@agenticprimitives/ontology 1.0.0-alpha.4 → 1.0.0-alpha.41

package/cbox/discovery-graph-shapes.shacl.ttl

@@ -0,0 +1,284 @@
+# C-box — SHACL shapes for discovery A-box projections.
+# These are graph-ingestion shapes for public discovery data and restricted
+# penetration findings. They are not authority checks.
+
+@prefix ap:      <https://agenticprimitives.dev/ns/core#> .
+@prefix apdisc:  <https://agenticprimitives.dev/ns/discovery#> .
+@prefix apreg:   <https://agenticprimitives.dev/ns/registry#> .
+@prefix apsec:   <https://agenticprimitives.dev/ns/security-exposure#> .
+@prefix aptrust: <https://agenticprimitives.dev/ns/trust#> .
+@prefix prov:    <http://www.w3.org/ns/prov#> .
+@prefix sh:      <http://www.w3.org/ns/shacl#> .
+@prefix rdfs:    <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix xsd:     <http://www.w3.org/2001/XMLSchema#> .
+
+apreg:RegistryEntryShape a sh:NodeShape ;
+  rdfs:label "RegistryEntry shape" ;
+  sh:targetClass apreg:RegistryEntry ;
+  sh:property [
+    sh:path apreg:registryId ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:datatype xsd:string ;
+    sh:message "RegistryEntry must have exactly one registryId."
+  ] ;
+  sh:property [
+    sh:path apreg:entryId ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:datatype xsd:string ;
+    sh:message "RegistryEntry must have exactly one entryId."
+  ] ;
+  sh:property [
+    sh:path apreg:subjectAgent ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:class ap:Agent ;
+    sh:message "RegistryEntry must point to exactly one Smart Agent subject."
+  ] ;
+  sh:property [
+    sh:path apreg:cardHash ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:datatype xsd:string ;
+    sh:pattern "^sha256:[0-9a-fA-F]{64}$" ;
+    sh:message "RegistryEntry.cardHash must be sha256:<64 hex>."
+  ] ;
+  sh:property [
+    sh:path apreg:hasBindingProof ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:class apreg:RegistryEntryBindingProof ;
+    sh:message "RegistryEntry must carry exactly one binding proof."
+  ] ;
+  sh:property [
+    sh:path apreg:bindingProofHash ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:datatype xsd:string ;
+    sh:pattern "^sha256:[0-9a-fA-F]{64}$" ;
+    sh:message "RegistryEntry.bindingProofHash must be sha256:<64 hex>."
+  ] ;
+  sh:property [
+    sh:path apreg:lifecycleStatus ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:class apreg:RegistryLifecycleStatus ;
+    sh:message "RegistryEntry must project exactly one lifecycle status."
+  ] ;
+  sh:property [
+    sh:path apreg:expiresAt ;
+    sh:maxCount 1 ;
+    sh:datatype xsd:dateTime ;
+    sh:message "RegistryEntry.expiresAt, if present, must be a single dateTime (absent = non-expiring)."
+  ] .
+
+apreg:SignedAgentCardShape a sh:NodeShape ;
+  rdfs:label "SignedAgentCard shape" ;
+  sh:targetClass apreg:SignedAgentCard ;
+  sh:property [
+    sh:path apreg:cardHash ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:datatype xsd:string ;
+    sh:pattern "^sha256:[0-9a-fA-F]{64}$" ;
+    sh:message "SignedAgentCard.cardHash must be sha256:<64 hex>."
+  ] ;
+  sh:property [
+    sh:path apreg:cardSubject ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:class ap:Agent ;
+    sh:message "SignedAgentCard must point to exactly one Smart Agent subject."
+  ] .
+
+apreg:RegistryEntryBindingProofShape a sh:NodeShape ;
+  rdfs:label "RegistryEntryBindingProof shape" ;
+  sh:targetClass apreg:RegistryEntryBindingProof ;
+  sh:property [
+    sh:path apreg:proofHash ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:datatype xsd:string ;
+    sh:pattern "^sha256:[0-9a-fA-F]{64}$" ;
+    sh:message "RegistryEntryBindingProof.proofHash must be sha256:<64 hex>."
+  ] ;
+  sh:property [
+    sh:path apreg:cardHash ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:datatype xsd:string ;
+    sh:pattern "^sha256:[0-9a-fA-F]{64}$" ;
+    sh:message "RegistryEntryBindingProof.cardHash must be sha256:<64 hex>."
+  ] .
+
+apreg:ExternalRegistryFacetShape a sh:NodeShape ;
+  rdfs:label "ExternalRegistryFacet shape" ;
+  sh:targetClass apreg:ExternalRegistryFacet ;
+  sh:property [
+    sh:path apreg:externalSurface ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:in ("erc8004" "hcs10" "hcs11" "hcs14" "hcs26" "ans" "dns-aid" "oasf" "a2a" "mcp-registry" "nanda") ;
+    sh:message "ExternalRegistryFacet.externalSurface must be a known projection surface."
+  ] ;
+  sh:property [
+    sh:path apreg:externalIdentifier ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:datatype xsd:string ;
+    sh:message "ExternalRegistryFacet must have one external identifier."
+  ] ;
+  sh:property [
+    sh:path apreg:projectionOf ;
+    sh:minCount 1 ;
+    sh:message "ExternalRegistryFacet must point back to an AP-native projection target."
+  ] .
+
+apdisc:CandidateQueryShape a sh:NodeShape ;
+  rdfs:label "CandidateQuery shape" ;
+  sh:targetClass apdisc:CandidateQuery ;
+  sh:property [
+    sh:path apdisc:queryHash ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:datatype xsd:string ;
+    sh:message "CandidateQuery must record the canonical query hash."
+  ] ;
+  sh:property [
+    sh:path apdisc:usesGraphSnapshot ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:class apdisc:GraphSnapshot ;
+    sh:message "CandidateQuery must cite the graph snapshot used."
+  ] ;
+  sh:property [
+    sh:path apdisc:usesInferenceProfile ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:class apdisc:InferenceProfile ;
+    sh:message "CandidateQuery must cite the inference profile used."
+  ] .
+
+apdisc:MatchCandidateShape a sh:NodeShape ;
+  rdfs:label "MatchCandidate shape" ;
+  sh:targetClass apdisc:MatchCandidate ;
+  sh:property [
+    sh:path apdisc:candidateAgent ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:class ap:Agent ;
+    sh:message "MatchCandidate must cite exactly one candidate Smart Agent."
+  ] ;
+  sh:property [
+    sh:path apdisc:hasTrustDetermination ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:class apdisc:TrustDetermination ;
+    sh:message "MatchCandidate must include one trust determination."
+  ] ;
+  sh:property [
+    sh:path apdisc:hasEvidencePath ;
+    sh:minCount 1 ;
+    sh:class apdisc:EvidencePath ;
+    sh:message "MatchCandidate must cite at least one evidence path."
+  ] .
+
+apdisc:TrustDeterminationShape a sh:NodeShape ;
+  rdfs:label "TrustDetermination shape" ;
+  sh:targetClass apdisc:TrustDetermination ;
+  sh:property [
+    sh:path apdisc:confidence ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:datatype xsd:decimal ;
+    sh:minInclusive 0 ;
+    sh:maxInclusive 1 ;
+    sh:message "TrustDetermination.confidence must be a decimal in [0, 1]."
+  ] ;
+  sh:property [
+    sh:path apdisc:hasEvidencePath ;
+    sh:minCount 1 ;
+    sh:class apdisc:EvidencePath ;
+    sh:message "TrustDetermination must cite evidence paths."
+  ] .
+
+apsec:ExposureFindingShape a sh:NodeShape ;
+  rdfs:label "ExposureFinding shape" ;
+  sh:targetClass apsec:ExposureFinding ;
+  sh:property [
+    sh:path apsec:severity ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:class apsec:Severity ;
+    sh:message "ExposureFinding must have one severity."
+  ] ;
+  sh:property [
+    sh:path apsec:findingStatus ;
+    sh:minCount 1 ;
+    sh:maxCount 1 ;
+    sh:class apsec:FindingStatus ;
+    sh:message "ExposureFinding must have one triage status."
+  ] ;
+  sh:property [
+    sh:path apsec:affectsAgent ;
+    sh:minCount 1 ;
+    sh:class ap:Agent ;
+    sh:message "ExposureFinding must cite affected Smart Agent(s)."
+  ] ;
+  sh:property [
+    sh:path apsec:basedOnEvidencePath ;
+    sh:minCount 1 ;
+    sh:class apdisc:EvidencePath ;
+    sh:message "ExposureFinding must cite an evidence path."
+  ] .
+
+# ── Offering (spec 286) ────────────────────────────────────────────────────────────────────────
+# `apdisc:OfferingShape` has been named by the indexer (`SHAPE.Offering`, recorded as the facet's
+# shapeIri on every crawl) since spec 286, and has never existed. This is it.
+#
+# WHAT IT CONSTRAINS, AND WHAT IT DELIBERATELY DOES NOT. Everything an Offering says about ITSELF —
+# effect, exposure, family, status, version, name, blurb — is the host's own claim about its own
+# service, so there is no codelist this repo could impose that would be more than a guess, and a
+# pinned value space would make an unrecognised value indistinguishable from an absent one. Those
+# properties are therefore unconstrained here ON PURPOSE.
+#
+# What IS constrained is the part the substrate itself produces and consumes: identity (skillId,
+# ofAgent), the two-valued lexical space the MCP reads with `=== 'true'`, and the three provenance
+# properties without which a crawled assertion cannot be aged, diffed or challenged.
+apdisc:OfferingShape a sh:NodeShape ;
+  rdfs:label "Offering shape" ;
+  sh:targetClass apdisc:Offering ;
+  sh:property [
+    sh:path apdisc:skillId ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:datatype xsd:string ;
+    sh:message "Offering must carry exactly one skillId — it is the offering's identity component (the A-box IRI derives from it), and the projector drops any card entry without one."
+  ] ;
+  sh:property [
+    sh:path apdisc:ofAgent ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:class ap:Agent ;
+    sh:message "Offering must back-link to exactly one Agent. An offering advertising two agents' services is two offerings, and a single-tenant crawl already requires the card's self-reported agentId to equal the SA being crawled."
+  ] ;
+  sh:property [
+    sh:path apdisc:hasInputSchema ;
+    sh:maxCount 1 ; sh:in ( "true" "false" ) ;
+    sh:message "Offering.hasInputSchema, if present, is the lexical string 'true' or 'false'. The MCP reads it as `value === 'true'`, so ANY third value reads as false — a silent miss, which is exactly what ADR-0013 forbids. The set is pinned here rather than in the T-box because it is a fact about the live serialization, not about the concept."
+  ] ;
+  # ── Provenance of the crawl. A host-asserted fact with no observation point and no observation
+  #    time is a rumour with a subject IRI; these three are what make an Offering evidence.
+  sh:property [
+    sh:path apdisc:sourceEndpoint ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:datatype xsd:string ;
+    sh:message "Offering must record the endpoint it was crawled from. Without it, 'who asserted this?' has no answer."
+  ] ;
+  sh:property [
+    sh:path apdisc:observedAt ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:datatype xsd:integer ;
+    sh:message "Offering must record WHEN it was observed, in unix seconds (xsd:integer — the projector writes a bare Turtle integer). Without it nothing can decay, and a 2019 advertisement ranks as fresh."
+  ] ;
+  sh:property [
+    sh:path apdisc:cardDigest ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:datatype xsd:string ;
+    sh:pattern "^sha256:[0-9a-f]{64}$" ;
+    sh:message "Offering.cardDigest must be sha256:<64 lowercase hex> over the raw card body. It is what makes 'which advertisements must be re-examined now this host's card changed?' answerable without having stored the card — the same role a pinned playbook content hash plays in a realization contract."
+  ] .

package/cbox/familyoffice-shapes.shacl.ttl

@@ -0,0 +1,92 @@
+# C-box — SHACL for the FamilyOffice (apfo:) RELATIONSHIP archetypes. One NodeShape
+# per apfo relationship class, validating the WELL-FORMEDNESS of that relationship's
+# Situation: its agent role bindings (the who) plus its typed body (the what kind),
+# where the kind is pinned to a CLOSED cbox SKOS scheme via sh:in ( … ). Mirrors
+# cbox/capability-catalog-shapes.shacl.ttl (a shape per class, an sh:message per
+# constraint, the concept IRIs inlined) — the codelists these shapes constrain live
+# in cbox/familyoffice-vocabulary.ttl and the classes + role/body predicates in
+# tbox/familyoffice.ttl.
+#
+# These are STRUCTURE shapes, not authority: a conforming Guardianship is a
+# well-formed guardianship RECORD, never a grant of legal control (control rides
+# the delegation/entitlement layer, never an apfo: Situation). The New City portal
+# derives a flat ShapeDef from each of these NodeShapes and validates a relationship
+# record with it BEFORE a vault-first write — so a malformed relationship (a missing
+# ward, an ownership kind outside the scheme) fails at the app boundary, not after it
+# has already been persisted to a vault.
+
+@prefix sh:    <http://www.w3.org/ns/shacl#> .
+@prefix apfo:  <https://agenticprimitives.dev/ns/familyoffice#> .
+@prefix rdfs:  <http://www.w3.org/2000/01/rdf-schema#> .
+
+# ─── Guardianship — a directed guardian→ward oversight ─────────────────────
+apfo:GuardianshipShape a sh:NodeShape ;
+    sh:targetClass apfo:Guardianship ;
+    rdfs:label "GuardianshipShape" ;
+    sh:property [ sh:path apfo:guardian ; sh:nodeKind sh:IRI ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:message "A guardianship binds exactly one apfo:guardian (an agent IRI — the address IS the identity, never a name literal)." ] ;
+    sh:property [ sh:path apfo:ward ; sh:nodeKind sh:IRI ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:message "A guardianship binds exactly one apfo:ward. A guardian with no ward is not a guardianship — the fragmented old encoding (a kinship link + a 0-bps custodial edge) is exactly what this canonical record replaces." ] ;
+    sh:property [ sh:path apfo:hasRoleKind ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:in ( apfo:LegalGuardian apfo:Custodian apfo:PowerOfAttorney ) ;
+        sh:message "The body must name exactly one guardianship roleKind from the closed cbox scheme: apfo:LegalGuardian (the default), apfo:Custodian, or apfo:PowerOfAttorney. A bare enum or a concept outside the scheme is rejected." ] .
+
+# ─── Trusteeship — a trustee's fiduciary role over a trust entity ──────────
+apfo:TrusteeshipShape a sh:NodeShape ;
+    sh:targetClass apfo:Trusteeship ;
+    rdfs:label "TrusteeshipShape" ;
+    sh:property [ sh:path apfo:trustee ; sh:nodeKind sh:IRI ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:message "A trusteeship binds exactly one apfo:trustee (an agent IRI)." ] ;
+    sh:property [ sh:path apfo:trust ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:message "A trusteeship binds exactly one apfo:trust — the trust entity the trustee is fiduciary over." ] ;
+    sh:property [ sh:path apfo:hasRoleKind ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:in ( apfo:Trustee apfo:SuccessorTrustee ) ;
+        sh:message "The body must name exactly one trusteeship roleKind from the closed cbox scheme: apfo:Trustee or apfo:SuccessorTrustee." ] .
+
+# ─── Ownership — an owner's interest in an asset or entity ─────────────────
+apfo:OwnershipShape a sh:NodeShape ;
+    sh:targetClass apfo:Ownership ;
+    rdfs:label "OwnershipShape" ;
+    sh:property [ sh:path apfo:owner ; sh:nodeKind sh:IRI ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:message "An ownership binds exactly one apfo:owner (an agent IRI)." ] ;
+    sh:property [ sh:path apfo:ownedAsset ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:message "An ownership binds exactly one apfo:ownedAsset — the asset or entity the interest is in." ] ;
+    sh:property [ sh:path apfo:hasOwnershipKind ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:in ( apfo:SoleOwnership apfo:JointOwnership apfo:CommunityProperty apfo:BeneficialInterest apfo:TrustOwnership ) ;
+        sh:message "The body must name exactly one ownershipKind from the closed cbox scheme: apfo:SoleOwnership, apfo:JointOwnership, apfo:CommunityProperty, apfo:BeneficialInterest, or apfo:TrustOwnership." ] .
+
+# ─── SpouseRelation — a symmetric spousal kinship ─────────────────────────
+apfo:SpouseRelationShape a sh:NodeShape ;
+    sh:targetClass apfo:SpouseRelation ;
+    rdfs:label "SpouseRelationShape" ;
+    sh:property [ sh:path apfo:spouseA ; sh:nodeKind sh:IRI ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:message "A spouse relation binds exactly one apfo:spouseA (an agent IRI). The A/B slots are a canonical ordering for a stable hash, not a rank." ] ;
+    sh:property [ sh:path apfo:spouseB ; sh:nodeKind sh:IRI ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:message "A spouse relation binds exactly one apfo:spouseB (an agent IRI)." ] ;
+    sh:property [ sh:path apfo:hasKinshipKind ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:in ( apfo:Spouse ) ;
+        sh:message "The body of a spouse relation must name the apfo:Spouse kinshipKind concept, and only it." ] .
+
+# ─── ParentChildRelation — a directed parent→child kinship ────────────────
+apfo:ParentChildRelationShape a sh:NodeShape ;
+    sh:targetClass apfo:ParentChildRelation ;
+    rdfs:label "ParentChildRelationShape" ;
+    sh:property [ sh:path apfo:parent ; sh:nodeKind sh:IRI ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:message "A parent-child relation binds exactly one apfo:parent (an agent IRI)." ] ;
+    sh:property [ sh:path apfo:child ; sh:nodeKind sh:IRI ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:message "A parent-child relation binds exactly one apfo:child (an agent IRI)." ] ;
+    sh:property [ sh:path apfo:hasKinshipKind ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:in ( apfo:Parent apfo:Child apfo:Grandparent apfo:StepParent apfo:Adoptive ) ;
+        sh:message "The body must name exactly one directed-kinship concept from the closed cbox scheme: apfo:Parent, apfo:Child, apfo:Grandparent, apfo:StepParent, or apfo:Adoptive." ] .
+
+# ─── SiblingRelation — a symmetric sibling kinship ────────────────────────
+apfo:SiblingRelationShape a sh:NodeShape ;
+    sh:targetClass apfo:SiblingRelation ;
+    rdfs:label "SiblingRelationShape" ;
+    sh:property [ sh:path apfo:siblingA ; sh:nodeKind sh:IRI ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:message "A sibling relation binds exactly one apfo:siblingA (an agent IRI). The A/B slots are a canonical ordering for a stable hash, not a rank." ] ;
+    sh:property [ sh:path apfo:siblingB ; sh:nodeKind sh:IRI ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:message "A sibling relation binds exactly one apfo:siblingB (an agent IRI)." ] ;
+    sh:property [ sh:path apfo:hasKinshipKind ; sh:minCount 1 ; sh:maxCount 1 ;
+        sh:in ( apfo:Sibling ) ;
+        sh:message "The body of a sibling relation must name the apfo:Sibling kinshipKind concept, and only it." ] .

package/cbox/familyoffice-vocabulary.ttl

@@ -0,0 +1,48 @@
+# C-box — FamilyOffice controlled vocabularies (apfo:). Closed SKOS codelists for
+# kinship kinds, fiduciary/oversight role kinds, and ownership kinds — the concept
+# values an apfo: relationship Situation names in its body (the A-box→C-box link).
+# Mirrors cbox/scope-vocabulary.ttl. Deliberately coarse, cross-party classes.
+
+@prefix apfo: <https://agenticprimitives.dev/ns/familyoffice#> .
+@prefix skos: <http://www.w3.org/2004/02/skos/core#> .
+@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
+
+# ─── kinshipKind — the kind of family tie ─────────────────────────────────
+apfo:kinshipKind a skos:ConceptScheme ;
+    rdfs:label "kinshipKind" ;
+    rdfs:comment "The kind of kinship a Kinship situation asserts. Symmetric kinds (spouse/sibling) vs directed (parent/child) — see the class hierarchy in tbox/familyoffice.ttl." ;
+    skos:hasTopConcept apfo:Spouse, apfo:Parent, apfo:Child, apfo:Sibling,
+        apfo:Grandparent, apfo:StepParent, apfo:Adoptive .
+apfo:Spouse      a skos:Concept ; skos:inScheme apfo:kinshipKind ; skos:prefLabel "spouse" .
+apfo:Parent      a skos:Concept ; skos:inScheme apfo:kinshipKind ; skos:prefLabel "parent" .
+apfo:Child       a skos:Concept ; skos:inScheme apfo:kinshipKind ; skos:prefLabel "child" .
+apfo:Sibling     a skos:Concept ; skos:inScheme apfo:kinshipKind ; skos:prefLabel "sibling" .
+apfo:Grandparent a skos:Concept ; skos:inScheme apfo:kinshipKind ; skos:prefLabel "grandparent" .
+apfo:StepParent  a skos:Concept ; skos:inScheme apfo:kinshipKind ; skos:prefLabel "step-parent" .
+apfo:Adoptive    a skos:Concept ; skos:inScheme apfo:kinshipKind ; skos:prefLabel "adoptive parent" .
+
+# ─── roleKind — fiduciary / oversight roles (guardianship, trusteeship, estate) ──
+apfo:roleKind a skos:ConceptScheme ;
+    rdfs:label "roleKind" ;
+    rdfs:comment "The fiduciary/oversight role a Guardianship or Trusteeship asserts. LegalGuardian is the guardianship default." ;
+    skos:hasTopConcept apfo:LegalGuardian, apfo:Trustee, apfo:SuccessorTrustee,
+        apfo:Beneficiary, apfo:PowerOfAttorney, apfo:Custodian, apfo:Executor .
+apfo:LegalGuardian    a skos:Concept ; skos:inScheme apfo:roleKind ; skos:prefLabel "legal guardian" .
+apfo:Trustee          a skos:Concept ; skos:inScheme apfo:roleKind ; skos:prefLabel "trustee" .
+apfo:SuccessorTrustee a skos:Concept ; skos:inScheme apfo:roleKind ; skos:prefLabel "successor trustee" .
+apfo:Beneficiary      a skos:Concept ; skos:inScheme apfo:roleKind ; skos:prefLabel "beneficiary" .
+apfo:PowerOfAttorney  a skos:Concept ; skos:inScheme apfo:roleKind ; skos:prefLabel "power of attorney" .
+apfo:Custodian        a skos:Concept ; skos:inScheme apfo:roleKind ; skos:prefLabel "custodian" .
+apfo:Executor         a skos:Concept ; skos:inScheme apfo:roleKind ; skos:prefLabel "executor" .
+
+# ─── ownershipKind — the kind of ownership interest ───────────────────────
+apfo:ownershipKind a skos:ConceptScheme ;
+    rdfs:label "ownershipKind" ;
+    rdfs:comment "The kind of ownership interest an Ownership situation asserts." ;
+    skos:hasTopConcept apfo:SoleOwnership, apfo:JointOwnership, apfo:CommunityProperty,
+        apfo:BeneficialInterest, apfo:TrustOwnership .
+apfo:SoleOwnership      a skos:Concept ; skos:inScheme apfo:ownershipKind ; skos:prefLabel "sole" .
+apfo:JointOwnership     a skos:Concept ; skos:inScheme apfo:ownershipKind ; skos:prefLabel "joint" .
+apfo:CommunityProperty  a skos:Concept ; skos:inScheme apfo:ownershipKind ; skos:prefLabel "community property" .
+apfo:BeneficialInterest a skos:Concept ; skos:inScheme apfo:ownershipKind ; skos:prefLabel "beneficial" .
+apfo:TrustOwnership     a skos:Concept ; skos:inScheme apfo:ownershipKind ; skos:prefLabel "trust-held" .

package/cbox/geo-vocabulary.ttl

@@ -0,0 +1,36 @@
+# C-box — geo controlled vocabularies (spec 251). Closed SKOS codelists for the generic
+# geo substrate: geo feature KINDS (on-chain-bound) + geo RELATIONS (off-chain claim SDK).
+#
+# LOCKSTEP (ADR-0009): the on-chain `GeoFeatureRegistry.KIND_*` constants equal
+# keccak256(<the geoKind concept URI>) declared here; asserted by the lockstep gate.
+#
+# NEUTRAL public geography ONLY (spec 251 GFR-07). A feature is a generic public place —
+# never tagged with operational/sensitivity/ministry data. Sensitivity is an OFF-chain
+# app policy OVER neutral features. The agent↔feature ASSOCIATION is an off-chain vault
+# credential, never on chain; there is NO on-chain skill↔geo mapping.
+
+@prefix apg:  <https://agenticprimitives.dev/ns/geo#> .
+@prefix skos: <http://www.w3.org/2004/02/skos/core#> .
+@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
+
+# ─── geoKind — 5 values, ON-CHAIN-BOUND (GeoFeatureRegistry.KIND_*) ─────────
+apg:geoKind a skos:ConceptScheme ;
+    rdfs:label "geoKind" ;
+    rdfs:comment "The on-chain-bound geo-feature kind. keccak256 of each concept URI equals the matching GeoFeatureRegistry.KIND_* constant (ADR-0009 lockstep). Generic public geography only." ;
+    skos:hasTopConcept apg:Planet, apg:Region, apg:Country, apg:AdminArea, apg:Custom .
+apg:Planet    a skos:Concept ; skos:inScheme apg:geoKind ; skos:prefLabel "planet" .
+apg:Region    a skos:Concept ; skos:inScheme apg:geoKind ; skos:prefLabel "region" .
+apg:Country   a skos:Concept ; skos:inScheme apg:geoKind ; skos:prefLabel "country" .
+apg:AdminArea a skos:Concept ; skos:inScheme apg:geoKind ; skos:prefLabel "admin-area" .
+apg:Custom    a skos:Concept ; skos:inScheme apg:geoKind ; skos:prefLabel "custom" .
+
+# ─── geoRelation — used by the OFF-CHAIN geo claim credential (not on chain) ──
+apg:geoRelation a skos:ConceptScheme ;
+    rdfs:label "geoRelation" ;
+    rdfs:comment "Relation a claim credential asserts between a subject SA and a geo feature. Off chain only; never an on-chain row (it would leak operational association)." ;
+    skos:hasTopConcept apg:servesWithin, apg:operatesIn, apg:licensedIn, apg:residentOf, apg:originIn .
+apg:servesWithin a skos:Concept ; skos:inScheme apg:geoRelation ; skos:prefLabel "servesWithin" .
+apg:operatesIn   a skos:Concept ; skos:inScheme apg:geoRelation ; skos:prefLabel "operatesIn" .
+apg:licensedIn   a skos:Concept ; skos:inScheme apg:geoRelation ; skos:prefLabel "licensedIn" .
+apg:residentOf   a skos:Concept ; skos:inScheme apg:geoRelation ; skos:prefLabel "residentOf" .
+apg:originIn     a skos:Concept ; skos:inScheme apg:geoRelation ; skos:prefLabel "originIn" .

package/cbox/guidance-vocabulary.ttl

@@ -0,0 +1,22 @@
+# C-box — skill layer disambiguation (ADR-0050).
+# Use aps:skillLayer to tag which sense of "skill" applies in prose, tooling, and adapters.
+
+@prefix aps:     <https://agenticprimitives.dev/ns/skill#> .
+@prefix apguide: <https://agenticprimitives.dev/ns/guidance#> .
+@prefix skos:    <http://www.w3.org/2004/02/skos/core#> .
+@prefix rdfs:    <http://www.w3.org/2000/01/rdf-schema#> .
+
+aps:skillLayer a skos:ConceptScheme ;
+    rdfs:label "skillLayer" ;
+    rdfs:comment "Which architectural layer a 'skill' reference belongs to — never collapse layers." ;
+    skos:hasTopConcept aps:GuidanceSkillLayer, aps:ExecutableSkillLayer .
+
+aps:GuidanceSkillLayer a skos:Concept ; skos:inScheme aps:skillLayer ;
+    skos:prefLabel "guidance" ;
+    rdfs:seeAlso apguide:AgentSkillPackage ;
+    rdfs:comment "Agent Skill packages (SKILL.md) — steers coding agents only." .
+
+aps:ExecutableSkillLayer a skos:Concept ; skos:inScheme aps:skillLayer ;
+    skos:prefLabel "executable" ;
+    rdfs:seeAlso aps:CapabilityDefinition , aps:Skill , aps:SkillClaim ;
+    rdfs:comment "Smart Agent capabilities: CapabilityDefinition, claims, OASF/A2A/MCP projections." .