnchor" ;
+  rdfs:comment "WHERE A RUN'S BUNDLE IS ANCHORED, as a record beside the bundle (the `run.anchor:<runRef>` vault record): the bundle's digest, the ReceiptAnchorRegistry it was written in (`eip155:<chainId>:<registry>`), the agent that anchored it, the transaction, and the estate (apexec:estate). A bundle cannot carry its own digest's anchor, so the citation is a second record — and it is the record a Home in another estate reads to know WHICH chain to ask. A holder verifies by recomputing the digest and reading the registry; the citation is a claim about where to look, never proof by itself." .
+
+apexec:anchorDigest a owl:DatatypeProperty ;
+  rdfs:domain apexec:ReceiptAnchor ; rdfs:range xsd:string ;
+  rdfs:label "anchorDigest" ;
+  rdfs:comment "The bundle digest as anchored (bytes32 hex) — recomputed by any holder of the bundle over its canonical bytes." .
+
+apexec:anchorRegistry a owl:DatatypeProperty ;
+  rdfs:domain apexec:ReceiptAnchor ; rdfs:range xsd:string ;
+  rdfs:label "anchorRegistry" ;
+  rdfs:comment "The ReceiptAnchorRegistry the digest is written in, chain-qualified: `eip155:<chainId>:<registry address>`. The chain named here is the ESTATE's chain (spec 410 §4.4), which may differ from the chain the vault's Home runs on." .
+
+apexec:anchoredByAgent a owl:ObjectProperty ;
+  rdfs:domain apexec:ReceiptAnchor ; rdfs:range ap:Agent ;
+  rdfs:label "anchoredByAgent" ;
+  rdfs:comment "The runtime's harness agent that anchored the digest — the row's key on a generation-2+ registry (spec 408 §1.5). Distinct from apvr:anchoredBy, which names an attestation UID on a public KB row." .
+
+apexec:anchorTransaction a owl:DatatypeProperty ;
+  rdfs:domain apexec:ReceiptAnchor ; rdfs:range xsd:string ;
+  rdfs:label "anchorTransaction" ;
+  rdfs:comment "The transaction that wrote the anchor, by hash, on the estate's chain." .
+
+apexec:disputedBy a owl:ObjectProperty ;
+  rdfs:domain prov:Activity ; rdfs:range prov:Entity ;
+  rdfs:label "disputedBy" ;
+  rdfs:comment "Spec 410 §10 — the dispute interaction (profile dispute/1.0.0) opened over this run's receipt, and the determination a named steward recorded in it. Linked evidence; a determination reverses nothing — a reversal is a new act under a new mandate." .
+
+apexec:StepReceipt a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "StepReceipt" ;
+  rdfs:comment "The receipt a step left, AS AN ENTITY named by its digest (apexec:receiptDigest carries the same digest on the activity). The receipt itself — capability, authority reference, verdict, timings, bindings — stays on the run record; the graph holds the commitment. Distinct from apvr:VerificationReceipt (spec 303, a verifier's receipt about a chain check)." .
+
+apexec:ChainTransaction a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "ChainTransaction" ;
+  rdfs:comment "A transaction a step left on the chain, named by its hash — the ONE public fact a private run may cite, because anyone can look it up. The graph does not repeat what the transaction did; the chain says that." .
+
+apexec:Effect a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "Effect" ;
+  rdfs:comment "What FOLLOWED an act, per declared effect (spec 360): the record a disclosure wrote, the notice it sent. An effect that failed while the act stood is recorded with effectSucceeded false — visible evidence, never a reason the step is unwound." .
+
+apexec:effectProduces a owl:DatatypeProperty ;
+  rdfs:domain apexec:Effect ; rdfs:range xsd:string ;
+  rdfs:label "effectProduces" ;
+  rdfs:comment "The record type the effect writes (`payment.receipt`, `payment.notice`) — a name, never the record." .
+
+apexec:effectSucceeded a owl:DatatypeProperty ;
+  rdfs:domain apexec:Effect ; rdfs:range xsd:boolean ;
+  rdfs:label "effectSucceeded" .
+
+apexec:DecisionRecord a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "DecisionRecord" ;
+  rdfs:comment "What a step DECIDED for the person on the way to the act, and by which rule (spec 363 W6): which account paid, which Sarah was meant. The point and the rule id are recorded; what was chosen is not (it can be a name). Display and audit only; no verifier reads it." .
+
+apexec:decisionPoint a owl:DatatypeProperty ;
+  rdfs:domain apexec:DecisionRecord ; rdfs:range xsd:string ;
+  rdfs:label "decisionPoint" .
+
+apexec:decisionRule a owl:DatatypeProperty ;
+  rdfs:domain apexec:DecisionRecord ; rdfs:range xsd:string ;
+  rdfs:label "decisionRule" .
+
+# Completion states of a harness step (apexec:completionState, declared above). A closed list: a
+# reader that meets a state outside it is reading a record this vocabulary does not describe.
+
+apexec:Completed a apexec:CompletionState ;
+  rdfs:label "Completed" ;
+  rdfs:comment "The step ran and its tool returned." .
+
+apexec:Failed a apexec:CompletionState ;
+  rdfs:label "Failed" ;
+  rdfs:comment "The step ran and its tool failed (apexec:errorClass says how). Also an ep-plan:FailedActivity." .
+
+apexec:Refused a apexec:CompletionState ;
+  rdfs:label "Refused" ;
+  rdfs:comment "The verifier denied the step before its tool ran. A CONFORMING record — refusing to record a refusal would delete the evidence an audit most needs. Also an ep-plan:FailedActivity." .
+
+apexec:Skipped a apexec:CompletionState ;
+  rdfs:label "Skipped" ;
+  rdfs:comment "The step was not attempted (an earlier step's outcome made it moot, or a replay answered it from the record)." .
+
+apexec:Suspended a apexec:CompletionState ;
+  rdfs:label "Suspended" ;
+  rdfs:comment "The step is waiting on the person (a signature, an answer, a confirmation). Not terminal: the record of a suspended run is a checkpoint, and the run resumes under a fresh verification (spec 370 P1)." .
+
+# ═══ The span ↔ activity bridge — spec 390 W1 ═══
+# Every PROV activity names the OpenTelemetry span it IS, and every span names the activity (ap.prov.*
+# attributes). Both are derived from the same run and step references. CORRELATION, NEVER TRUST: a trace
+# id joins hops into one causal operation; nothing reads it for a verdict, and a forged one can at most
+# mis-file a trace.
+
+apexec:traceId a owl:DatatypeProperty ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:string ;
+  rdfs:label "traceId" ;
+  rdfs:comment "The W3C Trace Context trace id (16 bytes, lowercase hex) of the trace this activity's span belongs to — the sender's when this run answered another (spec 381 W2), the caller's when a traceparent arrived (spec 390 W2). An identifier for a collector, never an input to admission or authority." .
+
+apexec:spanId a owl:DatatypeProperty ;
+  rdfs:domain prov:Activity ; rdfs:range xsd:string ;
+  rdfs:label "spanId" ;
+  rdfs:comment "The W3C Trace Context span id (8 bytes, lowercase hex) of the span this activity is. Derived from the run and step references, so the same record always names the same span." .
+
+# ═══ Offloaded artifacts — spec 391 ═══
+
+apexec:RunArtifact a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "RunArtifact" ;
+  rdfs:comment "A step's RAW RESULT, kept as its own record in the acting agent's vault (`run.artifact:<runRef>:<stepRef>`) because it was too large to ride in the run's record and checkpoint (spec 391). The step prov:generated it; the receipt's outputDigest commits to the same bytes. NOT an apful:Artifact (a deliverable a fulfillment promised) and not evidence a verifier reads — a body a person or a resume fetches under the agent's grant." .
+
+apexec:artifactBytes a owl:DatatypeProperty ;
+  rdfs:domain apexec:RunArtifact ; rdfs:range xsd:integer ;
+  rdfs:label "artifactBytes" ;
+  rdfs:comment "The canonical JSON length of the body — so a reader knows what fetching it costs." .
+
+apexec:artifactDigest a owl:DatatypeProperty ;
+  rdfs:domain apexec:RunArtifact ; rdfs:range xsd:string ;
+  rdfs:label "artifactDigest" ;
+  rdfs:comment "sha256 of the canonical JSON of the body. The same bytes the step receipt's outputDigest commits to, so the graph, the receipt and the vault record agree on what was produced." .
+
+# ═══ Build artifacts — spec 398 §9 (ap-build B3) ═══
+
+apexec:BuildArtifact a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "BuildArtifact" ;
+  rdfs:comment "What ONE build run left, kept as its own record in the WORKSPACE's vault (`build.run:<runId>`; spec 398 §9.2 / §7.2): the repository and base it was built from, the task in the asker's words, the files the model wrote (whole content), and the test evidence AS RECORDED — the command, its exit code and the tail of its output (T28: never an assertion that tests passed). The build service produced it in a sandbox and returned it; the runtime's step prov:generated the record under the workspace's mandate. NOT a deployment (T29 — promotion is its own act) and NOT a pull request: a branch pushed from it is a submission (spec 367 §6) made by `github.pr.open`, whose receipt names this record. Distinct from apexec:RunArtifact (a step's raw body offloaded for size) and from apful:Artifact (a deliverable a fulfillment promised)." .
+
+apexec:buildRepository a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "buildRepository" ;
+  rdfs:comment "The repository the run built in, `owner/name`, with `buildBase` the branch it started from." .
+
+apexec:buildBase a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "buildBase" .
+
+apexec:buildTask a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "buildTask" ;
+  rdfs:comment "The task as the asker said it — what the model was given, never what it claims to have done (that is `buildSummary`, the model's own sentence, rendered as the model's)." .
+
+apexec:buildSummary a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "buildSummary" .
+
+apexec:testCommand a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "testCommand" ;
+  rdfs:comment "What was RUN in the sandbox after the files were written — the repository's own test script when it has one, else a syntax check of what changed. With `testExitCode` and `testOutputTail`, the recorded evidence." .
+
+apexec:testExitCode a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:integer ;
+  rdfs:label "testExitCode" .
+
+apexec:testOutputTail a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "testOutputTail" .
+
+apexec:buildModel a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildArtifact ; rdfs:range xsd:string ;
+  rdfs:label "buildModel" ;
+  rdfs:comment "The model that wrote the files (`provider/model`) — recorded because a reader judging the change wants to know who wrote it; it is not an author with authority." .
+
+apexec:BuildPromotion a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "BuildPromotion" ;
+  rdfs:comment "What ONE promotion did (spec 398 §9.4, T29; `build.promotion:<runId>` in the WORKSPACE's vault): the exact tuple the steward's signature was over — the commit, the configuration digest (the artifact's files), the environment reached (a branch today), the permitted migration (none) — and what the forge did (the pull request merged, the merge commit). A promotion is the act that reaches an environment; a build never is. Any change to the tuple voids the signature: a promotion of another commit is another act." .
+
+apexec:promotedCommit a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildPromotion ; rdfs:range xsd:string ;
+  rdfs:label "promotedCommit" .
+
+apexec:promotedConfigDigest a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildPromotion ; rdfs:range xsd:string ;
+  rdfs:label "promotedConfigDigest" ;
+  rdfs:comment "The digest of the build artifact's files (`apexec:artifactDigest` of the build run) — the configuration the signature bound." .
+
+apexec:promotedEnvironment a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildPromotion ; rdfs:range xsd:string ;
+  rdfs:label "promotedEnvironment" ;
+  rdfs:comment "The environment reached — `branch:<name>` until a deployment target is attached to the workspace." .
+
+apexec:permittedMigration a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildPromotion ; rdfs:range xsd:string ;
+  rdfs:label "permittedMigration" .
+
+apexec:promotedUnder a owl:DatatypeProperty ;
+  rdfs:domain apexec:BuildPromotion ; rdfs:range xsd:string ;
+  rdfs:label "promotedUnder" ;
+  rdfs:comment "The intent digest the promotion's mandate was bound to — the ask that named the run and the commit." .
+
+# ═════════════════════════════════════════════════════════════════════════════════════════════════
+# Spec 414 A1 — the trace from the door: how a run ARRIVED, which MODEL calls it made, under which
+# VARIANT, from which STARTING STATE, which HARNESS CAPABILITIES engaged and to what effect, and which
+# SKILL contract governed each step. Evidence, never authority: no gate reads any of these, and a
+# variant changes behaviour, never permission (spec 414 §2 rule 5). No words: messages, prompts and
+# replies appear only as ids and digests (spec 381 §1; shapes R6/R8).
+# ═════════════════════════════════════════════════════════════════════════════════════════════════
+
+apexec:Door a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "Door" ;
+  rdfs:comment "How a run arrived: the A2A message (with its message, context and task ids), a direct ask, a routed hop from another agent's run, a trigger, or a resume. The run prov:used it (apexec:arrivedBy). It carries ids and the kind — never the message's words; the intent is cited by apexec:intentDigest on the run. NOT the asker (that is prov:actedOnBehalfOf) and NOT a credential: arriving by a door authorizes nothing." .
+
+apexec:arrivedBy a owl:ObjectProperty ;
+  rdfs:subPropertyOf prov:used ;
+  rdfs:domain apexec:ServiceExecution ; rdfs:range apexec:Door ;
+  rdfs:label "arrivedBy" .
+
+apexec:doorKind a owl:DatatypeProperty ;
+  rdfs:domain apexec:Door ; rdfs:range xsd:string ;
+  rdfs:label "doorKind" ;
+  rdfs:comment "a2a-message | harness-ask | routed | trigger | resume | home-mcp | channel-mention — how the request reached the harness." .
+
+apexec:a2aMessageId a owl:DatatypeProperty ;
+  rdfs:domain apexec:Door ; rdfs:range xsd:string ;
+  rdfs:label "a2aMessageId" ;
+  rdfs:comment "The A2A Message.messageId the run answered (A2A 1.0). An id, never the message." .
+
+apexec:a2aContextId a owl:DatatypeProperty ;
+  rdfs:domain apexec:Door ; rdfs:range xsd:string ;
+  rdfs:label "a2aContextId" ;
+  rdfs:comment "The A2A contextId — groups the runs of one conversation (a LangSmith 'thread')." .
+
+apexec:a2aTaskId a owl:DatatypeProperty ;
+  rdfs:domain apexec:Door ; rdfs:range xsd:string ;
+  rdfs:label "a2aTaskId" .
+
+apexec:ModelInvocation a owl:Class ;
+  rdfs:subClassOf prov:Activity ;
+  rdfs:label "ModelInvocation" ;
+  rdfs:comment "One call to a language model the run made — to plan, to compose the reply, or for a structured choice inside a step (PROV-AGENT's model-call activity). Recorded by role, model, provider, the digest of the prompt TEMPLATE (never the rendered prompt), token counts and the route's reason. NOT a decision: a model proposes; the mandate authorizes (spec 350)." .
+
+apexec:hasModelInvocation a owl:ObjectProperty ;
+  rdfs:domain prov:Activity ; rdfs:range apexec:ModelInvocation ;
+  rdfs:label "hasModelInvocation" .
+
+apexec:invocationRole a owl:DatatypeProperty ;
+  rdfs:domain apexec:ModelInvocation ; rdfs:range xsd:string ;
+  rdfs:label "invocationRole" ;
+  rdfs:comment "plan | compose | structured | judge. judge = the call that chose which skill (if any) handles the request; structured = a step's own structured call." .
+
+apexec:modelId a owl:DatatypeProperty ;
+  rdfs:domain apexec:ModelInvocation ; rdfs:range xsd:string ;
+  rdfs:label "modelId" .
+
+apexec:modelProvider a owl:DatatypeProperty ;
+  rdfs:domain apexec:ModelInvocation ; rdfs:range xsd:string ;
+  rdfs:label "modelProvider" .
+
+apexec:promptTemplateDigest a owl:DatatypeProperty ;
+  rdfs:domain apexec:ModelInvocation ; rdfs:range xsd:string ;
+  rdfs:label "promptTemplateDigest" ;
+  rdfs:comment "A digest of the prompt the model was given, so two runs can be seen to share (or not share) a prompt. Never the prompt." .
+
+apexec:tokensIn a owl:DatatypeProperty ;
+  rdfs:domain apexec:ModelInvocation ; rdfs:range xsd:integer ;
+  rdfs:label "tokensIn" .
+
+apexec:tokensOut a owl:DatatypeProperty ;
+  rdfs:domain apexec:ModelInvocation ; rdfs:range xsd:integer ;
+  rdfs:label "tokensOut" .
+
+apexec:routeReason a owl:DatatypeProperty ;
+  rdfs:domain apexec:ModelInvocation ; rdfs:range xsd:string ;
+  rdfs:label "routeReason" ;
+  rdfs:comment "Why this provider carried the call (spec 388) — a reason code, never words of the ask." .
+
+apexec:Variant a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "Variant" ;
+  rdfs:comment "The configuration a run ran under, as the things a comparison may change one at a time: the playbook (by commitment), the planner kind, the model route policy, the harness build, and any harness-capability toggles. Named by its digest (RFC 8785 JCS + SHA-256), so two runs share a variant exactly when they share every part. The production variant is simply the current one. NOT authority: a variant changes behaviour, never what a mandate permits." .
+
+apexec:underVariant a owl:ObjectProperty ;
+  rdfs:subPropertyOf prov:used ;
+  rdfs:domain apexec:ServiceExecution ; rdfs:range apexec:Variant ;
+  rdfs:label "underVariant" .
+
+apexec:variantDigest a owl:DatatypeProperty ;
+  rdfs:domain apexec:Variant ; rdfs:range xsd:string ;
+  rdfs:label "variantDigest" .
+
+apexec:plannerKind a owl:DatatypeProperty ;
+  rdfs:domain apexec:Variant ; rdfs:range xsd:string ;
+  rdfs:label "plannerKind" ;
+  rdfs:comment "supplied | compiled | model | rule-based — who proposes plans under this variant." .
+
+apexec:routePolicy a owl:DatatypeProperty ;
+  rdfs:domain apexec:Variant ; rdfs:range xsd:string ;
+  rdfs:label "routePolicy" .
+
+apexec:harnessBuild a owl:DatatypeProperty ;
+  rdfs:domain apexec:Variant ; rdfs:range xsd:string ;
+  rdfs:label "harnessBuild" ;
+  rdfs:comment "The runtime's build identifier (a deployment version id or commit)." .
+
+apexec:capabilityToggle a owl:DatatypeProperty ;
+  rdfs:domain apexec:Variant ; rdfs:range xsd:string ;
+  rdfs:label "capabilityToggle" ;
+  rdfs:comment "`<capability notation>=<setting>` — e.g. `retrieval/kb=off`. One per toggle; absent ⇒ the default." .
+
+apexec:StartingState a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "StartingState" ;
+  rdfs:comment "The records a run began from when they were seeded for a comparison (a scenario's fixture), named by digest. Absent for live runs. Holding it fixed is one half of the change-one-component rule (spec 414 §7)." .
+
+apexec:fromStartingState a owl:ObjectProperty ;
+  rdfs:subPropertyOf prov:used ;
+  rdfs:domain apexec:ServiceExecution ; rdfs:range apexec:StartingState ;
+  rdfs:label "fromStartingState" .
+
+apexec:startingStateDigest a owl:DatatypeProperty ;
+  rdfs:domain apexec:StartingState ; rdfs:range xsd:string ;
+  rdfs:label "startingStateDigest" .
+
+apexec:governedBySkill a owl:ObjectProperty ;
+  rdfs:subPropertyOf prov:used ;
+  rdfs:domain prov:Activity ; rdfs:range apguide:AgentSkillPackage ;
+  rdfs:label "governedBySkill" ;
+  rdfs:comment "The SKILL.md contract (id, version, content digest — the IRI says all three) whose execution contract governed this step. Finer than the run's playbook (prov:hadPlan). NOT the advertised capability (apexec:realizesCapability) and NOT the operation (the plan step's tool): a capability is what is advertised, a skill is how it is done, the tool is what was called." .
+
+# ── Harness capabilities: what the harness DID, as a vocabulary (spec 414 §3.2) ─────────────────
+
+apexec:HarnessCapability a owl:Class ;
+  rdfs:subClassOf skos:Concept ;
+  rdfs:label "HarnessCapability" ;
+  rdfs:comment "A function of the harness itself (a planner, plan admission, retrieval, routing, memory, judgment …), as distinct from a capability an agent ADVERTISES (aps:Capability). Engaging one is recorded (apexec:CapabilityEngagement) so effectiveness can be read per capability. Declared once, here; code stamps engagements by notation." .
+
+apexec:HarnessCapabilities a skos:ConceptScheme ;
+  rdfs:label "Harness capabilities" .
+
+apexec:EngagementEffect a owl:Class ;
+  rdfs:subClassOf skos:Concept ;
+  rdfs:label "EngagementEffect" ;
+  rdfs:comment "What an engaged harness capability did to the run: changed the plan, changed a step, changed the answer, changed nothing, or refused." .
+
+apexec:ee-changedPlan a apexec:EngagementEffect ; skos:notation "changed-plan" ; skos:prefLabel "changed the plan" .
+apexec:ee-changedStep a apexec:EngagementEffect ; skos:notation "changed-step" ; skos:prefLabel "changed a step" .
+apexec:ee-changedAnswer a apexec:EngagementEffect ; skos:notation "changed-answer" ; skos:prefLabel "changed the answer" ; skos:definition "It shaped what the reply says, not what was done — retrieval grounding the composer (spec 413: passages ground what is said, never what is done)." .
+apexec:ee-noChange a apexec:EngagementEffect ; skos:notation "no-change" ; skos:prefLabel "changed nothing" .
+apexec:ee-refused a apexec:EngagementEffect ; skos:notation "refused" ; skos:prefLabel "refused" .
+
+apexec:CapabilityEngagement a owl:Class ;
+  rdfs:subClassOf prov:Influence ;
+  rdfs:label "CapabilityEngagement" ;
+  rdfs:comment "One engagement of a harness capability on a run or a step — the qualified form (PROV's Influence pattern) so each engagement carries its capability, the capability's version and its effect. Engaged-with-no-change is still recorded: 'did this capability matter?' is a query, not an opinion." .
+
+apexec:hasEngagement a owl:ObjectProperty ;
+  rdfs:domain prov:Activity ; rdfs:range apexec:CapabilityEngagement ;
+  rdfs:label "hasEngagement" .
+
+apexec:ofCapability a owl:ObjectProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range apexec:HarnessCapability ;
+  rdfs:label "ofCapability" .
+
+apexec:engagementEffect a owl:ObjectProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range apexec:EngagementEffect ;
+  rdfs:label "engagementEffect" .
+
+apexec:capabilityVersion a owl:DatatypeProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range xsd:string ;
+  rdfs:label "capabilityVersion" .
+
+# The scheme. `skos:notation` is the stable key code stamps by; the IRI local name is DERIVED from it —
+# `hc-` + the notation in camelCase over '/' and '-' (`planner/compiled-shape` → `hc-plannerCompiledShape`), and
+# `ee-` likewise for effects — so a serializer names the concept without a lookup table (asserted in the suite). Open: a new harness capability is a new concept here and nothing else.
+apexec:hc-plannerSupplied a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "planner/supplied" ; skos:prefLabel "supplied plan" ; skos:definition "The plan was given (a screen, a test, a replay), not proposed." .
+apexec:hc-plannerCompiledShape a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "planner/compiled-shape" ; skos:prefLabel "compiled plan shape" ; skos:definition "An ontology-compiled one-correct-plan shape proposed the plan (spec 355)." .
+apexec:hc-plannerModel a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "planner/model" ; skos:prefLabel "model planner" ; skos:definition "A language model proposed the plan (spec 388 route)." .
+apexec:hc-planAdmission a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "plan-admission" ; skos:prefLabel "plan admission" ; skos:definition "The behaviour plane admitted or refused the proposed plan (spec 367 W1); a refusal that forced a replan changed the plan." .
+apexec:hc-playbook a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "playbook" ; skos:prefLabel "playbook" ; skos:definition "A compiled archetype governed the run (spec 354)." .
+apexec:hc-retrievalKb a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "retrieval/kb" ; skos:prefLabel "public-tier retrieval" ; skos:definition "Passages or facts were read from the public knowledge tier (specs 357, 413)." .
+apexec:hc-retrievalVaultSelector a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "retrieval/vault-selector" ; skos:prefLabel "private-tier selector" ; skos:definition "Records were read from a vault by a compiled selector (spec 356)." .
+apexec:hc-standingInstructions a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "standing-instructions" ; skos:prefLabel "standing instructions" ; skos:definition "A standing instruction applied (spec 394)." .
+apexec:hc-confirmationMemory a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "confirmation-memory" ; skos:prefLabel "confirmation memory" ; skos:definition "A prior confirmation was reused (spec 385)." .
+apexec:hc-decisionRules a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "decision-rules" ; skos:prefLabel "decision rules" ; skos:definition "An ordered rule decided a decision point (spec 363)." .
+apexec:hc-routing a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "routing" ; skos:prefLabel "routing" ; skos:definition "Work was routed to another agent by its records (spec 366)." .
+apexec:hc-handoff a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "handoff" ; skos:prefLabel "hand-off" ; skos:definition "A step was handed to another agent's run." .
+apexec:hc-fanOut a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "fan-out" ; skos:prefLabel "fan-out" ; skos:definition "One step was split across many items or agents, each re-verified (spec 380)." .
+apexec:hc-contextOffload a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "context-offload" ; skos:prefLabel "context offload" ; skos:definition "A large result went to the vault and the run carried its summary (spec 391)." .
+apexec:hc-durableResume a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "durable-resume" ; skos:prefLabel "durable resume" ; skos:definition "The run resumed from a checkpoint, replaying completed steps (spec 362, 370 P1)." .
+apexec:hc-approval a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "approval" ; skos:prefLabel "approval" ; skos:definition "A step waited on a person's signature (specs 350, 393)." .
+apexec:hc-judgment a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "judgment" ; skos:prefLabel "judgment" ; skos:definition "A judgment was made about the run or a step against a stated criterion (spec 414 §3.4) — implementation-neutral; defined by principles J1–J8, filled by a later spec." .
+
+# ── Spec 415 §3a — SKILL SELECTION as a harness capability, and what it offered, chose and rejected ──
+# The APPROACH is the concept (implementation-neutral names: the mechanism behind each is a binding); a comparison
+# toggles it and holds the rest fixed. The engagement names the candidates it OFFERED, the one(s) it CHOSE and the
+# neighbour it REJECTED when two collided — as capability / skill IRIs, never words.
+apexec:hc-skillSelectionModel a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "skill-selection/model" ; skos:prefLabel "selection by description" ; skos:definition "A model chose the skill from descriptions — the baseline." .
+apexec:hc-skillSelectionOntology a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "skill-selection/ontology" ; skos:prefLabel "selection by ontology and canonical id" ; skos:definition "The skill was chosen by what the ontology says it is for and by its canonical identity (spec 355 compiled shapes are one such mechanism)." .
+apexec:hc-skillSelectionRules a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "skill-selection/rules" ; skos:prefLabel "selection by rules" ; skos:definition "Declared rules chose the skill." .
+apexec:hc-skillSelectionJudgment a apexec:HarnessCapability ; skos:inScheme apexec:HarnessCapabilities ; skos:notation "skill-selection/judgment" ; skos:prefLabel "selection by judgment" ; skos:definition "A judgment against stated criteria chose or confirmed the skill (spec 414 §3.4)." .
+
+apexec:offeredCandidate a owl:ObjectProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range prov:Entity ;
+  rdfs:label "offeredCandidate" ; rdfs:comment "A skill / capability the selection could choose from (by IRI)." .
+apexec:chose a owl:ObjectProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range prov:Entity ;
+  rdfs:label "chose" ; rdfs:comment "What the selection chose (by IRI). More than one ⇒ over-selection." .
+apexec:rejectedNeighbour a owl:ObjectProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range prov:Entity ;
+  rdfs:label "rejectedNeighbour" ; rdfs:comment "The colliding candidate the selection passed over, when it can say so." .
+
+# Spec 415 A4 — THE INTENT, TYPED IN THE DOMAIN ONTOLOGY. A selection by judgment first says what the request asks FOR
+# as one domain class (the deliverable or activity) and what it is ABOUT; the skills whose declared coverage includes that
+# class are the only candidates. The values are CLASS IRIs from the agent's domain ontology (or apexec:OutsideDomain),
+# never words. Evidence of how the selection read the request; never authority.
+apexec:inferredRequest a owl:ObjectProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range rdfs:Class ;
+  rdfs:label "inferredRequest" ; rdfs:comment "The domain class the selection read the request as asking FOR — or apexec:OutsideDomain." .
+apexec:inferredAbout a owl:ObjectProperty ;
+  rdfs:domain apexec:CapabilityEngagement ; rdfs:range rdfs:Class ;
+  rdfs:label "inferredAbout" ; rdfs:comment "A domain class the selection read the request as being ABOUT." .
+apexec:OutsideDomain a rdfs:Class ;
+  rdfs:label "OutsideDomain" ; rdfs:comment "What a request asks for when it is none of the domain's classes: no skill may be chosen for it." .
+
+# ═══ Spec 438 W0 — EVIDENCE STATUS and the WORK a run belongs to ═══════════════════════════════════
+#
+# Two unrelated things land together because they answer the two questions a run record could not answer:
+# "what was this part of?" and "how complete is what it left behind?".
+#
+# WORK. A run may name the Endeavor it is part of. It is a REFERENCE and never authority: a run's permission
+# comes from its mandate, and no verifier, admission stage or enforcer reads this property. It MAY be absent —
+# a solo Ask with no work named has no workRef, and a synthetic Endeavor minted to fill the field would be a
+# fact nobody asserted (spec 438 §2.3). Attaching a run to work is an explicit coordination command, never
+# inferred from a retry or a shared contextId.
+apexec:workRef a owl:ObjectProperty ;
+  rdfs:subPropertyOf dcterms:isPartOf ;
+  rdfs:domain apexec:ServiceExecution ; rdfs:range apcoord:Endeavor ;
+  rdfs:label "workRef" ;
+  rdfs:comment "The Endeavor this execution was part of. A REFERENCE, never authority — no gate reads it — and may be absent (spec 438 §3)." .
+
+# EVIDENCE STATUS. Five SEPARATE answers, never collapsed into one flag, because collapsing them is how a
+# record view tells a plausible falsehood (the discipline of spec 358 applied to the record): "complete" that
+# means "nothing contradicted itself", "verified" that means "nobody checked", "0" that means "unreported".
+# Derived from the run record on read; stored nowhere as authority.
+apexec:EvidenceStatus a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "EvidenceStatus" ;
+  rdfs:comment "A five-dimensional reading of what a run left behind: coverage, consistency, origin, integrity, assessment. Derived from the record, evidence only, and never an input to any gate (spec 438 §4)." .
+
+apexec:EvidenceCoverage a owl:Class ; rdfs:subClassOf skos:Concept ; rdfs:label "EvidenceCoverage" ;
+  rdfs:comment "Did every planned step leave a record? Names the missing step; never a ratio that hides which." .
+apexec:EvidenceCoverages a skos:ConceptScheme ; rdfs:label "Evidence coverage" .
+
+apexec:EvidenceConsistency a owl:Class ; rdfs:subClassOf skos:Concept ; rdfs:label "EvidenceConsistency" ;
+  rdfs:comment "Do the record's own parts agree — steps, receipts, events, outcome? A disagreement is reported, never resolved by preferring one source." .
+apexec:EvidenceConsistencies a skos:ConceptScheme ; rdfs:label "Evidence consistency" .
+
+apexec:EvidenceOrigin a owl:Class ; rdfs:subClassOf skos:Concept ; rdfs:label "EvidenceOrigin" ;
+  rdfs:comment "Who observed a claim: executor-observed, participant-asserted, or third-party-attested. An assertion is never promoted to an observation." .
+apexec:EvidenceOrigins a skos:ConceptScheme ; rdfs:label "Evidence origin" .
+apexec:eo-executorObserved a apexec:EvidenceOrigin ; skos:inScheme apexec:EvidenceOrigins ; skos:notation "executor-observed" ; skos:prefLabel "executor-observed" ; skos:definition "The harness itself recorded it while running the step." .
+apexec:eo-participantAsserted a apexec:EvidenceOrigin ; skos:inScheme apexec:EvidenceOrigins ; skos:notation "participant-asserted" ; skos:prefLabel "participant-asserted" ; skos:definition "A party said so. True of them saying it, not of what they said." .
+apexec:eo-thirdPartyAttested a apexec:EvidenceOrigin ; skos:inScheme apexec:EvidenceOrigins ; skos:notation "third-party-attested" ; skos:prefLabel "third-party-attested" ; skos:definition "A party other than the actor signed for it." .
+
+apexec:EvidenceIntegrity a owl:Class ; rdfs:subClassOf skos:Concept ; rdfs:label "EvidenceIntegrity" ;
+  rdfs:comment "How far the bytes have actually been checked. An unchecked bundle is never reported as verified." .
+apexec:EvidenceIntegrities a skos:ConceptScheme ; rdfs:label "Evidence integrity" .
+apexec:ei-unchecked a apexec:EvidenceIntegrity ; skos:inScheme apexec:EvidenceIntegrities ; skos:notation "unchecked" ; skos:prefLabel "unchecked" ; skos:definition "Nothing was recomputed. The default, and said so." .
+apexec:ei-hashValidated a apexec:EvidenceIntegrity ; skos:inScheme apexec:EvidenceIntegrities ; skos:notation "hash-validated" ; skos:prefLabel "hash-validated" ; skos:definition "The content digest was recomputed and matched." .
+apexec:ei-signatureValidated a apexec:EvidenceIntegrity ; skos:inScheme apexec:EvidenceIntegrities ; skos:notation "signature-validated" ; skos:prefLabel "signature-validated" ; skos:definition "A signature over the digest verified against the signer's account." .
+apexec:ei-anchored a apexec:EvidenceIntegrity ; skos:inScheme apexec:EvidenceIntegrities ; skos:notation "anchored" ; skos:prefLabel "anchored" ; skos:definition "The digest was found in the receipt-anchor registry on chain." .
+
+apexec:EvidenceAssessment a owl:Class ; rdfs:subClassOf skos:Concept ; rdfs:label "EvidenceAssessment" ;
+  rdfs:comment "Has anyone judged this run, against which criteria revision? UNASSESSED is never reported as failed." .
+apexec:EvidenceAssessments a skos:ConceptScheme ; rdfs:label "Evidence assessment" .
+
+apexec:hasEvidenceStatus a owl:ObjectProperty ;
+  rdfs:domain apexec:ServiceExecution ; rdfs:range apexec:EvidenceStatus ;
+  rdfs:label "hasEvidenceStatus" ; rdfs:comment "The derived reading for this execution (spec 438 §4)." .