@agenticprimitives/ontology 1.0.0-alpha.4 → 1.0.0-alpha.41

package/cbox/profile-facet-vocabulary.ttl

@@ -0,0 +1,50 @@
+# C-box — value spaces for the three public profile facets (spec 331; facet-registries G2/G3/G4).
+#
+# These are VALUE SPACES, not codelists: `atl:languages` and `atl:regions` draw from external,
+# maintained registries (IANA BCP-47, ISO 3166 / GeoFeatureRegistry) that must NOT be term-copied
+# into this repo (architecture invariant 11 — external schemes are ALIGNED, never copied; and a
+# copied ISO list is stale the day it is written). What is declared here is the SHAPE of a legal
+# value, the AUTHORITY it must be drawn from, and the MATCHING RULE — which is the part a matcher
+# has to agree on and the part nobody had written down.
+#
+# `atl:focusAreas` is deliberately OPEN. A focus area is an emphasis in a subject domain; closing
+# it would force advisors to file real specialisms under a nearest-fit code, which is precisely
+# the encoding hack spec 331 removes.
+
+@prefix approf: <https://agenticprimitives.dev/ns/profile#> .
+@prefix apctx:  <https://agenticprimitives.dev/ns/context#> .
+@prefix apg:    <https://agenticprimitives.dev/ns/geo#> .
+@prefix skos:   <http://www.w3.org/2004/02/skos/core#> .
+@prefix rdfs:   <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix dcterms: <http://purl.org/dc/terms/> .
+
+# ─── Languages — BCP-47, subtag-prefix matching ─────────────────────────────
+
+approf:LanguageValueSpace a skos:ConceptScheme ;
+    rdfs:label "atl:languages value space" ;
+    dcterms:source <https://www.rfc-editor.org/rfc/rfc5646> ;
+    skos:note "OPEN value space: any well-formed BCP-47 language tag, normalized LOWERCASE, comma-separated. 'es', 'en', 'pt-br', 'zh-hant'." ;
+    skos:scopeNote "MATCHING RULE (normative, and the reason this file exists): a query tag matches a published tag iff one is equal to the other OR is a SUBTAG PREFIX of it at a hyphen boundary. 'es' matches 'es-ES'; 'es-ES' does NOT match 'es' (the advisor declared a broader competence than was asked for, which is a match; the reverse is not). Substring comparison is FORBIDDEN — it makes 'en' match 'zh-Hant' via no meaningful relation, and lexical accident is the class of bug this migration exists to remove." ;
+    skos:historyNote "Registered on-chain as atl:languages in governor tx 0x53acec54d850b8a790da4feda055abf81a0c2f203c1a69d0644d1a1138a18789." .
+
+# ─── Regions — drawn from the GeoFeatureRegistry controlled vocabulary ──────
+
+approf:RegionValueSpace a skos:ConceptScheme ;
+    rdfs:label "atl:regions value space" ;
+    dcterms:source <https://www.iso.org/iso-3166-country-codes.html> ;
+    skos:related apg:geoKind ;
+    skos:note "SEMI-OPEN value space: comma-separated UPPERCASE codes, each of which MUST be either (a) an ISO 3166-1 alpha-2 country code, (b) an ISO 3166-2 subdivision code, or (c) the code of a feature registered in GeoFeatureRegistry (spec 251) — which is how supranational spaces such as EU enter the space at all. 'EU,ES,ES-CT'." ;
+    skos:scopeNote "WHY THE GEOFEATUREREGISTRY CONSTRAINT IS LOAD-BEARING: it is what makes a later upgrade to explicit (featureId, version) references a VALUE-SPACE migration inside one predicate, rather than a new predicate plus a new projector plus a new UI (facet-registries G3, 'forward compatibility'). A code that resolves to no registered feature and no ISO entry is a conformance FAILURE, not a free-text fallback." ;
+    skos:scopeNote "MATCHING RULE: exact, case-normalized SET MEMBERSHIP over the parsed code list. No containment, no substring, no hierarchy walk — 'ES' does NOT match 'ES-CT' and vice versa in v1, because GeoFeatureRegistry's coverageRoot (the structure that would justify containment) is not projected into the knowledge graph. Deriving EU ⊃ ES from the string is exactly the kind of inference the substring hack made by accident; it must be earned from projected coverage data, not guessed." ;
+    skos:scopeNote "RELATION COLLAPSE: the five apg:geoRelation values (servesWithin, operatesIn, licensedIn, residentOf, originIn) collapse into one flat list here. Publishers SHOULD derive the published set from their servesWithin and licensedIn claims only — operatesIn, residentOf and originIn are about the advisor's own location, not about who they can serve, and publishing them here misrepresents coverage." ;
+    skos:historyNote "Registered on-chain as atl:regions in the same governor tx as atl:languages." .
+
+# ─── Focus areas — deliberately open ────────────────────────────────────────
+
+approf:FocusAreaValueSpace a skos:ConceptScheme ;
+    rdfs:label "atl:focusAreas value space" ;
+    skos:related apctx:KnowledgeDomain ;
+    skos:note "OPEN value space: comma-separated lowercase-hyphenated subject labels. 'modelo-720', 'forced-heirship', 'farmland'." ;
+    skos:scopeNote "MATCHING RULE: token-level containment in EITHER direction between a query term and a published label, contributing a CAPPED fitScore boost. This is deliberately the one lexical rule spec 331 keeps, and it is safe precisely because of the next constraint." ;
+    skos:scopeNote "NEVER A HARD FILTER (normative, facet-registries G4). A focus area is an emphasis, not a boundary. An agent that has not published one is UNKNOWN, not absent — and eliminating an unknown is the failure mode that made mandates.geo worse than having no geo filter at all. Any mandate that filters on focusAreas is a defect." ;
+    skos:scopeNote "A focus area is a subject domain (apctx:KnowledgeDomain), never a declared capability. Publishing 'farmland' here rather than in atl:skills is the concrete form of ADR-0051 in this substrate: an asset class is a thing you know ABOUT, not an outcome you can achieve." .

package/cbox/registry-vocabulary.ttl

@@ -0,0 +1,86 @@
+# C-box — registry core controlled vocabularies (spec 346 §7).
+# Closed SKOS codelists mirrored by registry-kit's TS unions: AdmissionCheck (§7.2),
+# RegistryLifecycleEventKind (§7.3), RegistryEntryStatusV1.current (§7.4). The .ttl is the source of
+# truth; the TS unions mirror it (spec 225 drift rule — never hand-duplicate as TS arrays here).
+
+@prefix apreg: <https://agenticprimitives.dev/ns/registry#> .
+@prefix skos:  <http://www.w3.org/2004/02/skos/core#> .
+@prefix rdfs:  <http://www.w3.org/2000/01/rdf-schema#> .
+
+# ─── admissionCheck — the 10 steps of the admission pipeline (§7.1/§7.2) ──
+# Every check produces a line in the receipt whether it passed, failed, or was NOT ATTEMPTED —
+# "not verified" is a first-class outcome, never silently equal to "verified".
+apreg:admissionCheckScheme a skos:ConceptScheme ;
+    rdfs:label "admissionCheck" ;
+    rdfs:comment "registry-kit AdmissionCheck: binding-proof card-bundle publication endpoint-control derived-type suffix-consistency authority-proof delegation-live claim-slot shape. A RegistrationReceipt lists each exactly once across verifiedCheck / failedCheck / notVerifiedCheck." ;
+    skos:hasTopConcept apreg:BindingProofCheck, apreg:CardBundleCheck, apreg:PublicationCheck,
+        apreg:EndpointControlCheck, apreg:DerivedTypeCheck, apreg:SuffixConsistencyCheck,
+        apreg:AuthorityProofCheck, apreg:DelegationLiveCheck, apreg:ClaimSlotCheck, apreg:ShapeCheck .
+apreg:BindingProofCheck      a skos:Concept ; skos:inScheme apreg:admissionCheckScheme ; skos:prefLabel "binding-proof" ;
+    rdfs:comment "verifyEntryBindingProof — the subject SA's ERC-1271 signature over registryId/entryId/subject/cardHash/claimHashes." .
+apreg:CardBundleCheck        a skos:Concept ; skos:inScheme apreg:admissionCheckScheme ; skos:prefLabel "card-bundle" ;
+    rdfs:comment "verifySignedAgentCardBundle." .
+apreg:PublicationCheck       a skos:Concept ; skos:inScheme apreg:admissionCheckScheme ; skos:prefLabel "publication" ;
+    rdfs:comment "verifyPublication — the current sequenced AgentServicePublication (spec 338)." .
+apreg:EndpointControlCheck   a skos:Concept ; skos:inScheme apreg:admissionCheckScheme ; skos:prefLabel "endpoint-control" ;
+    rdfs:comment "verifyEndpointControl." .
+apreg:DerivedTypeCheck       a skos:Concept ; skos:inScheme apreg:admissionCheckScheme ; skos:prefLabel "derived-type" ;
+    rdfs:comment "The on-chain ap:agentType / ap:serviceRole record satisfies the §2.3 invariant." .
+apreg:SuffixConsistencyCheck a skos:Concept ; skos:inScheme apreg:admissionCheckScheme ; skos:prefLabel "suffix-consistency" ;
+    rdfs:comment "derivedTypeForTld(suffix) == agentType and rootClassForDerivedType(agentType) == the name node's agentKind." .
+apreg:AuthorityProofCheck    a skos:Concept ; skos:inScheme apreg:admissionCheckScheme ; skos:prefLabel "authority-proof" ;
+    rdfs:comment "The per-archetype authority proof (§7.1 table)." .
+apreg:DelegationLiveCheck    a skos:Concept ; skos:inScheme apreg:admissionCheckScheme ; skos:prefLabel "delegation-live" ;
+    rdfs:comment "DelegationLivenessPort — the operatedBy / charter / governor delegation is live." .
+apreg:ClaimSlotCheck         a skos:Concept ; skos:inScheme apreg:admissionCheckScheme ; skos:prefLabel "claim-slot" ;
+    rdfs:comment "Claim-slot attestations satisfy the RegistryKitProfile's required slots." .
+apreg:ShapeCheck             a skos:Concept ; skos:inScheme apreg:admissionCheckScheme ; skos:prefLabel "shape" ;
+    rdfs:comment "SHACL / shape validation of the fetched artifacts." .
+
+# ─── lifecycleEventKind — the append-only log vocabulary (§7.3) ────────
+apreg:lifecycleEventScheme a skos:ConceptScheme ;
+    rdfs:label "lifecycleEventKind" ;
+    rdfs:comment "registry-kit RegistryLifecycleEventKind. The on-chain AgentRegistryBase events remain the PUBLIC facts; the log adds the off-chain evidence chain. AGENT_REVOKED = the subject SA is compromised/retired (a 'compromised' publication)." ;
+    skos:hasTopConcept apreg:NAME_CLAIMED, apreg:NAME_RELEASED, apreg:CONTEXTUAL_NAME_ISSUED, apreg:CONTEXTUAL_NAME_REVOKED,
+        apreg:CARD_REGISTERED, apreg:CARD_UPDATED, apreg:PUBLICATION_UPDATED, apreg:DEPLOYMENT_UPDATED,
+        apreg:OFFERING_REGISTERED, apreg:OFFERING_WITHDRAWN,
+        apreg:ENTRY_REGISTERED, apreg:ENTRY_RENEWED, apreg:ENTRY_SUSPENDED, apreg:ENTRY_REVOKED, apreg:ENTRY_EXPIRED,
+        apreg:REVALIDATION_PASSED, apreg:REVALIDATION_FAILED, apreg:AGENT_REVOKED .
+apreg:NAME_CLAIMED            a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "NAME_CLAIMED" .
+apreg:NAME_RELEASED           a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "NAME_RELEASED" .
+apreg:CONTEXTUAL_NAME_ISSUED  a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "CONTEXTUAL_NAME_ISSUED" ;
+    rdfs:comment "Private issuance — logged by DIGEST only (refs.issuanceDigest); the issuance record stays in the context vault." .
+apreg:CONTEXTUAL_NAME_REVOKED a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "CONTEXTUAL_NAME_REVOKED" .
+apreg:CARD_REGISTERED         a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "CARD_REGISTERED" .
+apreg:CARD_UPDATED            a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "CARD_UPDATED" .
+apreg:PUBLICATION_UPDATED     a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "PUBLICATION_UPDATED" ;
+    rdfs:comment "A new AgentServicePublication sequence." .
+apreg:DEPLOYMENT_UPDATED      a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "DEPLOYMENT_UPDATED" ;
+    rdfs:comment "New deployment bindings (hosts / A2A paths) on the publication." .
+apreg:OFFERING_REGISTERED     a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "OFFERING_REGISTERED" .
+apreg:OFFERING_WITHDRAWN      a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "OFFERING_WITHDRAWN" .
+apreg:ENTRY_REGISTERED        a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "ENTRY_REGISTERED" .
+apreg:ENTRY_RENEWED           a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "ENTRY_RENEWED" .
+apreg:ENTRY_SUSPENDED         a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "ENTRY_SUSPENDED" .
+apreg:ENTRY_REVOKED           a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "ENTRY_REVOKED" .
+apreg:ENTRY_EXPIRED           a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "ENTRY_EXPIRED" .
+apreg:REVALIDATION_PASSED     a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "REVALIDATION_PASSED" .
+apreg:REVALIDATION_FAILED     a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "REVALIDATION_FAILED" .
+apreg:AGENT_REVOKED           a skos:Concept ; skos:inScheme apreg:lifecycleEventScheme ; skos:prefLabel "AGENT_REVOKED" .
+
+# ─── entryStatus — the DERIVED revalidation status (§7.4) ──────────────
+# Distinct IRIs from the on-chain apreg:RegistryLifecycleStatus individuals (active / suspended /
+# revoked / expired / pending in tbox/registry.ttl): that one is a public chain FACT, this one is a
+# pure fold over the event history under a revalidation policy — never a hand-written flag.
+apreg:entryStatusScheme a skos:ConceptScheme ;
+    rdfs:label "entryStatus" ;
+    rdfs:comment "registry-kit RegistryEntryStatusV1.current: verified stale failing suspended revoked expired. deriveEntryStatus(events, policy, now) — status is derived from history, never written by hand." ;
+    skos:hasTopConcept apreg:EntryVerified, apreg:EntryStale, apreg:EntryFailing, apreg:EntrySuspended, apreg:EntryRevoked, apreg:EntryExpired .
+apreg:EntryVerified  a skos:Concept ; skos:inScheme apreg:entryStatusScheme ; skos:prefLabel "verified" .
+apreg:EntryStale     a skos:Concept ; skos:inScheme apreg:entryStatusScheme ; skos:prefLabel "stale" ;
+    rdfs:comment "Revalidation overdue (nextDueAt passed) with no failure yet." .
+apreg:EntryFailing   a skos:Concept ; skos:inScheme apreg:entryStatusScheme ; skos:prefLabel "failing" ;
+    rdfs:comment "A revalidation check failed (e.g. a rolled-back, expired or non-active publication); policy decides suspension." .
+apreg:EntrySuspended a skos:Concept ; skos:inScheme apreg:entryStatusScheme ; skos:prefLabel "suspended" .
+apreg:EntryRevoked   a skos:Concept ; skos:inScheme apreg:entryStatusScheme ; skos:prefLabel "revoked" .
+apreg:EntryExpired   a skos:Concept ; skos:inScheme apreg:entryStatusScheme ; skos:prefLabel "expired" .

package/cbox/run-measures-shapes.shacl.ttl

@@ -0,0 +1,59 @@
+# C-box — SHACL shapes for a run's MEASUREMENTS record (`run.measures:<runRef>`, spec 414 A2).
+#
+# A measurement is a number about a run or a step, computed from its trace alone. These shapes say what makes such a
+# record valid AS EVIDENCE: each measurement is computed ON something (M1), of a DECLARED metric (M1), with a value and
+# a unit (M1), generated by the measuring (M1); the record is derived from the run's provenance bundle and attributed
+# (M2); and it carries NO WORDS — a measurement's only literals are its value and its unit (M3). Never permission: no
+# verifier reads these shapes or the record. They run in CI over records the serializer built, and over the twins.
+
+@prefix apeval: <https://agenticprimitives.dev/ns/evaluation#> .
+@prefix dqv:    <http://www.w3.org/ns/dqv#> .
+@prefix prov:   <http://www.w3.org/ns/prov#> .
+@prefix sh:     <http://www.w3.org/ns/shacl#> .
+@prefix rdfs:   <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix xsd:    <http://www.w3.org/2001/XMLSchema#> .
+
+apeval:RunMeasurementShape a sh:NodeShape ;
+  rdfs:label "M1 — a measurement is of a declared metric, on something, with a value, a unit and its generation" ;
+  sh:targetClass apeval:RunMeasurement ;
+  sh:property [ sh:path dqv:computedOn ; sh:minCount 1 ; sh:maxCount 1 ; sh:nodeKind sh:IRI ;
+    sh:message "M1: a measurement is computed on nothing (dqv:computedOn) — a number about no run is not evidence (spec 414 A2)." ] ;
+  sh:property [ sh:path dqv:value ; sh:minCount 1 ; sh:maxCount 1 ; sh:datatype xsd:decimal ;
+    sh:message "M1: a measurement carries no decimal value (spec 414 A2)." ] ;
+  sh:property [ sh:path apeval:unit ; sh:minCount 1 ; sh:maxCount 1 ; sh:in ( "ms" "{count}" "1" ) ;
+    sh:message "M1: a measurement carries no unit, or one outside the declared UCUM codes (ms · {count} · 1) (spec 414 A2)." ] ;
+  sh:property [ sh:path prov:wasGeneratedBy ; sh:minCount 1 ; sh:class apeval:Measuring ;
+    sh:message "M1: a measurement names no measuring that generated it (spec 414 A2)." ] ;
+  sh:property [ sh:path dqv:isMeasurementOf ; sh:minCount 1 ; sh:maxCount 1 ;
+    sh:message "M1: a measurement names no metric (spec 414 A2)." ] ;
+  sh:sparql [
+    sh:message "M1: a measurement names a metric that is not in the declared scheme — a metric is declared once, in the T-box, and code names it by notation (spec 414 §2 rule 4)." ;
+    sh:select """
+      SELECT $this ?m WHERE {
+        $this <http://www.w3.org/ns/dqv#isMeasurementOf> ?m .
+        FILTER NOT EXISTS { ?m <http://www.w3.org/2004/02/skos/core#inScheme> <https://agenticprimitives.dev/ns/evaluation#Metrics> }
+      }
+    """ ;
+  ] .
+
+apeval:RunMeasuresShape a sh:NodeShape ;
+  rdfs:label "M2 — the record derives from the run's bundle and is attributed" ;
+  sh:targetClass apeval:RunMeasures ;
+  sh:property [ sh:path prov:wasDerivedFrom ; sh:minCount 1 ; sh:nodeKind sh:IRI ;
+    sh:message "M2: the measurements derive from no run bundle — numbers about an unnamed run (spec 414 A2)." ] ;
+  sh:property [ sh:path prov:wasAttributedTo ; sh:minCount 1 ; sh:nodeKind sh:IRI ;
+    sh:message "M2: the measurements are attributed to no agent — whose record is this? (spec 414 A2)." ] .
+
+apeval:NoWordsInMeasurementsShape a sh:NodeShape ;
+  rdfs:label "M3 — a measurement's only literals are its value and its unit" ;
+  sh:targetClass apeval:RunMeasurement ;
+  sh:sparql [
+    sh:message "M3: a measurement carries a literal other than its value and its unit — a measurement is a number, never a sentence (spec 414 §2 rule 6)." ;
+    sh:select """
+      SELECT $this ?p ?v WHERE {
+        $this ?p ?v .
+        FILTER(isLiteral(?v))
+        FILTER(?p NOT IN (<http://www.w3.org/ns/dqv#value>, <https://agenticprimitives.dev/ns/evaluation#unit>))
+      }
+    """ ;
+  ] .

package/cbox/run-provenance-shapes.shacl.ttl

@@ -0,0 +1,264 @@
+# C-box — SHACL shapes for a harness run's provenance record (spec 389 W2).
+#
+# WHAT THESE ARE AND ARE NOT. A run's vault record (`run.provenance:<runRef>`) is a PROV graph: one
+# ep-plan:ExecutionTraceBundle holding the run (apexec:ServiceExecution), its steps, what they used and
+# what they generated. These shapes say what makes such a graph VALID AS EVIDENCE — a step that ended
+# before it started, a completed capability step with no mandate behind it, a completed step with no
+# receipt, a reference to nothing, a member missing from the bundle, a literal that carries an address —
+# each is a record that reads fine today and cannot be trusted in a year.
+#
+# NEVER PERMISSION. Conformance does not mean the run was authorized, and a REFUSED step is fully
+# shape-valid (R3 targets only COMPLETED capability steps): refusing to record a refusal would delete the
+# evidence an audit most needs (ADR-0058's rule, unchanged). No verifier reads these shapes or the record
+# they validate (spec 354 §1 / ADR-0041). They run in CI over records the projector built, and over the
+# forged / truncated / leaking twins that must fail them.
+#
+# ENGINE NOTES. One sh:sparql per NodeShape (shacl-engine compiles them as one unit). sh:targetClass
+# relies on the rdfs:subClassOf* closure the house harness materializes. R5 and R6 are scoped to the
+# bundle's own members (`ep-plan:hasTraceElement`) so the T-box unioned into the data graph — whose
+# comments legitimately quote addresses — is never in scope.
+
+@prefix apexec:  <https://agenticprimitives.dev/ns/execution#> .
+@prefix apvr:    <https://agenticprimitives.dev/ns/verification-receipt#> .
+@prefix prov:    <http://www.w3.org/ns/prov#> .
+@prefix p-plan:  <http://purl.org/net/p-plan#> .
+@prefix ep-plan: <https://w3id.org/ep-plan#> .
+@prefix sh:      <http://www.w3.org/ns/shacl#> .
+@prefix rdfs:    <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix xsd:     <http://www.w3.org/2001/XMLSchema#> .
+
+# ─── R1 · temporal order ─────────────────────────────────────────────────────
+
+apexec:ActivityTemporalOrderShape a sh:NodeShape ;
+  rdfs:label "R1a — an activity ends no earlier than it starts" ;
+  sh:targetClass prov:Activity ;
+  sh:sparql [
+    sh:message "R1: the activity ended before it started — a record with time running backwards is not evidence (spec 389 W2)." ;
+    sh:select """
+      SELECT $this ?started ?ended WHERE {
+        $this <http://www.w3.org/ns/prov#startedAtTime> ?started ;
+              <http://www.w3.org/ns/prov#endedAtTime> ?ended .
+        FILTER(STR(?ended) < STR(?started))
+      }
+    """ ;
+  ] .
+
+apexec:RunTemporalOrderShape a sh:NodeShape ;
+  rdfs:label "R1b — a step ends no later than its run" ;
+  sh:targetClass apexec:ServiceExecution ;
+  sh:sparql [
+    sh:message "R1: a step of this run ended after the run itself ended (spec 389 W2)." ;
+    sh:select """
+      SELECT $this ?step ?stepEnd ?runEnd WHERE {
+        $this <https://agenticprimitives.dev/ns/execution#hasStep> ?step ;
+              <http://www.w3.org/ns/prov#endedAtTime> ?runEnd .
+        ?step <http://www.w3.org/ns/prov#endedAtTime> ?stepEnd .
+        FILTER(STR(?stepEnd) > STR(?runEnd))
+      }
+    """ ;
+  ] .
+
+# ─── R2 · references resolve; generation is mutual ──────────────────────────
+
+apexec:StepUsageResolvableShape a sh:NodeShape ;
+  rdfs:label "R2 — what a step used is in the graph; what it generated points back" ;
+  sh:targetClass prov:Activity ;
+  sh:sparql [
+    sh:message "R2: the activity used or generated something the graph does not describe — a reference to nothing, or a generated entity that does not name this activity as its generator (spec 389 W2)." ;
+    sh:select """
+      SELECT $this ?ref WHERE {
+        {
+          { $this <http://www.w3.org/ns/prov#used> ?ref } UNION { $this <https://agenticprimitives.dev/ns/verification-receipt#usedDelegation> ?ref }
+          FILTER NOT EXISTS { ?ref a ?anyType }
+        }
+        UNION
+        {
+          $this <http://www.w3.org/ns/prov#generated> ?ref .
+          FILTER NOT EXISTS { ?ref <http://www.w3.org/ns/prov#wasGeneratedBy> $this }
+        }
+      }
+    """ ;
+  ] .
+
+# ─── R3 · a completed capability step ran under a mandate that allowed it ────
+
+apexec:CapabilityStepMandateShape a sh:NodeShape ;
+  rdfs:label "R3 — a completed capability step presented a mandate and the verdict was allow" ;
+  sh:target [
+    sh:select """
+      SELECT ?this WHERE {
+        ?this <https://agenticprimitives.dev/ns/execution#realizesCapability> ?cap ;
+              <https://agenticprimitives.dev/ns/execution#completionState> <https://agenticprimitives.dev/ns/execution#Completed> .
+      }
+    """ ;
+  ] ;
+  sh:property [
+    sh:path apvr:usedDelegation ;
+    sh:minCount 1 ; sh:nodeKind sh:IRI ;
+    sh:message "R3: a COMPLETED capability step names no mandate (apvr:usedDelegation) — a consequential act with nothing behind it is a forged record, not a run (spec 389 W2; spec 350: every consequential step presents a mandate)." ;
+  ] ;
+  sh:property [
+    sh:path apexec:authorityDecision ;
+    sh:minCount 1 ; sh:in ( "allow" ) ;
+    sh:message "R3: a COMPLETED capability step records a verdict other than allow — a step that completed under a deny is a record that contradicts itself (spec 389 W2)." ;
+  ] .
+
+# ─── R4 · a completed step left its receipt ──────────────────────────────────
+
+apexec:CompletedStepReceiptShape a sh:NodeShape ;
+  rdfs:label "R4 — a completed step carries its receipt digest and generated its receipt" ;
+  sh:target [
+    sh:select """
+      SELECT ?this WHERE {
+        ?this <http://purl.org/net/p-plan#correspondsToStep> ?planStep ;
+              <https://agenticprimitives.dev/ns/execution#completionState> <https://agenticprimitives.dev/ns/execution#Completed> .
+      }
+    """ ;
+  ] ;
+  sh:property [
+    sh:path apexec:receiptDigest ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:datatype xsd:string ; sh:pattern "^0x[0-9a-f]{64}$" ;
+    sh:message "R4: a COMPLETED step carries no receipt digest (or not a sha256) — the receipt is the commitment to what was done; without it the step is a claim (spec 389 W2; spec 381)." ;
+  ] ;
+  sh:sparql [
+    sh:message "R4: a COMPLETED step generated no apexec:StepReceipt entity — the digest on the activity and the receipt in the graph must both be there (spec 389 W2)." ;
+    sh:select """
+      SELECT $this WHERE {
+        FILTER NOT EXISTS {
+          $this <http://www.w3.org/ns/prov#generated> ?r .
+          ?r a <https://agenticprimitives.dev/ns/execution#StepReceipt> .
+        }
+      }
+    """ ;
+  ] .
+
+# ─── R5 · every node of the run is a member of its bundle ────────────────────
+
+apexec:ExecutionTraceBundleMembershipShape a sh:NodeShape ;
+  rdfs:label "R5 — every activity, agent and entity of the run is a hasTraceElement of the bundle" ;
+  sh:targetClass ep-plan:ExecutionTraceBundle ;
+  sh:property [
+    sh:path prov:wasAttributedTo ;
+    sh:minCount 1 ; sh:nodeKind sh:IRI ;
+    sh:message "R5: the bundle is attributed to no agent — whose record is this? (spec 389 W2; the vault it lives in is the acting agent's)." ;
+  ] ;
+  sh:sparql [
+    sh:message "R5: a node of the run is not a member of its bundle (ep-plan:hasTraceElement) — a graph whose members are not listed cannot be checked for what it omits (spec 389 W2)." ;
+    sh:select """
+      SELECT $this ?node WHERE {
+        { ?node a <http://www.w3.org/ns/prov#Activity> } UNION { ?node a <http://www.w3.org/ns/prov#Entity> } UNION { ?node a <http://www.w3.org/ns/prov#Agent> }
+        FILTER(?node != $this)
+        FILTER NOT EXISTS { $this <https://w3id.org/ep-plan#hasTraceElement> ?node }
+        FILTER NOT EXISTS { ?node a <http://www.w3.org/2002/07/owl#Class> }
+      }
+    """ ;
+  ] .
+
+# ─── R6 · no plaintext: no address, no long literal, among the bundle's members ─
+
+apexec:NoPlaintextInRunProvenanceShape a sh:NodeShape ;
+  rdfs:label "R6 — no literal of the run carries an address or a body" ;
+  sh:targetClass ep-plan:ExecutionTraceBundle ;
+  sh:sparql [
+    sh:message "R6: a literal in the run's provenance carries a Smart Agent address or is long enough to be a body — the record says what was done, never what it was about; a payee is a digest away from a receipt (spec 381 §1 / spec 389 W2)." ;
+    sh:select """
+      SELECT $this ?node ?p ?v WHERE {
+        { $this <https://w3id.org/ep-plan#hasTraceElement> ?node } UNION { BIND($this AS ?node) }
+        ?node ?p ?v .
+        FILTER(isLiteral(?v))
+        FILTER(REGEX(STR(?v), "(^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{40}([^0-9a-fA-F]|$)") || STRLEN(STR(?v)) > 256)
+      }
+    """ ;
+  ] .
+
+# ═══ Spec 414 A1 — the trace from the door ═══════════════════════════════════════════════════════
+# Every run says how it arrived and under which variant (R9, R10) — the hard switch: a run without them
+# is a record a comparison cannot place. A model call carries ids and numbers only (R8). An engagement
+# names a capability of the declared scheme and an effect of the declared list (R11). R7 (a capability
+# step names its SKILL.md contract) waits for the compiler to say which contract each tool came from
+# (spec 415 §4.1, S1).
+
+apexec:ModelInvocationIdsOnlyShape a sh:NodeShape ;
+  rdfs:label "R8 — a model invocation carries a role, and literals that are ids and numbers only" ;
+  sh:targetClass apexec:ModelInvocation ;
+  sh:property [
+    sh:path apexec:invocationRole ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:in ( "plan" "compose" "structured" ) ;
+    sh:message "R8: a model invocation names no role (plan | compose | structured) — a call nobody can place is noise, not evidence (spec 414 A1)." ;
+  ] ;
+  sh:sparql [
+    sh:message "R8: a model invocation carries a literal outside its declared facts — a prompt, a reply or a rationale has no place in the record; only ids, digests and numbers do (spec 414 §2 rule 6; spec 381 §1)." ;
+    sh:select """
+      SELECT $this ?p ?v WHERE {
+        $this ?p ?v .
+        FILTER(isLiteral(?v))
+        FILTER(?p NOT IN (
+          <https://agenticprimitives.dev/ns/execution#invocationRole>, <https://agenticprimitives.dev/ns/execution#modelId>,
+          <https://agenticprimitives.dev/ns/execution#modelProvider>, <https://agenticprimitives.dev/ns/execution#promptTemplateDigest>,
+          <https://agenticprimitives.dev/ns/execution#tokensIn>, <https://agenticprimitives.dev/ns/execution#tokensOut>,
+          <https://agenticprimitives.dev/ns/execution#routeReason>, <https://agenticprimitives.dev/ns/execution#endedAt>,
+          <https://agenticprimitives.dev/ns/execution#traceId>, <https://agenticprimitives.dev/ns/execution#spanId>,
+          <http://www.w3.org/ns/prov#startedAtTime>, <http://www.w3.org/ns/prov#endedAtTime>
+        ))
+      }
+    """ ;
+  ] .
+
+apexec:RunArrivedByDoorShape a sh:NodeShape ;
+  rdfs:label "R9 — every run names the door it arrived by" ;
+  sh:targetClass apexec:ServiceExecution ;
+  sh:property [
+    sh:path apexec:arrivedBy ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:class apexec:Door ;
+    sh:message "R9: the run names no door (apexec:arrivedBy → apexec:Door) — every intent enters by one, and a trace that cannot say which is not a trace from the door (spec 414 A1)." ;
+  ] .
+
+apexec:DoorKindShape a sh:NodeShape ;
+  rdfs:label "R9 — a door says what kind it is" ;
+  sh:targetClass apexec:Door ;
+  sh:property [
+    sh:path apexec:doorKind ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:in ( "a2a-message" "harness-ask" "routed" "trigger" "resume" "home-mcp" "channel-mention" ) ;
+    sh:message "R9: a door names no kind, or one outside the declared list (spec 414 A1)." ;
+  ] .
+
+apexec:RunUnderVariantShape a sh:NodeShape ;
+  rdfs:label "R10 — every run names the variant it ran under, by digest" ;
+  sh:targetClass apexec:ServiceExecution ;
+  sh:property [
+    sh:path apexec:underVariant ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:class apexec:Variant ;
+    sh:message "R10: the run names no variant — without one no comparison can place it and no effectiveness reading can slice it (spec 414 §7)." ;
+  ] .
+
+apexec:VariantDigestShape a sh:NodeShape ;
+  rdfs:label "R10 — a variant is named by a sha256 digest" ;
+  sh:targetClass apexec:Variant ;
+  sh:property [
+    sh:path apexec:variantDigest ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:pattern "^sha256:[0-9a-f]{64}$" ;
+    sh:message "R10: a variant carries no sha256 digest — two runs share a variant exactly when their digests are equal (spec 414 A1)." ;
+  ] .
+
+apexec:CapabilityEngagementShape a sh:NodeShape ;
+  rdfs:label "R11 — an engagement names a declared harness capability and a declared effect" ;
+  sh:targetClass apexec:CapabilityEngagement ;
+  sh:property [
+    sh:path apexec:engagementEffect ;
+    sh:minCount 1 ; sh:maxCount 1 ; sh:class apexec:EngagementEffect ;
+    sh:message "R11: an engagement names no effect from the declared list (changed-plan | changed-step | no-change | refused) (spec 414 §3.2)." ;
+  ] ;
+  sh:sparql [
+    sh:message "R11: an engagement names a harness capability that is not in the declared scheme — a capability is declared once, in the T-box, and code stamps it by notation (spec 414 §2 rule 4)." ;
+    sh:select """
+      SELECT $this ?c WHERE {
+        $this <https://agenticprimitives.dev/ns/execution#ofCapability> ?c .
+        FILTER NOT EXISTS { ?c <http://www.w3.org/2004/02/skos/core#inScheme> <https://agenticprimitives.dev/ns/execution#HarnessCapabilities> }
+      }
+    """ ;
+  ] ;
+  sh:property [
+    sh:path apexec:ofCapability ;
+    sh:minCount 1 ; sh:maxCount 1 ;
+    sh:message "R11: an engagement names no harness capability (spec 414 §3.2)." ;
+  ] .

package/cbox/scope-vocabulary.ttl

@@ -0,0 +1,112 @@
+# C-box — AP-Scope-V1 controlled vocabularies (spec 308 / G-8). The SMALL,
+# BORING, verifier-friendly scope vocabulary the article's adoption critique
+# demands: closed SKOS codelists for action/resource/purpose classes, reliance
+# classes, revocation modes, and value-limit kinds — plus the machine-readable
+# reliance PROFILE (each RelianceClass carries its required revocation mode +
+# verifier obligations as annotations).
+#
+# NEUTRAL substrate — no vertical vocabulary (ADR-0021). Deliberately coarse:
+# abstract classes over precise values (the W3C ageOver-not-birthdate rule
+# applied to agent authority). External adoption beats semantic perfection.
+
+@prefix apscope: <https://agenticprimitives.dev/ns/scope#> .
+@prefix skos:    <http://www.w3.org/2004/02/skos/core#> .
+@prefix rdfs:    <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix xsd:     <http://www.w3.org/2001/XMLSchema#> .
+
+# ─── actionClass — what KIND of act the authority covers ────────────────
+apscope:actionClass a skos:ConceptScheme ;
+    rdfs:label "actionClass" ;
+    rdfs:comment "Coarse verb classes for delegated authority. A scope names classes, not tool names — tool names are per-deployment; classes are cross-party." ;
+    skos:hasTopConcept apscope:Read, apscope:Write, apscope:Purchase, apscope:Transfer,
+        apscope:Publish, apscope:Disclose, apscope:Sign, apscope:Schedule, apscope:Cancel .
+apscope:Read     a skos:Concept ; skos:inScheme apscope:actionClass ; skos:prefLabel "read" .
+apscope:Write    a skos:Concept ; skos:inScheme apscope:actionClass ; skos:prefLabel "write" .
+apscope:Purchase a skos:Concept ; skos:inScheme apscope:actionClass ; skos:prefLabel "purchase" .
+apscope:Transfer a skos:Concept ; skos:inScheme apscope:actionClass ; skos:prefLabel "transfer" .
+apscope:Publish  a skos:Concept ; skos:inScheme apscope:actionClass ; skos:prefLabel "publish" .
+apscope:Disclose a skos:Concept ; skos:inScheme apscope:actionClass ; skos:prefLabel "disclose" .
+apscope:Sign     a skos:Concept ; skos:inScheme apscope:actionClass ; skos:prefLabel "sign" .
+apscope:Schedule a skos:Concept ; skos:inScheme apscope:actionClass ; skos:prefLabel "schedule" .
+apscope:Cancel   a skos:Concept ; skos:inScheme apscope:actionClass ; skos:prefLabel "cancel" .
+
+# ─── resourceClass — what KIND of thing it touches ──────────────────────
+apscope:resourceClass a skos:ConceptScheme ;
+    rdfs:label "resourceClass" ;
+    skos:hasTopConcept apscope:AccountResource, apscope:PaymentResource, apscope:PiiResource,
+        apscope:RecordResource, apscope:BookingResource, apscope:ContentResource,
+        apscope:CredentialResource, apscope:ToolResource .
+apscope:AccountResource    a skos:Concept ; skos:inScheme apscope:resourceClass ; skos:prefLabel "account" .
+apscope:PaymentResource    a skos:Concept ; skos:inScheme apscope:resourceClass ; skos:prefLabel "payment" .
+apscope:PiiResource        a skos:Concept ; skos:inScheme apscope:resourceClass ; skos:prefLabel "pii" .
+apscope:RecordResource     a skos:Concept ; skos:inScheme apscope:resourceClass ; skos:prefLabel "record" .
+apscope:BookingResource    a skos:Concept ; skos:inScheme apscope:resourceClass ; skos:prefLabel "booking" .
+apscope:ContentResource    a skos:Concept ; skos:inScheme apscope:resourceClass ; skos:prefLabel "content" .
+apscope:CredentialResource a skos:Concept ; skos:inScheme apscope:resourceClass ; skos:prefLabel "credential" .
+apscope:ToolResource       a skos:Concept ; skos:inScheme apscope:resourceClass ; skos:prefLabel "tool" .
+
+# ─── purposeClass — WHY (mirrors the DecryptGrant/entitlement purpose seam) ─
+apscope:purposeClass a skos:ConceptScheme ;
+    rdfs:label "purposeClass" ;
+    skos:hasTopConcept apscope:Support, apscope:Fulfillment, apscope:Research,
+        apscope:Billing, apscope:Compliance .
+apscope:Support     a skos:Concept ; skos:inScheme apscope:purposeClass ; skos:prefLabel "support" .
+apscope:Fulfillment a skos:Concept ; skos:inScheme apscope:purposeClass ; skos:prefLabel "fulfillment" .
+apscope:Research    a skos:Concept ; skos:inScheme apscope:purposeClass ; skos:prefLabel "research" .
+apscope:Billing     a skos:Concept ; skos:inScheme apscope:purposeClass ; skos:prefLabel "billing" .
+apscope:Compliance  a skos:Concept ; skos:inScheme apscope:purposeClass ; skos:prefLabel "compliance" .
+
+# ─── valueLimitKind — the SHAPE of a value cap (values live in caveats) ──
+apscope:valueLimitKind a skos:ConceptScheme ;
+    rdfs:label "valueLimitKind" ;
+    skos:hasTopConcept apscope:PerCall, apscope:Cumulative, apscope:Periodic, apscope:Category .
+apscope:PerCall    a skos:Concept ; skos:inScheme apscope:valueLimitKind ; skos:prefLabel "per-call" .
+apscope:Cumulative a skos:Concept ; skos:inScheme apscope:valueLimitKind ; skos:prefLabel "cumulative" .
+apscope:Periodic   a skos:Concept ; skos:inScheme apscope:valueLimitKind ; skos:prefLabel "periodic" .
+apscope:Category   a skos:Concept ; skos:inScheme apscope:valueLimitKind ; skos:prefLabel "category" .
+
+# ─── revocationMode — HOW currency-of-authority is checked (ONE per class) ─
+apscope:revocationMode a skos:ConceptScheme ;
+    rdfs:label "revocationMode" ;
+    rdfs:comment "One required mode per reliance class (ADR-0013 — never a ladder). emergency-stop is NOT a class mode: it is an override every class honors." ;
+    skos:hasTopConcept apscope:ChainPull, apscope:StatusList, apscope:Accumulator,
+        apscope:ShortLived, apscope:EmergencyStop .
+apscope:ChainPull     a skos:Concept ; skos:inScheme apscope:revocationMode ; skos:prefLabel "chain-pull" ;
+    rdfs:comment "Live on-chain read within a bounded freshness window (spec 289 chain-state)." .
+apscope:StatusList    a skos:Concept ; skos:inScheme apscope:revocationMode ; skos:prefLabel "status-list" ;
+    rdfs:comment "Signed status-list snapshot with bounded staleness (BitstringStatus tier)." .
+apscope:Accumulator   a skos:Concept ; skos:inScheme apscope:revocationMode ; skos:prefLabel "accumulator" ;
+    rdfs:comment "Cryptographic accumulator / non-revocation proof (privacy tier; W2+ suites)." .
+apscope:ShortLived    a skos:Concept ; skos:inScheme apscope:revocationMode ; skos:prefLabel "short-lived" ;
+    rdfs:comment "Expiry-over-revocation: credentials/proofs too short-lived to need a status check." .
+apscope:EmergencyStop a skos:Concept ; skos:inScheme apscope:revocationMode ; skos:prefLabel "emergency-stop" ;
+    rdfs:comment "Principal-published stop assertion; overrides any cached status in EVERY class." .
+
+# ─── relianceClass — with the MACHINE-READABLE verifier profile ──────────
+# The article's revocation ladder, as data: each class carries its required
+# mode + obligations. statusFreshnessMs 12000 = chain-state's shipped bounded
+# freshness window (spec 289); 0 = a live read per call, no caching.
+apscope:relianceClass a skos:ConceptScheme ;
+    rdfs:label "relianceClass" ;
+    rdfs:comment "How much a counterparty stakes on the verification. Selects the required revocation mode, freshness, and receipt duty (spec 308 profile)." ;
+    skos:hasTopConcept apscope:Advisory, apscope:Operational, apscope:Financial,
+        apscope:Regulated, apscope:SafetyCritical .
+apscope:Advisory a skos:Concept ; skos:inScheme apscope:relianceClass ; skos:prefLabel "advisory" ;
+    apscope:requiredRevocationMode apscope:ShortLived ;
+    apscope:mustRetainReceipt false .
+apscope:Operational a skos:Concept ; skos:inScheme apscope:relianceClass ; skos:prefLabel "operational" ;
+    apscope:requiredRevocationMode apscope:StatusList ;
+    apscope:statusFreshnessMs "300000"^^xsd:integer ;
+    apscope:mustRetainReceipt true .
+apscope:Financial a skos:Concept ; skos:inScheme apscope:relianceClass ; skos:prefLabel "financial" ;
+    apscope:requiredRevocationMode apscope:ChainPull ;
+    apscope:statusFreshnessMs "12000"^^xsd:integer ;
+    apscope:mustRetainReceipt true .
+apscope:Regulated a skos:Concept ; skos:inScheme apscope:relianceClass ; skos:prefLabel "regulated" ;
+    apscope:requiredRevocationMode apscope:ChainPull ;
+    apscope:statusFreshnessMs "12000"^^xsd:integer ;
+    apscope:mustRetainReceipt true .
+apscope:SafetyCritical a skos:Concept ; skos:inScheme apscope:relianceClass ; skos:prefLabel "safety-critical" ;
+    apscope:requiredRevocationMode apscope:ChainPull ;
+    apscope:statusFreshnessMs "0"^^xsd:integer ;
+    apscope:mustRetainReceipt true .

package/cbox/skill-grounding-vocabulary.ttl

@@ -0,0 +1,18 @@
+# C-box — skill grounding protocol codelist (spec 325 §4.5).
+# Closed SKOS scheme for aps:groundingProtocol on aps:SkillGrounding.
+
+@prefix aps:  <https://agenticprimitives.dev/ns/skill#> .
+@prefix skos: <http://www.w3.org/2004/02/skos/core#> .
+@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
+
+aps:groundingProtocol a skos:ConceptScheme ;
+    rdfs:label "groundingProtocol" ;
+    rdfs:comment "Protocol binding for CapabilityDefinition invocation." ;
+    skos:hasTopConcept aps:MCP, aps:A2A, aps:HTTP, aps:WoT, aps:Contract, aps:Local .
+
+aps:MCP      a skos:Concept ; skos:inScheme aps:groundingProtocol ; skos:prefLabel "mcp" .
+aps:A2A      a skos:Concept ; skos:inScheme aps:groundingProtocol ; skos:prefLabel "a2a" .
+aps:HTTP     a skos:Concept ; skos:inScheme aps:groundingProtocol ; skos:prefLabel "http" .
+aps:WoT      a skos:Concept ; skos:inScheme aps:groundingProtocol ; skos:prefLabel "wot" .
+aps:Contract a skos:Concept ; skos:inScheme aps:groundingProtocol ; skos:prefLabel "contract" .
+aps:Local    a skos:Concept ; skos:inScheme aps:groundingProtocol ; skos:prefLabel "local" .