@agenticprimitives/ontology 1.0.0-alpha.4 → 1.0.0-alpha.41

package/tbox/card-projection.ttl

@@ -0,0 +1,350 @@
+# T-box — canonical agent profile, A2A Agent Card, projection, publication, external identity
+# binding (spec 347 §11; ADR-0062). Lives in the CORE namespace (ap:) as a second module of it;
+# core.ttl declares the ontology node, this file only adds terms.
+#
+# FIVE CONCEPTS, FIVE QUESTIONS — none collapses into another (ADR-0062 §1):
+#   ap:Agent                    who — the ERC-4337 Smart Agent, where authority roots (ADR-0010).
+#                               "Canonical Agent" IN PROSE ≡ ap:Agent. NO ap:CanonicalAgent class
+#                               is minted: two names for one class is the drift the ADR ends. (The
+#                               repo's OWL profile uses no owl:equivalentClass; a comment documents
+#                               the identity instead.)
+#   ap:CanonicalAgentProfile    the registry-neutral facts and claims (was agent-profile.AgentCard).
+#   ap:A2AAgentCard             what this A2A server does and how to interact — an A2A 1.0 resource,
+#                               released immutably (ap:A2AAgentCardRelease), JWS-signed, bound to the
+#                               SA by EIP-712 + ERC-1271. NOT the identity, NOT a registry entry.
+#   ap:ProjectionDefinition /   how selected canonical facts are represented for ONE target; the
+#   ap:ProjectionInstance /     deterministic payload is the ap:ProjectionArtifact, which ALWAYS
+#   ap:ProjectionArtifact       carries a loss report (ap:hasLoss).
+#   ap:Publication              where and when a card/artifact was actually deployed (the receipt).
+#   ap:ExternalIdentityBinding  which external record/identifier represents this agent, bound back
+#                               with a verification state. Evidence, never authority.
+#
+# "FACET" keeps its ADR-0020 meaning — a contextual VIEW — and is NOT used for any of these. The
+# slogan "one agent, many registry facets" is retired for "one canonical agent, many projections,
+# publications and external identity bindings".
+#
+# PROV-O GROUNDING. Generating a projection and publishing it are prov:Activity
+# (ap:ProjectionGeneration, ap:PublicationActivity). The artifact, the profile release and the card
+# release are prov:Entity. The publisher and the adapter are prov:SoftwareAgent; the operator is the
+# ap:Agent that owns the card. Read a record like this:
+#   ex:artifact  a ap:ProjectionArtifact ; prov:wasGeneratedBy ex:gen ; ap:derivedFromSnapshot ex:bundle .
+#   ex:gen       a ap:ProjectionGeneration ; prov:used ex:bundle, ex:def, ex:cardRelease ;
+#                prov:wasAssociatedWith ex:adapter .
+#   ex:pub       a ap:Publication ; prov:wasGeneratedBy ex:pubAct ; ap:establishesBinding ex:binding .
+#   ex:pubAct    a ap:PublicationActivity ; prov:used ex:artifact ; prov:wasAssociatedWith ex:publisher .
+#
+# RELATION TO apreg:SignedAgentCard (tbox/registry.ttl): that class is the Smart-Agent-signed bundle of
+# the CANONICAL PROFILE (spec 347 §0.3 renames the TS type SignedAgentCardBundleV1 →
+# SignedCanonicalProfileBundleV1). It is not the A2A card; the two are related through
+# ap:CanonicalAgentProfile rdfs:seeAlso below.
+
+@prefix ap:    <https://agenticprimitives.dev/ns/core#> .
+@prefix apreg: <https://agenticprimitives.dev/ns/registry#> .
+@prefix aps:   <https://agenticprimitives.dev/ns/skill#> .
+@prefix rdf:   <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs:  <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:   <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:   <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:  <http://www.w3.org/ns/prov#> .
+@prefix skos:  <http://www.w3.org/2004/02/skos/core#> .
+
+# ─── Classes ──────────────────────────────────────────────────────────────
+
+ap:CanonicalAgentProfile a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "CanonicalAgentProfile" ;
+    rdfs:seeAlso apreg:SignedAgentCard ;
+    rdfs:comment "The registry-neutral facts and claims about ONE ap:Agent (the 'canonical agent' — that phrase always means ap:Agent; no separate class exists): names, provider/operator relationships, deployments, public capability claims, taxonomy mappings, trust claims, disclosure policy. TS: CanonicalAgentProfileV1 (formerly agent-profile.AgentCard). Its immutable, content-addressed snapshot is an ap:CanonicalAgentProfileRelease (atl:metadataHash). Not a card, not a registry entry (spec 347 §2)." .
+
+ap:CanonicalAgentProfileRelease a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "CanonicalAgentProfileRelease" ;
+    rdfs:comment "An immutable, content-addressed release of an ap:CanonicalAgentProfile (profileContentHash; on-chain atl:metadataHash). What a card base and a projection input bundle pin, never the mutable profile." .
+
+ap:A2AAgentCard a owl:Class ;
+    rdfs:label "A2AAgentCard" ;
+    rdfs:comment "The managed A2A 1.0 Agent Card resource of one ap:Agent: identity/presentation, supportedInterfaces (ordered; first = preferred), capabilities, skills, media types, security schemes, signatures. TS: A2AAgentCardResourceV1 (the managed object) whose draft carries FieldBindingV1 provenance. A first-class OPERATIONAL description — never the identity (ADR-0010) and never a registry entry (ADR-0062 §2). One production deployment designates ONE primary public card; staging/development cards are never projected into public registries unless explicitly enabled (spec 347 §3)." .
+
+ap:A2AAgentCardRelease a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "A2AAgentCardRelease" ;
+    rdfs:comment "An immutable release of an ap:A2AAgentCard, identified by release id AND content digest (ap:cardDigest over RFC 8785 canonical bytes), signed with a standard A2A JWS (ES256 default) and separately bound to the Smart Agent by EIP-712 SmartAgentCardBindingV1 verified through ERC-1271. Lifecycle: ap:cardReleaseStateScheme. A REVOKED release is not projection-ready; every registry projection consumes a released card, never a draft. TS: A2AAgentCardReleaseV1." .
+
+ap:ProjectionDefinition a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ProjectionDefinition" ;
+    rdfs:comment "The versioned transformation for ONE target family: target specification (pinned by the ap:StandardsLock), adapter + adapter version, input/output schemas, capabilities. A projector is PURE — deterministic, credential- and network-free, and always emits a loss report (ADR-0062 §5). TS: ProjectionDefinitionV1 (registry-kit/projection)." .
+
+ap:ProjectionInstance a owl:Class ;
+    rdfs:label "ProjectionInstance" ;
+    rdfs:comment "One CONFIGURED projection per agent × target: which ap:ProjectionDefinition, which released card, which configuration. Lifecycle: ap:projectionInstanceStateScheme (unconfigured → … → published → drifted | stale | failed | retired). A remote change produces an IMPORT PROPOSAL, never a canonical write (spec 347 §6.4)." .
+
+ap:ProjectionArtifact a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ProjectionArtifact" ;
+    rdfs:comment "The deterministic payload a projector emitted for one ap:ProjectionInstance, plus its digests, diagnostics and LOSS REPORT (ap:hasLoss). Carries all EIGHT digests (source bundle, definition, target specification, adapter, configuration, artifact, canonical profile, selected card) — ap:ProjectionProvenanceShape refuses one that omits any. prov:wasGeneratedBy an ap:ProjectionGeneration. Marked public (ap:disclosureScope 'public') it must carry no private endpoint and no vault reference (ap:PublicDisclosureBoundaryShape). TS: ProjectionResultV1.artifact (+ digests)." .
+
+ap:ProjectionLoss a owl:Class ;
+    rdfs:label "ProjectionLoss" ;
+    rdfs:comment "One thing the target could not represent faithfully: category from ap:lossCategoryScheme (unsupported | truncated | approximateMapping | omittedByPolicy | targetDefault | manualActionRequired), severity, source/target pointers, explanation. A projection with no losses says so with an EMPTY report, never by omitting the report. TS: ProjectionLossV1." .
+
+ap:Publication a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Publication" ;
+    rdfs:comment "The RECORD of an effectful deployment of a card release or projection artifact: where (uri / transactions / external ids), when, verified how. prov:wasGeneratedBy an ap:PublicationActivity that was approval-gated (ApprovalRefV1 names the exact digest approved), idempotent and audited. TS: PublicationReceiptV1. Publishing is the ONLY effectful step; it never rewrites the canonical record." .
+
+ap:StandardsLock a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "StandardsLock" ;
+    rdfs:comment "The machine-readable pin of every target specification version + digest (docs/standards-lock.json; TS StandardsLockV1). A lock change marks dependent projections review-required — it never rewrites them silently (ADR-0062 §6)." .
+
+ap:ExternalIdentityBinding a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ExternalIdentityBinding" ;
+    rdfs:comment "An external record/identifier (an ERC-8004 entry, an HCS topic, an ANS name, an OASF record…) that REPRESENTS one ap:Agent, bound back to the canonical id with a verification state (ap:bindingVerificationStateScheme) and a lifecycle (ap:bindingLifecycleStateScheme: pendingVerification → active → stale | suspended | superseded | revoked). The external id is a POINTER AT the canonical address, never the identity (ADR-0010). Evidence, never authority. TS: ExternalIdentityBindingV1." .
+
+ap:NamingBinding a owl:Class ;
+    rdfs:subClassOf ap:ExternalIdentityBinding ;
+    rdfs:label "NamingBinding" ;
+    rdfs:comment "The first-party binding the AP Naming projection establishes: a name record set (a2aEndpoint, metadataUri/Hash, atl:agentType) plus atl:cardDigest pointing at the released card (spec 347 §8.3). The name stays a facet pointing AT the SA — no second record type (§0.4)." .
+
+# ─── PROV-O activities and agents ─────────────────────────────────────────
+
+ap:ProjectionGeneration a owl:Class ;
+    rdfs:subClassOf prov:Activity ;
+    rdfs:label "ProjectionGeneration" ;
+    rdfs:comment "The pure activity that produced an ap:ProjectionArtifact. prov:used the input bundle, the definition and the selected card release; prov:wasAssociatedWith the ap:ProjectionAdapter. No credential, no network — if it needed either, it was not a projection." .
+
+ap:PublicationActivity a owl:Class ;
+    rdfs:subClassOf prov:Activity ;
+    rdfs:label "PublicationActivity" ;
+    rdfs:comment "The effectful, approval-gated activity that deployed an artifact or card release and generated an ap:Publication. prov:used the artifact; prov:wasAssociatedWith the ap:Publisher (and, through the approval, the approving ap:Agent). Editor ≠ approver ≠ signer ≠ publisher (ADR-0062 §7)." .
+
+ap:ProjectionAdapter a owl:Class ;
+    rdfs:subClassOf prov:SoftwareAgent ;
+    rdfs:label "ProjectionAdapter" ;
+    rdfs:comment "The software that implements one ap:ProjectionDefinition (a projector, optionally paired with a publisher). First-party adapters (AP Registry, AP Naming) live in Ring 0; every external adapter lives in the sibling repo agent-projections (ADR-0037). Named by ap:hasAdapterVersion." .
+
+ap:Publisher a owl:Class ;
+    rdfs:subClassOf prov:SoftwareAgent ;
+    rdfs:label "Publisher" ;
+    rdfs:comment "The server-side software that performs an ap:PublicationActivity: credential-REFERENCE based (key-custody), idempotent, dry-run capable, audited. It holds no stored registry credential of its own (ADR-0062 refused alternatives)." .
+
+# ─── Properties ───────────────────────────────────────────────────────────
+
+ap:describesAgent a owl:ObjectProperty ;
+    rdfs:range ap:Agent ;
+    rdfs:label "describesAgent" ;
+    rdfs:comment "Profile / card / artifact / binding → the ONE canonical ap:Agent it is about. Every one of these nodes points AT the SA; none of them IS it (ADR-0010)." .
+
+ap:hasAgentCard a owl:ObjectProperty ;
+    rdfs:domain ap:Agent ; rdfs:range ap:A2AAgentCard ;
+    rdfs:label "hasAgentCard" ;
+    rdfs:comment "Agent → its card resources (0..n). Separate cards only for a materially different deployment, audience, security boundary, skill set or persona (spec 347 §3)." .
+
+ap:primaryPublicCard a owl:ObjectProperty ;
+    rdfs:subPropertyOf ap:hasAgentCard ;
+    rdfs:domain ap:Agent ; rdfs:range ap:A2AAgentCard ;
+    rdfs:label "primaryPublicCard" ;
+    rdfs:comment "The ONE card a production deployment designates as primary and public." .
+
+ap:hasRelease a owl:ObjectProperty ;
+    rdfs:label "hasRelease" ;
+    rdfs:comment "Card → its immutable releases; profile → its releases. Superseding never erases (spec 347 §3)." .
+
+ap:releaseOf a owl:ObjectProperty ;
+    owl:inverseOf ap:hasRelease ;
+    rdfs:label "releaseOf" .
+
+ap:supersedesRelease a owl:ObjectProperty ;
+    rdfs:label "supersedesRelease" ;
+    rdfs:comment "Release → the release it replaces. A revoked release records reason, authority, date and successor." .
+
+ap:derivedFromSnapshot a owl:ObjectProperty ;
+    rdfs:range prov:Entity ;
+    rdfs:label "derivedFromSnapshot" ;
+    rdfs:comment "Card release / artifact → the IMMUTABLE snapshot it was computed from (a profile release, a card release, a projection input bundle). 'current' / 'latest' are forbidden here for the same reason apix:ContextSnapshotShape forbids them: a floating pointer makes the record unreplayable." .
+
+ap:usesProjectionDefinition a owl:ObjectProperty ;
+    rdfs:domain ap:ProjectionInstance ; rdfs:range ap:ProjectionDefinition ;
+    rdfs:label "usesProjectionDefinition" .
+
+ap:usesCardRelease a owl:ObjectProperty ;
+    rdfs:domain ap:ProjectionInstance ; rdfs:range ap:A2AAgentCardRelease ;
+    rdfs:label "usesCardRelease" ;
+    rdfs:comment "The SPECIFIC released card this instance projects — never a draft." .
+
+ap:generatedArtifact a owl:ObjectProperty ;
+    rdfs:domain ap:ProjectionInstance ; rdfs:range ap:ProjectionArtifact ;
+    rdfs:label "generatedArtifact" .
+
+ap:projectsTo a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "projectsTo" ;
+    rdfs:comment "Definition / instance / artifact → the target FAMILY it is for ('ap-registry', 'ap-naming', 'a2a-well-known', 'oasf', 'erc8004', 'hcs11', 'hcs14', 'ans', …). A string on purpose: target families are pinned by the StandardsLock, not modelled as Ring-0 classes (ADR-0038)." .
+
+ap:hasTargetSpecification a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "hasTargetSpecification" ;
+    rdfs:comment "Definition / artifact → the pinned target specification id + version ('oasf@1.1.0', 'a2a@1.0.0'); resolvable in the ap:StandardsLock." .
+
+ap:hasAdapterVersion a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "hasAdapterVersion" ;
+    rdfs:comment "Definition / artifact → the adapter name@version that produced it. An adapter upgrade makes an instance adapter-stale (review-required), never silently regenerated." .
+
+ap:hasLoss a owl:ObjectProperty ;
+    rdfs:domain ap:ProjectionArtifact ; rdfs:range ap:ProjectionLoss ;
+    rdfs:label "hasLoss" ;
+    rdfs:comment "Artifact → each loss in its report. Zero losses is an empty set on a node that still exists as an artifact, not a missing report." .
+
+ap:lossCategory a owl:DatatypeProperty ;
+    rdfs:domain ap:ProjectionLoss ; rdfs:range xsd:string ;
+    rdfs:label "lossCategory" ;
+    rdfs:comment "An ap:lossCategoryScheme prefLabel (cbox/controlled-vocabularies.ttl)." .
+
+ap:lossSeverity a owl:DatatypeProperty ;
+    rdfs:domain ap:ProjectionLoss ; rdfs:range xsd:string ;
+    rdfs:label "lossSeverity" .
+
+ap:lossExplanation a owl:DatatypeProperty ;
+    rdfs:domain ap:ProjectionLoss ; rdfs:range xsd:string ;
+    rdfs:label "lossExplanation" .
+
+ap:sourcePointer a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "sourcePointer" ;
+    rdfs:comment "RFC 6901 JSON Pointer into the SOURCE document (card / input bundle)." .
+
+ap:targetPointer a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "targetPointer" ;
+    rdfs:comment "JSON Pointer into the target artifact." .
+
+ap:publishedAs a owl:ObjectProperty ;
+    rdfs:range ap:Publication ;
+    rdfs:label "publishedAs" ;
+    rdfs:comment "Card release / artifact → the publication(s) that deployed it. One artifact may be published more than once (a retry, a second registry); each publication is its own receipt." .
+
+ap:publishedArtifact a owl:ObjectProperty ;
+    rdfs:domain ap:Publication ;
+    rdfs:label "publishedArtifact" ;
+    rdfs:comment "Publication → the artifact or card release it deployed (the digest named in ap:hasArtifactDigest is what was actually sent)." .
+
+ap:establishesBinding a owl:ObjectProperty ;
+    rdfs:domain ap:Publication ; rdfs:range ap:ExternalIdentityBinding ;
+    rdfs:label "establishesBinding" ;
+    rdfs:comment "Publication → the external identity binding(s) it created or refreshed. A binding born here starts pendingVerification; the publisher's re-fetch moves it." .
+
+ap:bindsExternalIdentity a owl:ObjectProperty ;
+    rdfs:domain ap:Agent ; rdfs:range ap:ExternalIdentityBinding ;
+    rdfs:label "bindsExternalIdentity" ;
+    rdfs:comment "Agent → the external identities that represent it (0..n). Read with ap:describesAgent on the binding (the inverse direction) — both point the same way: external id AT canonical agent." .
+
+ap:targetFamily a owl:DatatypeProperty ;
+    rdfs:domain ap:ExternalIdentityBinding ; rdfs:range xsd:string ;
+    rdfs:label "targetFamily" ;
+    rdfs:comment "The target family the external id lives in (same value space as ap:projectsTo)." .
+
+ap:targetRegistry a owl:DatatypeProperty ;
+    rdfs:domain ap:ExternalIdentityBinding ; rdfs:range xsd:string ;
+    rdfs:label "targetRegistry" ;
+    rdfs:comment "The specific registry / network within the family (a contract address, a topic id, a zone)." .
+
+ap:externalId a owl:DatatypeProperty ;
+    rdfs:domain ap:ExternalIdentityBinding ; rdfs:range xsd:string ;
+    rdfs:label "externalId" ;
+    rdfs:comment "The external record identifier. A pointer AT the SA — never the identity." .
+
+ap:verificationState a owl:DatatypeProperty ;
+    rdfs:domain ap:ExternalIdentityBinding ; rdfs:range xsd:string ;
+    rdfs:label "verificationState" ;
+    rdfs:comment "An ap:bindingVerificationStateScheme prefLabel: unverified | verified | failed. Unverified is RECORDED, never read as verified." .
+
+ap:verificationMethod a owl:DatatypeProperty ;
+    rdfs:domain ap:ExternalIdentityBinding ; rdfs:range xsd:string ;
+    rdfs:label "verificationMethod" .
+
+ap:verifiedAt a owl:DatatypeProperty ;
+    rdfs:range xsd:dateTime ;
+    rdfs:label "verifiedAt" .
+
+ap:lifecycleState a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "lifecycleState" ;
+    rdfs:comment "The subject's lifecycle state; the value space depends on the class: ap:cardReleaseStateScheme (card release), ap:projectionInstanceStateScheme (instance), ap:bindingLifecycleStateScheme (binding)." .
+
+ap:disclosureScope a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "disclosureScope" ;
+    rdfs:comment "'public' | 'private'. A card or artifact marked public is subject to ap:PublicDisclosureBoundaryShape. ABSENCE IS PRIVATE — no shape reads a missing scope as public." .
+
+ap:cardDigest a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "cardDigest" ;
+    rdfs:comment "sha256:<hex> of the released card's RFC 8785 canonical bytes. Also the value the AP Naming projection writes as atl:cardDigest, and the value the well-known publisher's re-fetch must reproduce (ADR-0059 live-truth check)." .
+
+ap:cardUri a owl:DatatypeProperty ;
+    rdfs:range xsd:anyURI ;
+    rdfs:label "cardUri" ;
+    rdfs:comment "Where the released card is served (the /.well-known/agent-card.json URL). On a PUBLIC card or artifact it must be a public address: loopback, private-range, link-local and *.local/*.internal hosts are refused." .
+
+ap:cardName a owl:DatatypeProperty ;
+    rdfs:domain ap:A2AAgentCard ; rdfs:range xsd:string ;
+    rdfs:label "cardName" ;
+    rdfs:comment "The A2A card's human-readable name (A2A 1.0 AgentCard.name)." .
+
+ap:protocolVersion a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "protocolVersion" ;
+    rdfs:comment "The A2A protocol version the card conforms to (A2A 1.0 AgentCard.protocolVersion)." .
+
+ap:interfaceUrl a owl:DatatypeProperty ;
+    rdfs:range xsd:anyURI ;
+    rdfs:label "interfaceUrl" ;
+    rdfs:comment "One entry of the card's supportedInterfaces (its URL). The ORDER (first = preferred) is a property of the released JSON, not of this graph; the graph records the set." .
+
+ap:interfaceTransport a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "interfaceTransport" ;
+    rdfs:comment "The transport of one supported interface (JSONRPC | HTTP+JSON | GRPC …)." .
+
+# ─── The eight digests (spec 347 §6.4 'every artifact records the eight digests') ──
+# MODELLING CHOICE: eight named DATATYPE sub-properties of one abstract ap:hasDigest, rather than a
+# reified digest node with a role. The shape needs 'minCount 1 for each of eight roles', and eight
+# sh:property blocks say that in SHACL-Core with no SPARQL; a role-node model would need a
+# qualifiedValueShape per role and read worse. The roles ALSO exist as a codelist
+# (ap:digestRoleScheme) so a reified form can be mapped to these if a store prefers it.
+
+ap:hasDigest a owl:DatatypeProperty ;
+    rdfs:range xsd:string ;
+    rdfs:label "hasDigest" ;
+    rdfs:comment "Abstract parent of the eight artifact digests. Values are 'sha256:<64 hex>'. Never used directly on an artifact — the sub-property names the role." .
+
+ap:hasSourceDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasSourceDigest" ;
+    rdfs:comment "Digest of the ProjectionInputBundleV1 the artifact was computed from." .
+ap:hasDefinitionDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasDefinitionDigest" ;
+    rdfs:comment "Digest of the ap:ProjectionDefinition used." .
+ap:hasTargetSpecificationDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasTargetSpecificationDigest" ;
+    rdfs:comment "Digest of the pinned target specification (from the ap:StandardsLock)." .
+ap:hasAdapterDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasAdapterDigest" ;
+    rdfs:comment "Digest identifying the adapter build (name@version + code digest)." .
+ap:hasConfigurationDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasConfigurationDigest" ;
+    rdfs:comment "Digest of the instance configuration." .
+ap:hasArtifactDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasArtifactDigest" ;
+    rdfs:comment "Digest of the emitted payload — what a Publication actually sent and what an approval names." .
+ap:hasCanonicalProfileDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasCanonicalProfileDigest" ;
+    rdfs:comment "Digest of the ap:CanonicalAgentProfileRelease in the input bundle." .
+ap:hasSelectedCardDigest a owl:DatatypeProperty ; rdfs:subPropertyOf ap:hasDigest ; rdfs:range xsd:string ;
+    rdfs:label "hasSelectedCardDigest" ;
+    rdfs:comment "ap:cardDigest of the released card the projection consumed." .
+
+# ─── Taxonomy mappings live in skills.ttl (aps:SkillTaxonomyMapping); referenced here ──
+ap:CanonicalAgentProfile rdfs:seeAlso aps:SkillTaxonomyMapping .

package/tbox/constraints.ttl

@@ -0,0 +1,150 @@
+# T-box — constraint + assumption vocabulary (spine Layer 3).
+# Anoma CSP-shaped + ERC-7683 resolver-assumption pattern.
+# Spec 225 §11.5; D-38 + D-39 + D-43.
+# Owning runtime SHACL: packages/intent-marketplace/src/shapes/constraints.shacl.ttl.
+
+@prefix ap:     <https://agenticprimitives.dev/ns/core#> .
+@prefix apcst:  <https://agenticprimitives.dev/ns/constraint#> .
+@prefix apint:  <https://agenticprimitives.dev/ns/intent#> .
+@prefix rdfs:   <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:    <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:    <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:   <http://www.w3.org/ns/prov#> .
+
+apcst: a owl:Ontology ;
+    rdfs:label "Agentic Primitives — constraint + assumption ontology" ;
+    owl:versionInfo "0.1.0" ;
+    rdfs:comment "First-class typed constraints (Anoma CSP-shape) + resolver-assumption set (ERC-7683 parallel). Spec 225 §11.5." .
+
+# ─── ConstraintSet classes ────────────────────────────────────────────
+
+apcst:ConstraintSet a owl:Class ;
+    rdfs:label "ConstraintSet" ;
+    rdfs:comment "A typed bag of Constraints (hard + soft) + per-field DisclosurePolicy. CSP-shaped. NOT freeform payload (D-38)." .
+
+apcst:Constraint a owl:Class ;
+    rdfs:label "Constraint" ;
+    rdfs:comment "A single typed constraint: variable + domain + source + rationale. Discriminated by domain.kind." .
+
+apcst:HardConstraint a owl:Class ;
+    rdfs:subClassOf apcst:Constraint ;
+    rdfs:label "HardConstraint" ;
+    rdfs:comment "Enforceable invariant; matchmaker MUST reject if violated." .
+
+apcst:SoftConstraint a owl:Class ;
+    rdfs:subClassOf apcst:Constraint ;
+    rdfs:label "SoftConstraint" ;
+    rdfs:comment "Scorer preference; contributes to composite score (per spec 239 §7.2)." .
+
+# ─── Constraint domain classes (CSP-shaped) ───────────────────────────
+
+apcst:ConstraintDomain a owl:Class ;
+    rdfs:label "ConstraintDomain" ;
+    rdfs:comment "Abstract CSP domain. Subclasses: EnumDomain, RangeDomain, SetDomain, PredicateDomain." .
+
+apcst:EnumDomain a owl:Class ;
+    rdfs:subClassOf apcst:ConstraintDomain ;
+    rdfs:label "EnumDomain" ;
+    rdfs:comment "Constraint domain over a fixed enumeration of allowed string values." .
+
+apcst:RangeDomain a owl:Class ;
+    rdfs:subClassOf apcst:ConstraintDomain ;
+    rdfs:label "RangeDomain" ;
+    rdfs:comment "Constraint domain over a numeric/temporal range [min, max] in a named unit." .
+
+apcst:SetDomain a owl:Class ;
+    rdfs:subClassOf apcst:ConstraintDomain ;
+    rdfs:label "SetDomain" ;
+    rdfs:comment "Constraint domain over an allowed-set (optionally with a denied-set)." .
+
+apcst:PredicateDomain a owl:Class ;
+    rdfs:subClassOf apcst:ConstraintDomain ;
+    rdfs:label "PredicateDomain" ;
+    rdfs:comment "Constraint domain expressed as a SHACL or JSONPath predicate body." .
+
+# ─── AssumptionSet classes (ERC-7683 parallel) ────────────────────────
+
+apcst:AssumptionSet a owl:Class ;
+    rdfs:label "AssumptionSet" ;
+    rdfs:comment "Resolver-asserted assumptions + risks + required validations. Solvers MUST validate before bidding. ERC-7683 pattern." .
+
+apcst:NamedAssumption a owl:Class ;
+    rdfs:label "NamedAssumption" ;
+    rdfs:comment "A specific resolver assumption: name + trustLevel + optional evidence ref." .
+
+apcst:ValidationRequirement a owl:Class ;
+    rdfs:label "ValidationRequirement" ;
+    rdfs:comment "Something that MUST be validated before commitment / payment / fulfillment. Links to Layer 14 (Validation)." .
+
+# ─── Properties ───────────────────────────────────────────────────────
+
+apcst:variable a owl:DatatypeProperty ;
+    rdfs:domain apcst:Constraint ;
+    rdfs:range xsd:string ;
+    rdfs:label "variable" ;
+    rdfs:comment "The CSP variable name (e.g. 'geo', 'requiredCredential', 'capacity')." .
+
+apcst:domain a owl:ObjectProperty ;
+    rdfs:domain apcst:Constraint ;
+    rdfs:range apcst:ConstraintDomain ;
+    rdfs:label "domain" .
+
+apcst:source a owl:DatatypeProperty ;
+    rdfs:domain apcst:Constraint ;
+    rdfs:range xsd:string ;
+    rdfs:label "source" ;
+    rdfs:comment "Constraint source provenance (D-43): 'user-asserted' | 'llm-inferred' | 'policy-imposed'. Inferred + sensitive constraints redactable before publication." .
+
+apcst:rationale a owl:DatatypeProperty ;
+    rdfs:domain apcst:Constraint ;
+    rdfs:range xsd:string ;
+    rdfs:label "rationale" ;
+    rdfs:comment "Human-readable explanation (esp. for llm-inferred / policy-imposed constraints)." .
+
+apcst:strength a owl:DatatypeProperty ;
+    rdfs:domain apcst:Constraint ;
+    rdfs:range xsd:string ;
+    rdfs:label "strength" ;
+    rdfs:comment "'hard' | 'soft' — discriminator for HardConstraint vs SoftConstraint subclassing." .
+
+apcst:enforcement a owl:DatatypeProperty ;
+    rdfs:domain apcst:Constraint ;
+    rdfs:range xsd:string ;
+    rdfs:label "enforcement" ;
+    rdfs:comment "Where the constraint is enforced: 'pre-execution' | 'agreement' | 'ranking' (per AI-engagement-model semantic-caveats pattern)." .
+
+apcst:fieldDisclosure a owl:DatatypeProperty ;
+    rdfs:domain apcst:ConstraintSet ;
+    rdfs:range xsd:string ;
+    rdfs:label "fieldDisclosure" ;
+    rdfs:comment "JSON-encoded { fieldPath → VisibilityTier } map. Per-field DisclosurePolicy (D-42)." .
+
+apcst:resolverId a owl:DatatypeProperty ;
+    rdfs:domain apcst:AssumptionSet ;
+    rdfs:range xsd:string ;
+    rdfs:label "resolverId" ;
+    rdfs:comment "The Resolver agent's identifier (version-pinned)." .
+
+apcst:trustLevel a owl:DatatypeProperty ;
+    rdfs:domain apcst:NamedAssumption ;
+    rdfs:range xsd:string ;
+    rdfs:label "trustLevel" ;
+    rdfs:comment "'asserted' | 'verified' | 'oracle' | 'zkp'." .
+
+apcst:risk a owl:DatatypeProperty ;
+    rdfs:domain apcst:NamedAssumption ;
+    rdfs:range xsd:string ;
+    rdfs:label "risk" ;
+    rdfs:comment "Human-readable risk tag (e.g. 'inventory', 'sla', 'merchant-trust')." .
+
+apcst:evidenceRef a owl:ObjectProperty ;
+    rdfs:domain apcst:NamedAssumption ;
+    rdfs:range prov:Entity ;
+    rdfs:label "evidenceRef" ;
+    rdfs:comment "Optional pointer to a VC / attestation backing the assumption." .
+
+apcst:expiresAt a owl:DatatypeProperty ;
+    rdfs:domain apcst:NamedAssumption ;
+    rdfs:range xsd:dateTime ;
+    rdfs:label "expiresAt" ;
+    rdfs:comment "Assumption validity expiration. Downstream consumers MUST recheck if expired." .

package/tbox/contact.ttl

@@ -0,0 +1,61 @@
+# T-box — the PRIVATE contact profile (spec 371 §2.2: a record edit is shaped by the record).
+#
+# What this module owns: the person's own contact record — name, email, telephone, organization and a
+# postal address — held in THEIR vault (`vault:impact-profile`, sealed under their own KEK) and shared only
+# with apps they have granted. It is NOT the public profile facet (approf:, on chain, world-readable) and
+# NOT the naming record (apnam:). Three records answer to the word "profile"; this is the private one.
+#
+# Why it exists as a T-box: the fields a person may change by asking ("set street address to …") are read
+# FROM this declaration — the Ask's edit tool, the record's write allow-list and the contract's inputs are
+# all projections of these properties. Before this file the fields lived in three hand-kept lists, and
+# "street address" was in none of them: the agent could change a name and not an address, and said so.
+#
+# Local names follow schema.org's PostalAddress / Person vocabulary so a reader recognises them; the IRIs
+# are ours, because the record is ours. Never projected to the discovery KB (ADR-0040: PII).
+
+@prefix apcon: <https://agenticprimitives.dev/ns/contact#> .
+@prefix ap:    <https://agenticprimitives.dev/ns/core#> .
+@prefix rdf:   <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs:  <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:   <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:   <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:  <http://www.w3.org/ns/prov#> .
+
+apcon: a owl:Ontology ;
+  rdfs:label "Agentic Primitives — private contact profile" ;
+  owl:versionInfo "0.1.0" ;
+  rdfs:comment "The person's own contact record, in their own vault. Private tier; never on chain, never in the discovery KB." .
+
+apcon:ContactProfile a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "ContactProfile" ;
+  rdfs:comment "ONE person's private contact record: how they are named, reached and where they are. Owner-written; read by apps under a granted scope. Not the public AgentProfile facet, not the naming record." .
+
+apcon:givenName a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "first name" ;
+  rdfs:comment "The person's given name, as they write it. Not the agent's public display name." .
+apcon:familyName a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "last name" ;
+  rdfs:comment "The person's family name." .
+apcon:email a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "email" ;
+  rdfs:comment "Where their mail goes. A wrong one is worse than none." .
+apcon:telephone a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "phone" ;
+  rdfs:comment "A telephone number, as written." .
+apcon:organizationName a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "organization" ;
+  rdfs:comment "The organization they say they work with — words, not a link to an OrganizationAgent." .
+apcon:organizationCountry a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "organization country" ;
+  rdfs:comment "Where that organization is." .
+
+# ── The postal address, at the precision the person chose to share ──────────────────────────────────
+apcon:streetAddress a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "street address" ;
+  rdfs:comment "Street and number (\"2445 Walters Drive\"). Sharing it means the record's precision is 'address'." .
+apcon:streetAddressLine2 a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "address line 2" ;
+  rdfs:comment "Apartment, suite, unit." .
+apcon:addressLocality a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "city" ;
+  rdfs:comment "City, town or equivalent locality." .
+apcon:addressRegion a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "state or province" ;
+  rdfs:comment "State, province or equivalent region." .
+apcon:postalCode a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "postal code" ;
+  rdfs:comment "Postal or ZIP code." .
+apcon:addressCountry a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "country" ;
+  rdfs:comment "The country of the address — the coarsest precision, and required for any finer one." .
+apcon:locationPrecision a owl:DatatypeProperty ; rdfs:domain apcon:ContactProfile ; rdfs:range xsd:string ; rdfs:label "location precision" ;
+  rdfs:comment "How much of the address the person chose to share: country | region | locality | address. Derived from what is filled; never finer than what they gave." .

package/tbox/content.ttl

@@ -0,0 +1,76 @@
+# T-box — generic verifiable-content substrate (spec 266). Names, resolves, and
+# verifies CONTENT that lives off-platform and is controlled by third-party rights
+# holders. NEUTRAL substrate — NO domain/faith/vertical vocabulary (ADR-0033 R4).
+#
+# FRBR-aligned: CanonicalLocus = Work (edition-independent coordinate, scheme-
+# anchored, never an Agent); CorpusManifest = Expression/Manifestation (issuer-
+# owned, committed); ContentDescriptor = Item (the deliverable leaf — points AT
+# off-chain text, NEVER contains it; ADR-0033 R3).
+
+@prefix apcnt: <https://agenticprimitives.dev/ns/content#> .
+@prefix ap:    <https://agenticprimitives.dev/ns/core#> .
+@prefix rdf:   <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs:  <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:   <http://www.w3.org/2002/07/owl#> .
+
+apcnt:CanonicalLocus a rdfs:Class ;
+    rdfs:label "CanonicalLocus" ;
+    rdfs:comment "FRBR Work. An edition-independent coordinate into a structured corpus (a passage address). Identified by a deterministic locusId computed from a normalized (scheme, path) reference. SCHEME-anchored: never registered, never an Agent, has no owner (ADR-0033)." .
+
+apcnt:CorpusManifest a rdfs:Class ;
+    rdfs:label "CorpusManifest" ;
+    rdfs:comment "FRBR Expression/Manifestation. A versioned body of renderings published by an issuer Smart Agent, committed by a Merkle corpusRoot + a signed manifestHash. Public anchor; the rendering text stays off-platform." .
+
+apcnt:ContentDescriptor a rdfs:Class ;
+    rdfs:label "ContentDescriptor" ;
+    rdfs:comment "FRBR Item. The deliverable trust leaf for one (corpus, locus): commitment + retrievalPointer + issuer signature + access policy. Points AT off-chain text; NEVER contains it (ADR-0033 R3). Trust = issuer signature, not platform claim (R5)." .
+
+apcnt:CitationAssertion a rdfs:Class ;
+    rdfs:label "CitationAssertion" ;
+    rdfs:comment "A provenance credential: a party cited a locus from a corpus, the rendering commitment matched, under a given entitlement. The AI-safe citation record (W3C VC 2.0 + PROV-O)." .
+
+apcnt:Entitlement a rdfs:Class ;
+    rdfs:label "Entitlement" ;
+    rdfs:comment "A credential asserting a subject Smart Agent may access a corpus under stated terms. Gates the resolve/retrieve path for licensed/private corpora; optional for public ones." .
+
+apcnt:locusOf a rdf:Property ; rdfs:domain apcnt:ContentDescriptor ; rdfs:range apcnt:CanonicalLocus ;
+    rdfs:comment "The CanonicalLocus (by locusId) this descriptor renders." .
+apcnt:renderedBy a rdf:Property ; rdfs:domain apcnt:ContentDescriptor ; rdfs:range apcnt:CorpusManifest ;
+    rdfs:comment "The CorpusManifest (by corpusRef) this descriptor belongs to." .
+apcnt:commitsTo a rdf:Property ; rdfs:domain apcnt:ContentDescriptor ;
+    rdfs:comment "keccak256 of the canonicalized off-chain rendering text. Binds the descriptor to a specific rendering WITHOUT revealing it." .
+apcnt:retrievalPointer a rdf:Property ; rdfs:domain apcnt:ContentDescriptor ;
+    rdfs:comment "A URI/locator for the off-chain rendering text. NEVER the text itself (ADR-0033 R3)." .
+apcnt:corpusRoot a rdf:Property ; rdfs:domain apcnt:CorpusManifest ;
+    rdfs:comment "Merkle root over the per-locus descriptor commitments of the corpus." .
+apcnt:issuedBy a rdf:Property ; rdfs:domain apcnt:CorpusManifest ; rdfs:range ap:CanonicalAgentId ;
+    rdfs:comment "The issuer Smart Agent (Address) that published + signed the corpus/descriptors." .
+apcnt:accessPolicy a rdf:Property ;
+    rdfs:comment "An apcnt:accessPolicy value (C-box codelist): public | licensed | private." .
+apcnt:proofPolicy a rdf:Property ;
+    rdfs:comment "An apcnt:proofPolicy value (C-box codelist): signature | merkle-inclusion | zk." .
+apcnt:citesLocus a rdf:Property ; rdfs:domain apcnt:CitationAssertion ; rdfs:range apcnt:CanonicalLocus .
+apcnt:underEntitlement a rdf:Property ; rdfs:domain apcnt:CitationAssertion ; rdfs:range apcnt:Entitlement .
+
+# ── Spec 413 — a PUBLISHED WORK, as the discovery knowledge base holds it (ADR-0040 amendment 2026-09-24). ──
+# A document its owner made public on her Library's shelf (spec 412) AND released with her signature, projected by the
+# indexer after it verified both, from the owner's on-chain A2A endpoint. A CACHE of an owner-published, signed,
+# world-readable artifact — never the record (the record is in her vault) and never evidence of anything beyond "this
+# text was served publicly under this signed release at observedAt". Withdrawn on the next observation that fails.
+apcnt:PublishedWork a rdfs:Class ;
+    rdfs:label "PublishedWork" ;
+    rdfs:comment "A public, owner-released Library document projected into the discovery KB (spec 413). Owner-published, provenance-typed, stale-allowed; NOT a private record, NOT authority." .
+apcnt:publisher a rdf:Property ; rdfs:domain apcnt:PublishedWork ;
+    rdfs:comment "The owner Smart Agent (Address) whose shelf serves the work and whose signature the release carries." .
+apcnt:title a rdf:Property ; rdfs:domain apcnt:PublishedWork ;
+    rdfs:comment "The document's name on the owner's shelf." .
+apcnt:releaseId a rdf:Property ; rdfs:domain apcnt:PublishedWork ;
+    rdfs:comment "The release id (spec 335 §6) the owner signed; reproduces from the content core." .
+apcnt:contentCommitment a rdf:Property ; rdfs:domain apcnt:PublishedWork ;
+    rdfs:comment "sha256 of the served bytes — equal to the release's committed root when projected." .
+apcnt:sourceEndpoint a rdf:Property ; rdfs:domain apcnt:PublishedWork ;
+    rdfs:comment "The owner's A2A interface the work was read from (resolved from the owner's on-chain a2aEndpoint)." .
+apcnt:observedAt a rdf:Property ; rdfs:domain apcnt:PublishedWork ;
+    rdfs:comment "When the indexer last read and verified the work (ISO 8601). A row is a cache as of this time." .
+apcnt:vectorId a rdf:Property ; rdfs:domain apcnt:PublishedWork ;
+    rdfs:comment "The id of one retrieval passage (Vectorize) derived from the work — how a withdrawal removes exactly what was written." .