@agenticprimitives/ontology 1.0.0-alpha.4 → 1.0.0-alpha.40

package/tbox/registry.ttl

@@ -0,0 +1,382 @@
+# T-box — AP-native registry kit vocabulary.
+# Grounded in PROV-O and DOLCE+DnS/DUL; informed by Agent Explorer's
+# erc8004.ttl, discovery.ttl, descriptors.ttl, trust.ttl, hol.ttl, and oasf.ttl
+# modules, but expressed as AP-native Ring 0 vocabulary.
+# spec 346 §7/§11 added the registry INSTANCE + its operating ap:RegistryAgent, the admission
+# RegistrationReceipt, the hash-chained lifecycle log + LogCheckpoint, and the derived entryStatus.
+
+@prefix ap:      <https://agenticprimitives.dev/ns/core#> .
+@prefix approf:  <https://agenticprimitives.dev/ns/profile#> .
+@prefix apreg:   <https://agenticprimitives.dev/ns/registry#> .
+@prefix apatt:   <https://agenticprimitives.dev/ns/attestation#> .
+@prefix aps:     <https://agenticprimitives.dev/ns/skill#> .
+@prefix rdf:     <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs:    <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:     <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:     <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:    <http://www.w3.org/ns/prov#> .
+@prefix dul:     <http://www.ontologydesignpatterns.org/ont/dul/DUL.owl#> .
+@prefix skos:    <http://www.w3.org/2004/02/skos/core#> .
+
+apreg: a owl:Ontology ;
+  rdfs:label "Agentic Primitives — registry kit ontology" ;
+  owl:versionInfo "0.2.0" ;
+  rdfs:seeAlso <https://github.com/agentictrustlabs/agent-explorer/tree/main/apps/ontology/ontology> ;
+  rdfs:comment "AP-native registry-building vocabulary. External registries are projection surfaces; this vocabulary defines Smart-Agent-anchored entries, binding proofs, claim slots, and lifecycle evidence." .
+
+# ─── Core registry classes ─────────────────────────────────────────────
+
+apreg:RegistryKitProfile a owl:Class ;
+  rdfs:subClassOf dul:Description ;
+  rdfs:label "RegistryKitProfile" ;
+  rdfs:comment "A description of a kit-built registry: membership policy, claim slots, lifecycle rules, and validation hooks." .
+
+apreg:RegistryEntry a owl:Class ;
+  rdfs:subClassOf prov:Entity, dul:InformationObject ;
+  rdfs:label "RegistryEntry" ;
+  rdfs:comment "A public facet asserting that a Smart Agent is listed in a registry under a signed card and claim-slot profile. It is evidence, not authority." .
+
+apreg:RegistryEntryBindingProof a owl:Class ;
+  rdfs:subClassOf prov:Entity, dul:InformationObject ;
+  rdfs:label "RegistryEntryBindingProof" ;
+  rdfs:comment "A Smart-Agent-signed proof binding registryId, entryId, subjectAgent, cardHash, and claimHashes." .
+
+apreg:RegistryClaimSlot a owl:Class ;
+  rdfs:subClassOf dul:Description ;
+  rdfs:label "RegistryClaimSlot" ;
+  rdfs:comment "A typed claim requirement in a registry profile. Claim bodies live in attestations, agent-skills, geo-features, or app-level credential packages." .
+
+apreg:RegistryLifecycleEvent a owl:Class ;
+  rdfs:subClassOf prov:Activity ;
+  rdfs:label "RegistryLifecycleEvent" ;
+  rdfs:comment "One event in a registry's APPEND-ONLY, hash-chained lifecycle log (spec 346 §7.3 RegistryLifecycleEventV1): eventKind from apreg:lifecycleEventScheme, eventSequence strictly increasing per registry, eventDigest, previousEventDigest for every event after the first. The on-chain AgentRegistryBase events (register, renew, suspend, revoke, expire, claim-update) remain the PUBLIC lifecycle facts and are projected into the KB; the log adds the off-chain evidence chain (receipts, revalidations, private issuances by digest only) plus a LogCheckpoint anchor. The log's home is the operator's vault or DO (a rebuild, not a bereavement — ADR-0055), never the public KB." .
+
+apreg:RegistryMembershipPolicy a owl:Class ;
+  rdfs:subClassOf dul:Description ;
+  rdfs:label "RegistryMembershipPolicy" ;
+  rdfs:comment "A generic AP-native policy description for registry membership. Vertical-specific membership logic lives outside Ring 0." .
+
+apreg:ExternalRegistryFacet a owl:Class ;
+  rdfs:subClassOf ap:Facet, prov:Entity ;
+  rdfs:label "ExternalRegistryFacet" ;
+  rdfs:comment "A public projection from ERC-8004, HCS, ANS, DNS-AID, OASF, MCP Registry, or another external registry surface back to the canonical Smart Agent." .
+
+apreg:RegistryLifecycleStatus a owl:Class ;
+  rdfs:subClassOf skos:Concept ;
+  rdfs:label "RegistryLifecycleStatus" ;
+  rdfs:comment "Controlled vocabulary for active, suspended, revoked, expired, and pending registry entry states." .
+
+# ─── Properties ────────────────────────────────────────────────────────
+
+apreg:registryId a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range xsd:string ;
+  rdfs:label "registryId" .
+
+apreg:entryId a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range xsd:string ;
+  rdfs:label "entryId" .
+
+apreg:subjectAgent a owl:ObjectProperty ;
+  rdfs:range ap:Agent ;
+  rdfs:label "subjectAgent" ;
+  rdfs:comment "The canonical Smart Agent a registry record points at. Used by RegistryEntry, RegistrationReceipt and RegistryLifecycleEvent alike (spec 346 §7), so the domain is left open — the per-class shapes pin cardinality." .
+
+apreg:hasBindingProof a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range apreg:RegistryEntryBindingProof ;
+  rdfs:label "hasBindingProof" .
+
+apreg:cardHash a owl:DatatypeProperty ;
+  rdfs:range xsd:string ;
+  rdfs:label "cardHash" ;
+  rdfs:comment "Canonical hash of the AP-native signed AgentCard bundle." .
+
+apreg:claimHash a owl:DatatypeProperty ;
+  rdfs:range xsd:string ;
+  rdfs:label "claimHash" ;
+  rdfs:comment "Hash of a claim, credential, or attestation satisfying a registry claim slot." .
+
+apreg:claimSlot a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryKitProfile ;
+  rdfs:range apreg:RegistryClaimSlot ;
+  rdfs:label "claimSlot" .
+
+apreg:requiredClaimSlot a owl:ObjectProperty ;
+  rdfs:subPropertyOf apreg:claimSlot ;
+  rdfs:label "requiredClaimSlot" .
+
+apreg:membershipPolicy a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryKitProfile ;
+  rdfs:range apreg:RegistryMembershipPolicy ;
+  rdfs:label "membershipPolicy" .
+
+apreg:lifecycleStatus a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range apreg:RegistryLifecycleStatus ;
+  rdfs:label "lifecycleStatus" .
+
+apreg:externalSurface a owl:DatatypeProperty ;
+  rdfs:domain apreg:ExternalRegistryFacet ;
+  rdfs:range xsd:string ;
+  rdfs:label "externalSurface" ;
+  rdfs:comment "The source surface, e.g. erc8004, hcs10, hcs11, ans, dns-aid, oasf, a2a, mcp-registry." .
+
+apreg:externalIdentifier a owl:DatatypeProperty ;
+  rdfs:domain apreg:ExternalRegistryFacet ;
+  rdfs:range xsd:string ;
+  rdfs:label "externalIdentifier" .
+
+apreg:projectionOf a owl:ObjectProperty ;
+  rdfs:domain apreg:ExternalRegistryFacet ;
+  rdfs:range apreg:RegistryEntry ;
+  rdfs:label "projectionOf" ;
+  rdfs:comment "Links an external registry projection to the AP-native registry entry or signed-card anchor it projects." .
+
+apreg:blockNumber a owl:DatatypeProperty ;
+  rdfs:range xsd:nonNegativeInteger ;
+  rdfs:label "blockNumber" .
+
+apreg:transactionHash a owl:DatatypeProperty ;
+  rdfs:range xsd:string ;
+  rdfs:label "transactionHash" .
+
+apreg:logIndex a owl:DatatypeProperty ;
+  rdfs:range xsd:nonNegativeInteger ;
+  rdfs:label "logIndex" .
+
+# ─── Signed card + binding-proof projection (spec 279 §3.2/§3.3) ──────
+
+apreg:SignedAgentCard a owl:Class ;
+  rdfs:subClassOf prov:Entity, dul:InformationObject ;
+  rdfs:label "SignedAgentCard" ;
+  rdfs:comment "A Smart-Agent-signed (ERC-1271) agent card bundle (spec 279 §3.2). Proves cardHash -> subjectAgent without trusting the server that served it. Owned by agent-profile; projected here as the discovery anchor a RegistryEntry.cardHash references." .
+
+apreg:cardSubject a owl:ObjectProperty ;
+  rdfs:domain apreg:SignedAgentCard ;
+  rdfs:range ap:Agent ;
+  rdfs:label "cardSubject" ;
+  rdfs:comment "The canonical Smart Agent the signed card describes (signer = verifyingContract = subject in V1)." .
+
+apreg:verifyingContract a owl:ObjectProperty ;
+  rdfs:domain apreg:SignedAgentCard ;
+  rdfs:range ap:Agent ;
+  rdfs:label "verifyingContract" ;
+  rdfs:comment "The ERC-1271 contract whose signature validates the card (the subject Smart Agent in V1)." .
+
+apreg:cardChainId a owl:DatatypeProperty ;
+  rdfs:domain apreg:SignedAgentCard ;
+  rdfs:range xsd:nonNegativeInteger ;
+  rdfs:label "cardChainId" ;
+  rdfs:comment "Chain the card signature is bound to (anti cross-chain replay)." .
+
+apreg:describesCard a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range apreg:SignedAgentCard ;
+  rdfs:label "describesCard" ;
+  rdfs:comment "Links a registry entry to the signed card its cardHash references." .
+
+apreg:bindingProofHash a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range xsd:string ;
+  rdfs:label "bindingProofHash" ;
+  rdfs:comment "sha256 of the off-chain RegistryEntryBindingProof this entry references (verified off-chain via the subject SA's ERC-1271)." .
+
+apreg:proofHash a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryEntryBindingProof ;
+  rdfs:range xsd:string ;
+  rdfs:label "proofHash" ;
+  rdfs:comment "sha256 over the canonical binding-proof body the subject Smart Agent signed." .
+
+apreg:claimSlotId a owl:DatatypeProperty ;
+  rdfs:range xsd:string ;
+  rdfs:label "claimSlotId" ;
+  rdfs:comment "Identifier of the claim slot a claim hash fills (from the RegistryClaimUpdated event)." .
+
+apreg:issuedAt a owl:DatatypeProperty ;
+  rdfs:range xsd:dateTime ;
+  rdfs:label "issuedAt" .
+
+apreg:expiresAt a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range xsd:dateTime ;
+  rdfs:label "expiresAt" ;
+  rdfs:comment "Entry expiry; absent (0 on-chain) = non-expiring. A past expiresAt projects to the apreg:expired liveness status." .
+
+apreg:reasonHash a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryLifecycleEvent ;
+  rdfs:range xsd:string ;
+  rdfs:label "reasonHash" ;
+  rdfs:comment "keccak of the off-chain reason string for a suspend / revoke lifecycle event." .
+
+# ─── Lifecycle status codelist seeds ──────────────────────────────────
+
+apreg:active a apreg:RegistryLifecycleStatus ;
+  skos:prefLabel "active" .
+
+apreg:suspended a apreg:RegistryLifecycleStatus ;
+  skos:prefLabel "suspended" .
+
+apreg:revoked a apreg:RegistryLifecycleStatus ;
+  skos:prefLabel "revoked" .
+
+apreg:expired a apreg:RegistryLifecycleStatus ;
+  skos:prefLabel "expired" .
+
+apreg:pending a apreg:RegistryLifecycleStatus ;
+  skos:prefLabel "pending" .
+
+# ═══ spec 346 §7 / §11 — registry instance, operator, receipts, lifecycle log ═══
+
+# ─── The registry instance and its operator ────────────────────────────
+
+apreg:Registry a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "Registry" ;
+  rdfs:comment "A kit-built registry INSTANCE (spec 279; ADR-0038): an SA-anchored registry contract plus the RegistryKitProfile that describes it. An Entity, never an agent — operated by exactly one ap:RegistryAgent (apreg:operatedBy) whose '.registry' name is the registry's agentive face, exactly as a WorkspaceAgent is a Workspace's (ADR-0061 §4). Vertical registries are external consumers of the kit; this class is what they are built FROM." .
+
+apreg:describedByProfile a owl:ObjectProperty ;
+  rdfs:domain apreg:Registry ;
+  rdfs:range apreg:RegistryKitProfile ;
+  rdfs:label "describedByProfile" .
+
+apreg:operatesRegistry a owl:ObjectProperty ;
+  rdfs:domain ap:RegistryAgent ;
+  rdfs:range apreg:Registry ;
+  owl:inverseOf apreg:operatedBy ;
+  rdfs:label "operatesRegistry" ;
+  rdfs:comment "Exactly one (ap:RegistryAgentShape). The operator SA admits entries, signs receipts, appends the lifecycle log and serves the discovery surface — under its OWN custody policy. Operating a registry grants it nothing over the subjects it lists; an entry is evidence, never authority." .
+
+apreg:operatedBy a owl:ObjectProperty ;
+  rdfs:domain apreg:Registry ;
+  rdfs:range ap:RegistryAgent ;
+  owl:inverseOf apreg:operatesRegistry ;
+  rdfs:label "operatedBy" .
+
+apreg:inRegistry a owl:ObjectProperty ;
+  rdfs:range apreg:Registry ;
+  rdfs:label "inRegistry" ;
+  rdfs:comment "The registry a RegistryEntry, RegistrationReceipt, RegistryLifecycleEvent or LogCheckpoint belongs to — apreg:registryId as a node rather than a string." .
+
+# ─── Registration receipt (§7.2) ───────────────────────────────────────
+
+apreg:RegistrationReceipt a owl:Class ;
+  rdfs:subClassOf prov:Entity , ap:Evidence ;
+  rdfs:label "RegistrationReceipt" ;
+  rdfs:comment "RegistrationReceiptV1: what the registry operator VERIFIED, what FAILED, and what was NOT VERIFIED (not-attempted / unavailable / policy-skipped — a first-class outcome, never silently equal to verified) when admitting an entry, each line against an artifact digest. Signed by the operator SA (receiptSigner). EVIDENCE, never authority (ADR-0020): the object an external registry (ARD, 8004) can cite and a consumer shows as 'verified on <date> by <registry>'. Every AdmissionCheck appears in exactly one of the three lists (apreg:RegistrationReceiptShape)." .
+
+apreg:verifiedCheck a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range skos:Concept ;
+  rdfs:label "verifiedCheck" ;
+  rdfs:comment "An apreg:admissionCheckScheme concept that PASSED, against an artifact digest." .
+
+apreg:failedCheck a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range skos:Concept ;
+  rdfs:label "failedCheck" ;
+  rdfs:comment "An apreg:admissionCheckScheme concept that FAILED, with a reason." .
+
+apreg:notVerifiedCheck a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range skos:Concept ;
+  rdfs:label "notVerifiedCheck" ;
+  rdfs:comment "An apreg:admissionCheckScheme concept that was NOT ATTEMPTED, unavailable, or policy-skipped. Recorded, never elided: 'not verified' must stay distinguishable from 'verified'." .
+
+apreg:receiptFor a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range apreg:RegistryEntry ;
+  rdfs:label "receiptFor" .
+
+apreg:subjectType a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range skos:Concept ;
+  rdfs:label "subjectType" ;
+  rdfs:comment "ap:agentTypeScheme — the DERIVED type the admission checked the subject's on-chain record and suffix against (spec 346 §2.3 invariant)." .
+
+apreg:admittedAt a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range xsd:dateTime ;
+  rdfs:label "admittedAt" .
+
+apreg:receiptSigner a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range ap:RegistryAgent ;
+  rdfs:label "receiptSigner" ;
+  rdfs:comment "The registry operator SA that signed the receipt (ERC-1271 or a delegated session key)." .
+
+apreg:receiptSignature a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistrationReceipt ;
+  rdfs:range xsd:string ;
+  rdfs:label "receiptSignature" .
+
+# ─── Lifecycle log (§7.3) ──────────────────────────────────────────────
+
+apreg:eventKind a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryLifecycleEvent ;
+  rdfs:range skos:Concept ;
+  rdfs:label "eventKind" ;
+  rdfs:comment "apreg:lifecycleEventScheme (cbox/registry-vocabulary.ttl) — the §7.3 RegistryLifecycleEventKind union." .
+
+apreg:eventSequence a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryLifecycleEvent ;
+  rdfs:range xsd:nonNegativeInteger ;
+  rdfs:label "eventSequence" ;
+  rdfs:comment "Position in the registry's append-only log. Strictly increasing per registry; the first event is 0." .
+
+apreg:previousEventDigest a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryLifecycleEvent ;
+  rdfs:range xsd:string ;
+  rdfs:label "previousEventDigest" ;
+  rdfs:comment "Digest of the preceding event — the hash chain (the smart-agent audit pattern). REQUIRED for every eventSequence > 0." .
+
+apreg:eventDigest a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryLifecycleEvent ;
+  rdfs:range xsd:string ;
+  rdfs:label "eventDigest" .
+
+apreg:occurredAt a owl:DatatypeProperty ;
+  rdfs:domain apreg:RegistryLifecycleEvent ;
+  rdfs:range xsd:dateTime ;
+  rdfs:label "occurredAt" .
+
+apreg:citesReceipt a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryLifecycleEvent ;
+  rdfs:range apreg:RegistrationReceipt ;
+  rdfs:label "citesReceipt" ;
+  rdfs:comment "The receipt an ENTRY_REGISTERED / ENTRY_RENEWED / REVALIDATION_* event refers to." .
+
+apreg:LogCheckpoint a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "LogCheckpoint" ;
+  rdfs:comment "A Merkle root over a contiguous range [checkpointFrom, checkpointTo] of lifecycle events, anchored externally (anchorRef: a topic sequence, a tx, … — HCS-27-compatible, ledger-agnostic). Proves the log was not rewritten; proves nothing about the truth of any event." .
+
+apreg:merkleRoot a owl:DatatypeProperty ;
+  rdfs:domain apreg:LogCheckpoint ;
+  rdfs:range xsd:string ;
+  rdfs:label "merkleRoot" .
+
+apreg:checkpointFrom a owl:DatatypeProperty ;
+  rdfs:domain apreg:LogCheckpoint ;
+  rdfs:range xsd:nonNegativeInteger ;
+  rdfs:label "checkpointFrom" .
+
+apreg:checkpointTo a owl:DatatypeProperty ;
+  rdfs:domain apreg:LogCheckpoint ;
+  rdfs:range xsd:nonNegativeInteger ;
+  rdfs:label "checkpointTo" .
+
+apreg:anchorRef a owl:DatatypeProperty ;
+  rdfs:domain apreg:LogCheckpoint ;
+  rdfs:range xsd:string ;
+  rdfs:label "anchorRef" ;
+  rdfs:comment "The external anchor reference the CheckpointHook returned." .
+
+# ─── Continuous revalidation status (§7.4) ─────────────────────────────
+
+apreg:entryStatus a owl:ObjectProperty ;
+  rdfs:domain apreg:RegistryEntry ;
+  rdfs:range skos:Concept ;
+  rdfs:label "entryStatus" ;
+  rdfs:comment "apreg:entryStatusScheme — verified | stale | failing | suspended | revoked | expired. DERIVED by a pure fold over the lifecycle events (deriveEntryStatus) under a revalidation policy — never a mutable flag written by hand. Distinct from apreg:lifecycleStatus, the on-chain active/suspended/revoked/expired/pending fact." .

package/tbox/resolution.ttl

@@ -0,0 +1,108 @@
+# T-box — resolution + ResolutionReceipt vocabulary (spine Layer 4; skeleton W1).
+# ERC-7683 Resolver pattern; W2 grows the full surface.
+# RR-INV-01..05 enforced by intent-marketplace + intent-resolver runtime SHACL.
+
+@prefix apres:  <https://agenticprimitives.dev/ns/resolution#> .
+@prefix apint:  <https://agenticprimitives.dev/ns/intent#> .
+@prefix apcst:  <https://agenticprimitives.dev/ns/constraint#> .
+@prefix ap:     <https://agenticprimitives.dev/ns/core#> .
+@prefix rdfs:   <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:    <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:    <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:   <http://www.w3.org/ns/prov#> .
+
+apres: a owl:Ontology ;
+    rdfs:label "Agentic Primitives — resolution ontology" ;
+    owl:versionInfo "0.1.0-skeleton" ;
+    rdfs:comment "Layer 4 of the spine. W1 ships skeleton (types + PassThroughResolver); full vocabulary lands W2 when resolver implementations ship." .
+
+# ─── Resolver classes ─────────────────────────────────────────────────
+
+apres:Resolver a owl:Class ;
+    rdfs:subClassOf ap:ServiceAgent ;
+    rdfs:label "Resolver" ;
+    rdfs:comment "A Service Agent that performs Intent resolution — translates opaque expressed Intent → ResolvedOrder. ERC-7683 Resolver-contract parallel." .
+
+apres:ResolvedOrder a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ResolvedOrder" ;
+    rdfs:comment "Normalized executable form of an Intent. Layer 4 output. Bridges from CSP-shaped Intent to Solver-fillable Order (Layer 5+6)." .
+
+apres:ResolutionReceipt a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ResolutionReceipt" ;
+    rdfs:comment "Provenance + invariant record for a resolution: model + version + prompt hash + tool calls + confidence + policyChecks + requiresUserConfirmation. Authority-gating per RR-INV-01..05. NOT itself an authority object — provenance only." .
+
+apres:PolicyCheckResult a owl:Class ;
+    rdfs:label "PolicyCheckResult" ;
+    rdfs:comment "A single policy check + pass/fail + rationale; recorded in a ResolutionReceipt." .
+
+apres:ToolCallTrace a owl:Class ;
+    rdfs:label "ToolCallTrace" ;
+    rdfs:comment "An MCP tool call invocation captured for resolution provenance (toolName + inputHash + outputHash + durationMs)." .
+
+# ─── Properties ───────────────────────────────────────────────────────
+
+apres:resolvedFrom a owl:ObjectProperty ;
+    rdfs:domain apres:ResolvedOrder ;
+    rdfs:range apint:Intent ;
+    rdfs:label "resolvedFrom" .
+
+apres:canonicalConstraints a owl:ObjectProperty ;
+    rdfs:domain apres:ResolvedOrder ;
+    rdfs:range apcst:ConstraintSet ;
+    rdfs:label "canonicalConstraints" .
+
+apres:expandedAssumptions a owl:ObjectProperty ;
+    rdfs:domain apres:ResolvedOrder ;
+    rdfs:range apcst:AssumptionSet ;
+    rdfs:label "expandedAssumptions" .
+
+apres:resolverAgent a owl:ObjectProperty ;
+    rdfs:domain apres:ResolutionReceipt ;
+    rdfs:range apres:Resolver ;
+    rdfs:label "resolverAgent" .
+
+apres:resolverVersion a owl:DatatypeProperty ;
+    rdfs:domain apres:ResolutionReceipt ;
+    rdfs:range xsd:string ;
+    rdfs:label "resolverVersion" .
+
+apres:modelName a owl:DatatypeProperty ;
+    rdfs:domain apres:ResolutionReceipt ;
+    rdfs:range xsd:string ;
+    rdfs:label "modelName" ;
+    rdfs:comment "LLM model name when present (e.g. 'claude-opus-4-7', 'gpt-4.1'). Null for PassThrough." .
+
+apres:confidence a owl:DatatypeProperty ;
+    rdfs:domain apres:ResolutionReceipt ;
+    rdfs:range xsd:decimal ;
+    rdfs:label "confidence" ;
+    rdfs:comment "0..1. Substrate threshold determines requiresUserConfirmation." .
+
+apres:requiresUserConfirmation a owl:DatatypeProperty ;
+    rdfs:domain apres:ResolutionReceipt ;
+    rdfs:range xsd:boolean ;
+    rdfs:label "requiresUserConfirmation" ;
+    rdfs:comment "Authority gate (RR-INV-01). TRUE blocks downstream layers until user signs the canonical Intent + ConstraintSet bytes." .
+
+apres:userConfirmedAt a owl:DatatypeProperty ;
+    rdfs:domain apres:ResolutionReceipt ;
+    rdfs:range xsd:dateTime ;
+    rdfs:label "userConfirmedAt" .
+
+apres:policyVersion a owl:DatatypeProperty ;
+    rdfs:domain apres:ResolutionReceipt ;
+    rdfs:range xsd:string ;
+    rdfs:label "policyVersion" ;
+    rdfs:comment "Hash of the resolver policy at resolution time. Audit replay." .
+
+apres:hasPolicyCheck a owl:ObjectProperty ;
+    rdfs:domain apres:ResolutionReceipt ;
+    rdfs:range apres:PolicyCheckResult ;
+    rdfs:label "hasPolicyCheck" .
+
+apres:hasToolCall a owl:ObjectProperty ;
+    rdfs:domain apres:ResolutionReceipt ;
+    rdfs:range apres:ToolCallTrace ;
+    rdfs:label "hasToolCall" .

package/tbox/scope.ttl

@@ -0,0 +1,59 @@
+# T-box — AP-Scope-V1 (spec 308 / G-8): the scope-statement + verifier-
+# obligation classes and the profile annotation properties. The codelists
+# (concepts) live in cbox/scope-vocabulary.ttl; this file declares what a
+# SCOPE and an OBLIGATION are.
+
+@prefix apscope: <https://agenticprimitives.dev/ns/scope#> .
+@prefix rdfs:    <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:     <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:     <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:    <http://www.w3.org/ns/prov#> .
+
+apscope: a owl:Ontology ;
+    rdfs:label "Agentic Primitives — AP-Scope-V1 vocabulary" ;
+    owl:versionInfo "0.1.0" ;
+    rdfs:comment "Spec 308: the small shared scope vocabulary — action/resource/purpose/reliance classes, revocation modes, value-limit kinds — plus the reliance-class verifier profile. Deliberately coarse; external adoption over semantic perfection." .
+
+apscope:Scope a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Scope" ;
+    rdfs:comment "A scope STATEMENT: actionClass × resourceClass × purposeClass × value-limit shape. What a delegation/credential encodes and a verifier compares transaction parameters against (the article's duty 2). Never precise values — those live in caveats/predicates." .
+
+apscope:VerifierObligation a owl:Class ;
+    rdfs:label "Verifier Obligation" ;
+    rdfs:comment "The duties a reliance class imposes on the verifier at execution time (spec 308 profile): the required revocation mode, status freshness, and receipt retention." .
+
+# ─── Scope properties (ranges are the cbox concept schemes) ──────────────
+
+apscope:hasActionClass a owl:ObjectProperty ;
+    rdfs:domain apscope:Scope ; rdfs:label "has action class" .
+apscope:hasResourceClass a owl:ObjectProperty ;
+    rdfs:domain apscope:Scope ; rdfs:label "has resource class" .
+apscope:hasPurposeClass a owl:ObjectProperty ;
+    rdfs:domain apscope:Scope ; rdfs:label "has purpose class" .
+apscope:hasValueLimitKind a owl:ObjectProperty ;
+    rdfs:domain apscope:Scope ; rdfs:label "has value-limit kind" .
+apscope:hasRelianceClass a owl:ObjectProperty ;
+    rdfs:label "has reliance class" ;
+    rdfs:comment "On a scope, a receipt profile, or a tool classification: which verifier profile applies." .
+
+# ─── The reliance-profile annotation properties (used in the cbox) ───────
+
+apscope:requiredRevocationMode a owl:ObjectProperty ;
+    rdfs:label "required revocation mode" ;
+    rdfs:comment "ONE mode per reliance class (ADR-0013 — configuration, never a runtime ladder). emergency-stop overrides in every class." .
+
+apscope:statusFreshnessMs a owl:DatatypeProperty ;
+    rdfs:range xsd:integer ;
+    rdfs:label "status freshness (ms)" ;
+    rdfs:comment "Max age of a cached not-revoked answer. 12000 = chain-state's shipped bounded-freshness window (spec 289); 0 = live read per call." .
+
+apscope:mustRetainReceipt a owl:DatatypeProperty ;
+    rdfs:range xsd:boolean ;
+    rdfs:label "must retain receipt" ;
+    rdfs:comment "Whether the verifier MUST retain a spec-303 verification receipt for this class (the article's duty 4; the G-12 liability schema keys off it)." .
+
+apscope:emergencyStopHonored a owl:DatatypeProperty ;
+    rdfs:range xsd:boolean ;
+    rdfs:label "emergency stop honored" ;
+    rdfs:comment "Every conformant verifier honors a principal-published stop assertion regardless of class mode; declared explicitly on verifier profiles for the conformance suite (G-12)." .

package/tbox/security-exposure.ttl

@@ -0,0 +1,102 @@
+# T-box — public-data exposure and penetration-analysis vocabulary.
+# Findings live in restricted A-box graphs (ap:abox:pentest / ap:abox:admin).
+
+@prefix ap:     <https://agenticprimitives.dev/ns/core#> .
+@prefix apsec:  <https://agenticprimitives.dev/ns/security-exposure#> .
+@prefix apdisc: <https://agenticprimitives.dev/ns/discovery#> .
+@prefix rdf:    <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs:   <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:    <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:    <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:   <http://www.w3.org/ns/prov#> .
+@prefix dul:    <http://www.ontologydesignpatterns.org/ont/dul/DUL.owl#> .
+@prefix skos:   <http://www.w3.org/2004/02/skos/core#> .
+
+apsec: a owl:Ontology ;
+  rdfs:label "Agentic Primitives — public exposure ontology" ;
+  owl:versionInfo "0.1.0" ;
+  rdfs:comment "Vocabulary for person/org public-data penetration findings written to restricted knowledge-graph areas." .
+
+apsec:ExposureFinding a owl:Class ;
+  rdfs:subClassOf prov:Entity, dul:Diagnosis ;
+  rdfs:label "ExposureFinding" ;
+  rdfs:comment "A finding generated from public graph/public metadata analysis. Not public by default." .
+
+apsec:CorrelationRisk a owl:Class ;
+  rdfs:subClassOf apsec:ExposureFinding ;
+  rdfs:label "CorrelationRisk" ;
+  rdfs:comment "A public graph path could correlate person, organization, custody, role, geography, endpoint, or operational activity beyond intended disclosure." .
+
+apsec:StaleTrustSignal a owl:Class ;
+  rdfs:subClassOf apsec:ExposureFinding ;
+  rdfs:label "StaleTrustSignal" ;
+  rdfs:comment "A revoked, expired, or stale public signal is still influencing discovery/trust ranking." .
+
+apsec:ProjectionMismatch a owl:Class ;
+  rdfs:subClassOf apsec:ExposureFinding ;
+  rdfs:label "ProjectionMismatch" ;
+  rdfs:comment "An external projection claims a card, endpoint, registry id, or agent anchor that does not match AP evidence." .
+
+apsec:PolicyViolation a owl:Class ;
+  rdfs:subClassOf apsec:ExposureFinding ;
+  rdfs:label "PolicyViolation" ;
+  rdfs:comment "Public facts violate AP disclosure, classification, privacy, or SHACL policy." .
+
+apsec:EndpointExposure a owl:Class ;
+  rdfs:subClassOf apsec:ExposureFinding ;
+  rdfs:label "EndpointExposure" ;
+  rdfs:comment "A public endpoint is exposed without matching signed-card/control proof, expected audience, or policy." .
+
+apsec:severity a owl:ObjectProperty ;
+  rdfs:domain apsec:ExposureFinding ;
+  rdfs:range apsec:Severity ;
+  rdfs:label "severity" .
+
+apsec:Severity a owl:Class ;
+  rdfs:subClassOf skos:Concept ;
+  rdfs:label "Severity" .
+
+apsec:low a apsec:Severity ; skos:prefLabel "low" .
+apsec:medium a apsec:Severity ; skos:prefLabel "medium" .
+apsec:high a apsec:Severity ; skos:prefLabel "high" .
+apsec:critical a apsec:Severity ; skos:prefLabel "critical" .
+
+apsec:findingStatus a owl:ObjectProperty ;
+  rdfs:domain apsec:ExposureFinding ;
+  rdfs:range apsec:FindingStatus ;
+  rdfs:label "findingStatus" .
+
+apsec:FindingStatus a owl:Class ;
+  rdfs:subClassOf skos:Concept ;
+  rdfs:label "FindingStatus" .
+
+apsec:new a apsec:FindingStatus ; skos:prefLabel "new" .
+apsec:triaged a apsec:FindingStatus ; skos:prefLabel "triaged" .
+apsec:falsePositive a apsec:FindingStatus ; skos:prefLabel "false-positive" .
+apsec:acceptedRisk a apsec:FindingStatus ; skos:prefLabel "accepted-risk" .
+apsec:remediated a apsec:FindingStatus ; skos:prefLabel "remediated" .
+
+apsec:detectedBy a owl:DatatypeProperty ;
+  rdfs:domain apsec:ExposureFinding ;
+  rdfs:range xsd:string ;
+  rdfs:label "detectedBy" .
+
+apsec:affectsAgent a owl:ObjectProperty ;
+  rdfs:domain apsec:ExposureFinding ;
+  rdfs:range ap:Agent ;
+  rdfs:label "affectsAgent" .
+
+apsec:basedOnEvidencePath a owl:ObjectProperty ;
+  rdfs:domain apsec:ExposureFinding ;
+  rdfs:range apdisc:EvidencePath ;
+  rdfs:label "basedOnEvidencePath" .
+
+apsec:recommendedAction a owl:DatatypeProperty ;
+  rdfs:domain apsec:ExposureFinding ;
+  rdfs:range xsd:string ;
+  rdfs:label "recommendedAction" .
+
+apsec:adminNote a owl:DatatypeProperty ;
+  rdfs:domain apsec:ExposureFinding ;
+  rdfs:range xsd:string ;
+  rdfs:label "adminNote" .