@agenticprimitives/ontology 1.0.0-alpha.4 → 1.0.0-alpha.41

package/tbox/identity.ttl

@@ -7,6 +7,7 @@
 @prefix aporg: <https://agenticprimitives.dev/ns/org#> .
 @prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
 @prefix owl:  <http://www.w3.org/2002/07/owl#> .
+@prefix prov: <http://www.w3.org/ns/prov#> .
 @prefix xsd:  <http://www.w3.org/2001/XMLSchema#> .
 
 apcr:CredentialFacet a owl:Class ;
@@ -14,6 +15,11 @@ apcr:CredentialFacet a owl:Class ;
     rdfs:label "CredentialFacet" ;
     rdfs:comment "A control credential (passkey / SIWE-EOA / hardware / OIDC) that CONTROLS an Agent under its custody policy. Rotates without changing the Agent (ADR-0011). NEVER an owner." .
 
+apcr:ChannelFacet a owl:Class ;
+    rdfs:subClassOf ap:Facet ;
+    rdfs:label "ChannelFacet" ;
+    rdfs:comment "An email address or phone number linked to an Agent's home (spec 319/320, spec 422 §3.3). It OPENS the home (login-grade, ADR-0017) and is where the home TELLS the person something — a credential change, a recovery request — so she can cancel. It is NOT a CredentialFacet: it signs nothing, it is never a quorum slot, a step-up or a recovery signer. A phone-bootstrapped home's custody credential is its server-held C_sub (spec 235), not the phone." .
+
 apnam:NameFacet a owl:Class ;
     rdfs:subClassOf ap:Facet ;
     rdfs:label "NameFacet" ;
@@ -24,11 +30,6 @@ apid:OidcSubject a owl:Class ;
     rdfs:label "OidcSubject" ;
     rdfs:comment "An OIDC issuer+subject claim recorded as a login facet, not custody (ADR-0017). Keyed on (iss, sub), never email." .
 
-aporg:Org a owl:Class ;
-    rdfs:subClassOf ap:Agent ;
-    rdfs:label "Org" ;
-    rdfs:comment "An organization Agent with members (membership is informational; authority lives in custody/relationships)." .
-
 # ─── Properties ───────────────────────────────────────────────────────
 
 apcr:controls a owl:ObjectProperty ;
@@ -48,7 +49,133 @@ apnam:resolvesTo a owl:ObjectProperty ;
     rdfs:domain apnam:NameFacet ;
     rdfs:range ap:Agent .
 
+apnam:description a owl:DatatypeProperty ;
+    rdfs:label "description (name record)" ;
+    rdfs:domain apnam:NameFacet ;
+    rdfs:range xsd:string ;
+    rdfs:comment "atl:description read NODE-KEYED off AgentNameAttributeResolver — the description attached to the NAME RECORD, written by the name's owner. facet-registries G8: it shares the on-chain predicate key keccak256(\"atl:description\") with the SA-keyed profile description, but it is NOT the same fact and must NOT be emitted as approf:description, which tbox/profile.ttl reserves for the agent's own self-description. The two differ in author (name owner vs the agent itself), in subject (name node vs Smart Agent), and in survival: this one TRANSFERS WITH THE NAME and disappears if the name lapses, while approf:description survives a rename and exists for nameless agents (ADR-0010/0020). Projecting both under one IRI let the node-keyed loop clobber the SA-keyed one by loop order. Descriptive, low-authority, free text — never a filter target and never evidence." .
+
 aporg:memberOf a owl:ObjectProperty ;
     rdfs:label "memberOf" ;
     rdfs:domain ap:Agent ;
-    rdfs:range aporg:Org .
+    rdfs:range ap:OrganizationAgent ;
+    rdfs:comment "An Agent is a member of an Organization Agent. Membership is informational; authority lives in custody/relationships." .
+
+# ─── At the company's door (spec 442 §11) ─────────────────────────────────────────────────────────
+# Four terms for what a person's agent IS at an external door (OAuth, HTTP-signature, checkout) and what it
+# holds afterwards. None of them is authority: a key binding says which key may PRESENT, a pairwise subject
+# says what a company CALLS the person, an external operation is an INTENT until a mandate binds its digest,
+# an account link is a CREDENTIAL the vault keeps. Protocol vocabulary (poppy.json, DPoP, Idempotency-Key)
+# stays out of this T-box (ADR-0021, ADR-0037); the projections that speak it live in ap-federation (spec 443).
+
+ap:ClientKeyBinding a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ClientKeyBinding" ;
+    rdfs:comment "A Smart Agent's signed statement that one public key (a JWK, by RFC 7638 thumbprint) may present FOR it at external doors — under one custody epoch, between notBefore and notAfter, published under one clientId (spec 442 §3; TS ClientKeyBindingV1; on-chain record atl:clientKeys). The key is a KMS delegate under the estate's tenant, never the agent's own key. It is NOT a delegation and grants NO authority to act: signatures under it are the agent's PRESENTATIONS, and what the agent may do at the door is still a mandate verified per step (spec 350 §3.6). A custody-epoch bump kills every binding under the old epoch (spec 410 §1)." .
+
+ap:PairwiseSubject a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "PairwiseSubject" ;
+    rdfs:comment "The opaque identifier a person is known by at ONE company (an OAuth issuer): HKDF over a 32-byte secret in the person's vault, salted by the issuer, so it is stable there, different everywhere else, and non-reversible to the Smart Agent, to any name or to any other company's subject without the secret (spec 442 §4; derivePairwiseSubject). It is NOT an alias of the SA, NOT a name and NOT linkable across issuers — the vocabulary carries no property from it to the person, on purpose (the same rule as appc:PairwiseAccount). Rotating the secret produces a new subject everywhere, which is the point of having one." .
+
+ap:ExternalOperation a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ExternalOperation" ;
+    rdfs:comment "A set of terms a company proposed and will perform at most once when approved — PAP's operation, ACP's checkout session, UCP's checkout, seen from our side: an INTENT whose digest (keccak256 over authority · operationId · revision · termsDigest · expiresAt) a mandate binds (spec 442 §5; TS ExternalOperationRefV1). A new revision is a new operation; one operationId‖revision is one intent nonce on chain, so a second confirm is refused as reuse. It is NOT an approval and NOT an act of ours until a mandate binds it: the company's approved_by is its claim, recorded as such; the mandate signature is the only producer of user approval and a covering standing wire (spec 397 §11) the only producer of standing permission." .
+
+ap:ExternalAccountLink a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "ExternalAccountLink" ;
+    rdfs:comment "The person's account relationship at ONE company and the credentials it left behind — the Account Token sealed under the vault key, the session-key reference, the scopes granted, the field classes the person consented to, when it was granted, when it expires, when it was last used (spec 442 §8; vault record identity.external-account-link:<issuerDigest>, findable by issuer and never by subject). A credential the vault keeps: listed in the Security section as 'an account at a company', revoked at the company's revocation endpoint and retired here — a removal is a revocation, never a quiet delete (spec 422). It is NOT the person's identity, NOT a Worker secret, NOT a membership; an expired token means signed out until the person signs in again, never a retry with another credential (ADR-0013)." .
+
+ap:clientId a owl:DatatypeProperty ;
+    rdfs:label "clientId" ;
+    rdfs:domain ap:ClientKeyBinding ;
+    rdfs:range xsd:anyURI ;
+    rdfs:comment "The HTTPS URL the key is published under — the estate's personal-agent SERVICE, never the person (spec 442 §7: the person is never the client_id)." .
+
+ap:jwkThumbprint a owl:DatatypeProperty ;
+    rdfs:label "jwkThumbprint" ;
+    rdfs:domain ap:ClientKeyBinding ;
+    rdfs:range xsd:string ;
+    rdfs:comment "RFC 7638 thumbprint of the bound public JWK. Names the key; is not the key." .
+
+ap:jwsAlgorithm a owl:DatatypeProperty ;
+    rdfs:label "jwsAlgorithm" ;
+    rdfs:domain ap:ClientKeyBinding ;
+    rdfs:range xsd:string ;
+    rdfs:comment "What the field verifies: ES256 or EdDSA. ES256K is refused as not verifiable at the doors this binding is for." .
+
+ap:boundUnderCustodyEpoch a owl:DatatypeProperty ;
+    rdfs:label "boundUnderCustodyEpoch" ;
+    rdfs:domain ap:ClientKeyBinding ;
+    rdfs:range xsd:integer ;
+    rdfs:comment "The Smart Agent's custody epoch at signing. A binding under a stale epoch is dead (spec 410 §1: rotation re-approves, recovery does not)." .
+
+ap:bindingNotBefore a owl:DatatypeProperty ;
+    rdfs:label "bindingNotBefore" ;
+    rdfs:domain ap:ClientKeyBinding ;
+    rdfs:range xsd:dateTime .
+
+ap:bindingNotAfter a owl:DatatypeProperty ;
+    rdfs:label "bindingNotAfter" ;
+    rdfs:domain ap:ClientKeyBinding ;
+    rdfs:range xsd:dateTime ;
+    rdfs:comment "Short by default (≤ 90 days); published on the atl:clientKeys record beside the thumbprint." .
+
+ap:pairwiseIssuer a owl:DatatypeProperty ;
+    rdfs:label "pairwiseIssuer" ;
+    rdfs:range xsd:anyURI ;
+    rdfs:comment "The company's issuer URL a pairwise subject or an account link is scoped to. Domain left open on purpose: PairwiseSubject and ExternalAccountLink both carry it; nothing else does." .
+
+ap:pairwiseSubjectDigest a owl:DatatypeProperty ;
+    rdfs:label "pairwiseSubjectDigest" ;
+    rdfs:domain ap:ExternalAccountLink ;
+    rdfs:range xsd:string ;
+    rdfs:comment "HMAC of the pairwise subject under the vault key — so the record is findable by issuer and never by subject, and the subject never appears in a record key." .
+
+ap:operationAuthority a owl:DatatypeProperty ;
+    rdfs:label "operationAuthority" ;
+    rdfs:domain ap:ExternalOperation ;
+    rdfs:range xsd:string ;
+    rdfs:comment "Who proposed the operation: the company agent's CAIP-10 when it has one, else its https: origin. Names the counterparty; authorizes nothing." .
+
+ap:operationId a owl:DatatypeProperty ;
+    rdfs:label "operationId" ;
+    rdfs:domain ap:ExternalOperation ;
+    rdfs:range xsd:string ;
+    rdfs:comment "The company's id for the operation or session." .
+
+ap:operationRevision a owl:DatatypeProperty ;
+    rdfs:label "operationRevision" ;
+    rdfs:domain ap:ExternalOperation ;
+    rdfs:range xsd:integer ;
+    rdfs:comment "A new revision is a new operation: the parked act is replaced, never silently re-approved (spec 350)." .
+
+ap:termsDigest a owl:DatatypeProperty ;
+    rdfs:label "termsDigest" ;
+    rdfs:domain ap:ExternalOperation ;
+    rdfs:range xsd:string ;
+    rdfs:comment "keccak256 over the RFC 8785 canonical JSON of the terms the company sent. A changed digest under the old mandate is refused." .
+
+ap:accountGrantedAt a owl:DatatypeProperty ;
+    rdfs:label "accountGrantedAt" ;
+    rdfs:domain ap:ExternalAccountLink ;
+    rdfs:range xsd:dateTime .
+
+ap:accountExpiresAt a owl:DatatypeProperty ;
+    rdfs:label "accountExpiresAt" ;
+    rdfs:domain ap:ExternalAccountLink ;
+    rdfs:range xsd:dateTime ;
+    rdfs:comment "When the Account Token lapses. After it: signed out, one mechanism (ADR-0013)." .
+
+ap:accountLastUsedAt a owl:DatatypeProperty ;
+    rdfs:label "accountLastUsedAt" ;
+    rdfs:domain ap:ExternalAccountLink ;
+    rdfs:range xsd:dateTime .
+
+ap:grantedScope a owl:DatatypeProperty ;
+    rdfs:label "grantedScope" ;
+    rdfs:domain ap:ExternalAccountLink ;
+    rdfs:range xsd:string ;
+    rdfs:comment "One scope the company granted, as the company spells it. Honesty about what the token can reach there (spec 353); never an input to any verifier here (ADR-0041)." .

package/tbox/inference.ttl

@@ -0,0 +1,177 @@
+# T-box — inference: the model gateway's records (spec 434) and the estate heartbeat (spec 434 §10 / 436 §5).
+#
+# What this says: a town's model gateway serves PROFILES over a CATALOG of models to PRINCIPALS it has entitled, and
+# every call leaves a RECEIPT. A profile is a policy unit (ordered candidates, a privacy level, the failure classes it
+# may fall back on); a catalog entry is one model with one switch; an entitlement is the gateway's own policy over its
+# own resource; a receipt says which profile version, provider, model and attempt answered and what it cost.
+#
+# What this is NOT: authority. An entitlement is not a delegation (spec 434 G8 / 429 D2): it answers "may this principal
+# spend this service's model budget on this profile?" and nothing about what the principal may DO with the answer. A
+# receipt is evidence that a call occurred, never that it was authorized (apix:Receipt's own rule). `assertedAgent` is
+# what the caller SAID it acted for — evidence, never the principal, never read by anything that decides (G3). An
+# estate heartbeat is an aggregate observation — counts, never a person.
+
+@prefix apinf: <https://agenticprimitives.dev/ns/inference#> .
+@prefix apix:  <https://agenticprimitives.dev/ns/interaction#> .
+@prefix apexec: <https://agenticprimitives.dev/ns/execution#> .
+@prefix ap:    <https://agenticprimitives.dev/ns/core#> .
+@prefix rdf:   <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs:  <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:   <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:   <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:  <http://www.w3.org/ns/prov#> .
+
+apinf: a owl:Ontology ;
+  rdfs:label "Agentic Primitives — inference (the model gateway's records)" ;
+  owl:versionInfo "0.2.0" ;
+  rdfs:seeAlso <https://github.com/agentictrustlabs/ap-town/blob/master/specs/434-ap-model-gateway-and-the-town-pulse.md> ;
+  rdfs:comment "Profiles, the model catalog, entitlements, inference receipts, policy changes and the estate heartbeat. Records of a town service; nothing here grants." .
+
+# ─── Policy records ──────────────────────────────────────────────────────────────────────────────────────────────────
+
+apinf:ModelProfile a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "ModelProfile" ;
+  rdfs:comment "The policy unit a capability names (plan, compose, judge …): an ORDERED list of candidate models, the capabilities they must have, an output ceiling, a privacy level, the failure classes a declared fallback may answer, a timeout. A caller names a profile, never a model. Versioned by the digest of its record; every receipt names the version it ran under." .
+
+apinf:ModelCatalogEntry a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "ModelCatalogEntry" ;
+  rdfs:comment "One model at one provider, with ONE switch (apinf:enabled). Turning it off removes it from every profile's candidates at once; a profile left with none fails closed. Carries pricing, capabilities, context window and privacy." .
+
+apinf:ClientEntitlement a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "ClientEntitlement" ;
+  rdfs:comment "The gateway's own policy over its own resource for one principal: which profiles, with which limits (tokens/day, µUSD/day, requests/minute, concurrency, attempts). NOT a delegation, NOT a mandate, holds no key for anyone (spec 434 G8; 429 D2)." .
+
+apinf:PolicyChange a owl:Class ;
+  rdfs:subClassOf prov:Activity ;
+  rdfs:label "PolicyChange" ;
+  rdfs:comment "A steward changed a policy record (a profile, a catalog switch, an entitlement): who, which record, the digests before and after, why, when. Written beside the new version; the receipts after it cite the new version." .
+
+# ─── The receipt ─────────────────────────────────────────────────────────────────────────────────────────────────────
+
+apinf:InferenceReceipt a owl:Class ;
+  rdfs:subClassOf apix:Receipt ;
+  rdfs:label "InferenceReceipt" ;
+  rdfs:comment "One attempt at one model under one profile version for one principal: usage, cost, latency, outcome, the policy decision that admitted it, and — when it was a declared fallback — the receipt of the attempt it replaced. Evidence that a call occurred and what it cost; never that it was authorized. No prompt or response text." .
+
+apinf:BudgetReservation a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "BudgetReservation" ;
+  rdfs:comment "The estimate reserved before dispatch and settled after. A SERVING-PLANE record (the gateway's meter), rebuildable from receipts; expired at the reserved cost, never released as zero." .
+
+apinf:EstateHeartbeat a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "EstateHeartbeat" ;
+  rdfs:comment "What an estate reports to its town: COUNTS over a window — agents by type, homes active, runs by state, model calls, spend, vault and DO calls, latency — never a person, never a name. An aggregate observation the town samples into a history; a stale one is shown dark, never guessed." .
+
+# ─── Properties ──────────────────────────────────────────────────────────────────────────────────────────────────────
+
+apinf:profileId a owl:DatatypeProperty ;
+  rdfs:domain prov:Entity ; rdfs:range xsd:string ;
+  rdfs:label "profileId" ;
+  rdfs:comment "The profile a receipt, an entitlement row or a reservation names." .
+
+apinf:profileVersion a owl:DatatypeProperty ;
+  rdfs:domain apinf:InferenceReceipt ; rdfs:range xsd:string ;
+  rdfs:label "profileVersion" ;
+  rdfs:comment "The digest of the profile record the call ran under." .
+
+apinf:servesCapability a owl:DatatypeProperty ;
+  rdfs:domain apinf:ModelProfile ; rdfs:range xsd:string ;
+  rdfs:label "servesCapability" ;
+  rdfs:comment "The caller's words a profile answers to (plan, compose, answer-stream, judge, selection, author, evals, private-analysis)." .
+
+apinf:enabled a owl:DatatypeProperty ;
+  rdfs:domain apinf:ModelCatalogEntry ; rdfs:range xsd:boolean ;
+  rdfs:label "enabled" ;
+  rdfs:comment "The one switch." .
+
+apinf:modelProvider a owl:DatatypeProperty ;
+  rdfs:domain prov:Entity ; rdfs:range xsd:string ;
+  rdfs:label "modelProvider" .
+
+apinf:modelId a owl:DatatypeProperty ;
+  rdfs:domain prov:Entity ; rdfs:range xsd:string ;
+  rdfs:label "modelId" .
+
+apinf:principal a owl:DatatypeProperty ;
+  rdfs:domain prov:Entity ; rdfs:range xsd:string ;
+  rdfs:label "principal" ;
+  rdfs:comment "The Smart Agent the gateway PROVED from the credential (an app's Service SA, or a session wire's delegator). The only party a budget or an entitlement is read for." .
+
+apinf:assertedAgent a owl:DatatypeProperty ;
+  rdfs:domain apinf:InferenceReceipt ; rdfs:range xsd:string ;
+  rdfs:label "assertedAgent" ;
+  rdfs:comment "What the caller SAID it was acting for. Evidence for attribution, never authority, never the principal, never read by anything that decides (spec 434 G3)." .
+
+apinf:costMicroUsd a owl:DatatypeProperty ;
+  rdfs:domain prov:Entity ; rdfs:range xsd:integer ;
+  rdfs:label "costMicroUsd" ;
+  rdfs:comment "Usage × the catalog's pricing at call time, in micro-USD." .
+
+apinf:attempt a owl:DatatypeProperty ;
+  rdfs:domain apinf:InferenceReceipt ; rdfs:range xsd:integer ;
+  rdfs:label "attempt" ;
+  rdfs:comment "Which candidate of the profile this was: 1 is the first." .
+
+apinf:fallbackOf a owl:ObjectProperty ;
+  rdfs:domain apinf:InferenceReceipt ; rdfs:range apinf:InferenceReceipt ;
+  rdfs:label "fallbackOf" ;
+  rdfs:comment "The receipt of the attempt this one replaced, under a failure class the profile DECLARED. Absent on a first attempt. Never silent (spec 434 G5)." .
+
+apinf:reconciliationState a owl:DatatypeProperty ;
+  rdfs:domain prov:Entity ; rdfs:range xsd:string ;
+  rdfs:label "reconciliationState" ;
+  rdfs:comment "settled | pending | expired — whether the reservation was corrected with actual usage, is held for the sweep, or was charged as reserved." .
+
+apinf:outcome a owl:DatatypeProperty ;
+  rdfs:domain apinf:InferenceReceipt ; rdfs:range xsd:string ;
+  rdfs:label "outcome" ;
+  rdfs:comment "answered | failed | refused." .
+
+apinf:purpose a owl:DatatypeProperty ;
+  rdfs:domain apinf:InferenceReceipt ; rdfs:range xsd:string ;
+  rdfs:label "purpose" ;
+  rdfs:comment "The caller's word for why (plan, compose, …), as sent." .
+
+apinf:estate a owl:DatatypeProperty ;
+  rdfs:domain prov:Entity ; rdfs:range xsd:string ;
+  rdfs:label "estate" ;
+  rdfs:comment "The estate the client record attributes the principal to (spec 436 C8) — for the per-estate slice of the Pulse. Attribution, never authority." .
+
+apinf:clientKind a owl:DatatypeProperty ;
+  rdfs:domain prov:Entity ; rdfs:range xsd:string ;
+  rdfs:label "clientKind" ;
+  rdfs:comment "estate-app | town-service | application." .
+
+apinf:changedRecord a owl:DatatypeProperty ;
+  rdfs:domain apinf:PolicyChange ; rdfs:range xsd:string ;
+  rdfs:label "changedRecord" ;
+  rdfs:comment "The vault record key the change rewrote (inference.profile:<id>, inference.model:<provider>/<model>, inference.client:<sa>)." .
+
+apinf:reason a owl:DatatypeProperty ;
+  rdfs:domain apinf:PolicyChange ; rdfs:range xsd:string ;
+  rdfs:label "reason" .
+
+# A run's model invocation may cite the gateway receipt that answers for it (spec 434 §7).
+apexec:receiptRef a owl:DatatypeProperty ;
+  rdfs:domain apexec:ModelInvocation ; rdfs:range xsd:string ;
+  rdfs:label "receiptRef" ;
+  rdfs:comment "The inference receipt id (inference.receipt:<id> in the gateway's vault) when the call went through the town's model gateway; absent on a direct call." .
+
+# ─── Spec 436 §5.5 / spec 437 — the Town Ask's records: the Pulse's memory, kept by a context agent ───────────────
+apinf:TownPulse a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "TownPulse" ;
+  rdfs:comment "A day's (or a sample's) rollup of a town's sampled state — services up/down, the chain gateway's summary, the model gateway's summary, every estate's heartbeat, and (spec 437) the infrastructure, cost and performance views with their lag labels. Counts, never a person. Kept in the town context agent's vault; HeartbeatDO is the rebuildable cache." .
+apinf:pulseDay a owl:DatatypeProperty ; rdfs:domain apinf:TownPulse ; rdfs:range xsd:date ; rdfs:label "pulseDay" .
+apinf:StandingChecklist a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "StandingChecklist" ;
+  rdfs:comment "Spec 435 §8 — the birthrights present or absent across an estate's residents on a day, as COUNTS (the shadow-agent column); never a score, never a name in the town's copy." .
+apinf:EstateManifest a owl:Class ;
+  rdfs:subClassOf prov:Entity ;
+  rdfs:label "EstateManifest" ;
+  rdfs:comment "Spec 435 §6 — the signed export an estate's steward hands an auditor: every resident's address, typed name, card digest, playbook digest, connector manifest digests, model profile versions in force, standing UID and expiry. Public facts plus digests of private ones; the steward's to hand over, never published by the town." .

package/tbox/intents.ttl

@@ -0,0 +1,241 @@
+# T-box — intent vocabulary (spine Layer 2 + 7).
+# Anoma CSP alignment + ERC-7521 + UFO-C/ValueFlows.
+# Spec 225 §11.5 (substrate spine vocabulary scope expansion).
+# Owning runtime SHACL shapes: packages/intent-marketplace/src/shapes/ (PD-19).
+
+@prefix ap:     <https://agenticprimitives.dev/ns/core#> .
+@prefix apint:  <https://agenticprimitives.dev/ns/intent#> .
+@prefix aps:    <https://agenticprimitives.dev/ns/skill#> .
+@prefix apcst:  <https://agenticprimitives.dev/ns/constraint#> .
+@prefix apres:  <https://agenticprimitives.dev/ns/resolution#> .
+@prefix rdf:    <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs:   <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:    <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:    <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov:   <http://www.w3.org/ns/prov#> .
+@prefix skos:   <http://www.w3.org/2004/02/skos/core#> .
+@prefix vf:     <https://w3id.org/valueflows#> .
+@prefix ufo-c:  <http://purl.org/nemo/ufo-c#> .
+
+apint: a owl:Ontology ;
+    rdfs:label "Agentic Primitives — intent ontology" ;
+    owl:versionInfo "0.1.0" ;
+    rdfs:comment "T-box for the intent-marketplace substrate. Anoma CSP-aligned + ERC-7521 + ERC-7683 + UFO-C/ValueFlows. Spec 225 §11.5." .
+
+# ─── Intent + lifecycle classes ────────────────────────────────────────
+
+apint:Desire a owl:Class ;
+    rdfs:subClassOf ufo-c:Intention ;
+    rdfs:label "Desire" ;
+    rdfs:comment "An actor's latent want — internal BDI state. NOT addressable; NOT a commitment. Becomes actionable only when committed to an Intent. Layer 1 of the spine; out-of-scope for W1 substrate (engagement plane only)." .
+
+apint:Intent a owl:Class ;
+    rdfs:subClassOf ufo-c:Intention , vf:Intent ;
+    rdfs:label "Intent" ;
+    rdfs:comment "An actor's signed declarative statement of a desired end-state. NOT a plan; not a transaction; not a wire envelope. Layer 2 of the spine." .
+
+# ─── Spec 410 §6 — OPEN INTENTS: the stated outcome, and what it entails ───────────────────────────────
+# A CLOSED intent names its effects ("pay Alice 10"); the mandate binds them. An OPEN intent names an OUTCOME
+# ("organize the gathering for under two thousand") and leaves the effects to a plan — which is where an
+# adversarial instruction inside the plan's inputs can surface an effect the outcome never entailed: the
+# disclosure, the over-budget deposit, the substitute venue. These terms let the ontology say, per outcome
+# class, which effect kinds the outcome ENTAILS and which BOUNDS it carries; the harness's conformance stage
+# (`orchestration.outcomeConformance`) refuses, before anything is offered for signature, every consequential
+# effect the outcome does not entail. Behaviour, never authority: no verifier reads these; the mandate still
+# authorizes what it names.
+
+apint:Outcome a owl:Class ;
+    rdfs:subClassOf apint:Intent ;
+    rdfs:label "Outcome" ;
+    rdfs:comment "The stated end-state of an OPEN intent, as a class: what a plan under that intent may be composed of is what this class ENTAILS (apint:entailsCapability), within the BOUNDS the intent stated (apint:boundedBy). What it is NOT: authority (a mandate still authorizes each effect), and not a plan (it names kinds, never steps)." .
+
+apint:entailsCapability a owl:ObjectProperty ;
+    rdfs:domain apint:Outcome ; rdfs:range aps:Capability ;
+    rdfs:label "entailsCapability" ;
+    rdfs:comment "A capability whose exercise the outcome entails. A consequential effect under an open intent whose capability the outcome does not entail is refused at conformance — an omission here is a refusal there, by design." .
+
+apint:OutcomeBound a owl:Class ;
+    rdfs:label "OutcomeBound" ;
+    rdfs:comment "A bound an open intent states over one argument of an entailed capability: an AMOUNT (\"under two thousand\" — the argument may not exceed it) or a NAMED value (\"at the hall\" — the argument may not differ from it). Read from the intent, never inferred." .
+
+apint:boundedBy a owl:ObjectProperty ;
+    rdfs:domain apint:Outcome ; rdfs:range apint:OutcomeBound ;
+    rdfs:label "boundedBy" .
+
+apint:boundsArgument a owl:DatatypeProperty ;
+    rdfs:domain apint:OutcomeBound ; rdfs:range xsd:string ;
+    rdfs:label "boundsArgument" ;
+    rdfs:comment "The argument name of the entailed capability the bound applies to (\"amount\", \"location\")." .
+
+apint:OrganizedGathering a owl:Class ;
+    rdfs:subClassOf apint:Outcome ;
+    rdfs:label "OrganizedGathering" ;
+    rdfs:comment "A gathering organized for a group: a time and place set, the people told, a deposit paid within budget. Entails: a calendar event (bounded by the named venue), messages to the attendees (carrying contact details, never records about them), a payment (bounded by the stated budget). The reference outcome class of spec 410 §6; a domain adds its own the same way." .
+
+# ─── Intent hierarchy extension (spec 324 §9) ─────────────────────────
+
+apint:ResourceExchangeIntent a owl:Class ;
+    rdfs:subClassOf apint:Intent ;
+    rdfs:label "ResourceExchangeIntent" ;
+    rdfs:comment "Marketplace-shaped intents; direction + object matching apply here only." .
+
+apint:GiveIntent a owl:Class ;
+    rdfs:subClassOf apint:ResourceExchangeIntent ;
+    rdfs:label "GiveIntent" ;
+    rdfs:comment "ResourceExchangeIntent with direction='give'. Direction is ONE OF THE TWO FLIPS of the two-flip principle (spec 337 §1.1): a seller's auction is a GiveIntent-side campaign, a buyer's shopping goal is ReceiveIntent-side — same algebra, direction as data. Never mint direction-specific classes downstream of these two." .
+
+apint:ReceiveIntent a owl:Class ;
+    rdfs:subClassOf apint:ResourceExchangeIntent ;
+    rdfs:label "ReceiveIntent" ;
+    rdfs:comment "ResourceExchangeIntent with direction='receive'. See apint:GiveIntent — direction is data (two-flip principle, spec 337 §1.1)." .
+
+apint:ActionIntent a owl:Class ;
+    rdfs:subClassOf apint:Intent ;
+    rdfs:label "ActionIntent" ;
+    rdfs:comment "Desired action (invoke skill, perform task, moderate conversation)." .
+
+apint:InvokeSkillIntent a owl:Class ;
+    rdfs:subClassOf apint:ActionIntent ;
+    rdfs:label "InvokeSkillIntent" .
+
+apint:PerformTaskIntent a owl:Class ;
+    rdfs:subClassOf apint:ActionIntent ;
+    rdfs:label "PerformTaskIntent" .
+
+apint:InformationIntent a owl:Class ;
+    rdfs:subClassOf apint:Intent ;
+    rdfs:label "InformationIntent" .
+
+apint:QueryIntent a owl:Class ;
+    rdfs:subClassOf apint:InformationIntent ;
+    rdfs:label "QueryIntent" .
+
+apint:SubscribeIntent a owl:Class ;
+    rdfs:subClassOf apint:InformationIntent ;
+    rdfs:label "SubscribeIntent" .
+
+apint:RelationshipIntent a owl:Class ;
+    rdfs:subClassOf apint:Intent ;
+    rdfs:label "RelationshipIntent" .
+
+apint:JoinOrganizationIntent a owl:Class ;
+    rdfs:subClassOf apint:RelationshipIntent ;
+    rdfs:label "JoinOrganizationIntent" ;
+    rdfs:comment "Expressed by MembershipApplication (REQUEST act)." .
+
+apint:LeaveOrganizationIntent a owl:Class ;
+    rdfs:subClassOf apint:RelationshipIntent ;
+    rdfs:label "LeaveOrganizationIntent" .
+
+apint:AssignRoleIntent a owl:Class ;
+    rdfs:subClassOf apint:RelationshipIntent ;
+    rdfs:label "AssignRoleIntent" .
+
+# ─── Consultation (spec 329 — org assistant member routing) ──────────
+# Layer-2 spine artifact ONLY: a ConsultationIntent DESCRIBES a routed org→member
+# consult; it is EXECUTED by the ADR-0044 Ring-0 loop over the A2A task rail —
+# never by the W1 marketplace resolver (the spine describes; the loop executes).
+
+apint:ConsultationIntent a owl:Class ;
+    rdfs:subClassOf apint:Intent ;
+    rdfs:label "ConsultationIntent" ;
+    rdfs:comment "An org's signed request that a specific member agent answer a discussion question. Layer-2 spine artifact; executed via the A2A task rail (spec 329), never the marketplace resolver. direction 'receive'; object = the consult-answer IRI; expressedBy the org SA; addressedTo exactly one member SA. Wire binding: `ap.consultation-intent.v1` ↔ this class (TS mirror: fabric ConsultationIntentV1)." .
+
+apint:MatchInitiation a owl:Class ;
+    rdfs:subClassOf prov:Activity ;
+    rdfs:label "MatchInitiation" ;
+    rdfs:comment "A broker's act of initiating a match between two compatible Intents. Distinct from IntentMatch (the accepted relation). Smart-agent SS-03 invariant." .
+
+apint:IntentMatch a owl:Class ;
+    rdfs:subClassOf prov:Activity ;
+    rdfs:label "IntentMatch" ;
+    rdfs:comment "An accepted compatibility relation between two Intents. Layer 7 of the spine. Smart-agent SS-02 invariant: both parties signal acceptance before promotion." .
+
+apint:Commitment a owl:Class ;
+    rdfs:subClassOf vf:Commitment ;
+    rdfs:label "Commitment" ;
+    rdfs:comment "A dual-signed envelope produced from an IntentMatch; the input to the Agreement layer (spec 241). Layer 7→8 bridge." .
+
+apint:Proposal a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Proposal" ;
+    rdfs:comment "A signed candidate solution to an expressed Intent. UniswapX-Order / CoW-Order-book-entry shape. Layer 5 of the spine. Pool Lane (W2)." .
+
+apint:SolverBid a owl:Class ;
+    rdfs:subClassOf apint:Proposal ;
+    rdfs:label "SolverBid" ;
+    rdfs:comment "A solver's competitive bid + match score + reason + predicted outcome + cost estimate + trust certificate. Layer 6 of the spine. CoW / UniswapX / ERC-7683 solver competition. Pool/Proposal Lane (W2)." .
+
+# ─── Intent properties ────────────────────────────────────────────────
+
+apint:direction a owl:DatatypeProperty ;
+    rdfs:domain apint:ResourceExchangeIntent ;
+    rdfs:range xsd:string ;
+    rdfs:label "direction" ;
+    rdfs:comment "'receive' or 'give'. Resource-exchange matching: direction MUST be opposite + object MUST be equal." .
+
+apint:object a owl:ObjectProperty ;
+    rdfs:domain apint:ResourceExchangeIntent ;
+    rdfs:range skos:Concept ;
+    rdfs:label "object" ;
+    rdfs:comment "SKOS concept for WHAT is wanted/offered (marketplace intents only)." .
+
+apint:topic a owl:DatatypeProperty ;
+    rdfs:domain apint:Intent ;
+    rdfs:range xsd:string ;
+    rdfs:label "topic" ;
+    rdfs:comment "DEPRECATED free-text refinement — use apint:about. Not apmsg:DiscussionTopic." .
+
+apint:about a owl:DatatypeProperty ;
+    rdfs:domain apint:Intent ;
+    rdfs:range xsd:string ;
+    rdfs:label "about" ;
+    rdfs:comment "Free-text aboutness refinement on an Intent. Distinct from apmsg:DiscussionTopic entity." .
+
+apint:expressedBy a owl:ObjectProperty ;
+    rdfs:domain apint:Intent ;
+    rdfs:range ap:Agent ;
+    rdfs:label "expressedBy" ;
+    rdfs:comment "The Agent SA address that signed the Intent." .
+
+apint:addressedTo a owl:ObjectProperty ;
+    rdfs:domain apint:Intent ;
+    rdfs:range ap:Agent ;
+    rdfs:label "addressedTo" ;
+    rdfs:comment "The intended recipients/audience of the Intent (broker, counterparty class, etc.)." .
+
+apint:hasConstraintSet a owl:ObjectProperty ;
+    rdfs:domain apint:Intent ;
+    rdfs:range apcst:ConstraintSet ;
+    rdfs:label "hasConstraintSet" ;
+    rdfs:comment "Anoma-CSP-shaped constraints. First-class typed structure, NOT freeform payload (D-38)." .
+
+apint:hasAssumptionSet a owl:ObjectProperty ;
+    rdfs:domain apint:Intent ;
+    rdfs:range apcst:AssumptionSet ;
+    rdfs:label "hasAssumptionSet" ;
+    rdfs:comment "Resolver-asserted assumptions (ERC-7683 pattern). Solvers MUST validate before bidding." .
+
+apint:expectedOutcome a owl:ObjectProperty ;
+    rdfs:domain apint:Intent ;
+    rdfs:range prov:Entity ;
+    rdfs:label "expectedOutcome" ;
+    rdfs:comment "What success looks like — referenced when constructing OutcomeCredential at Layer 13." .
+
+apint:visibility a owl:DatatypeProperty ;
+    rdfs:domain apint:Intent ;
+    rdfs:range xsd:string ;
+    rdfs:label "visibility" ;
+    rdfs:comment "Five-tier visibility: Public | PublicCoarse | PrivateCommitment | PrivateZK | OffchainOnly. Per privacy doc §4 Layer 2." .
+
+apint:status a owl:DatatypeProperty ;
+    rdfs:domain apint:Intent ;
+    rdfs:range xsd:string ;
+    rdfs:label "status" ;
+    rdfs:comment "Intent state-machine status (per spec 239 §5)." .
+
+apint:matchedWith a owl:ObjectProperty ;
+    rdfs:domain apint:IntentMatch ;
+    rdfs:range apint:Intent ;
+    rdfs:label "matchedWith" ;
+    rdfs:comment "An IntentMatch links exactly two compatible Intents (cardinality 2; enforced by SHACL in intent-marketplace)." .