eyeprolog 1.1.4 → 1.1.6

package/examples/dpv-odrl-purpose-mapping.pl

@@ -0,0 +1,124 @@
+% Adapted from rdf-prolog-roundtrip.
+% This standalone program combines generated RDF input with its ISO Prolog rules.
+
+% Generated by rdf-prolog-roundtrip.
+
+% RDF terms use rdf(Subject, Predicate, Object, Graph).
+
+rdf(iri('https://example.org/alpha_care_process'), iri('http://www.w3.org/1999/02/22-rdf-syntax-ns#type'), iri('https://w3id.org/dpv#Process'), default_graph).
+rdf(iri('https://example.org/alpha_care_process'), iri('https://w3id.org/dpv#hasDataController'), iri('https://example.org/hospital_a'), default_graph).
+rdf(iri('https://example.org/alpha_care_process'), iri('https://w3id.org/dpv#hasRecipient'), iri('https://example.org/research_partner'), default_graph).
+rdf(iri('https://example.org/alpha_care_process'), iri('https://w3id.org/dpv#hasPersonalData'), iri('https://example.org/lab_result'), default_graph).
+rdf(iri('https://example.org/alpha_care_process'), iri('https://w3id.org/dpv#hasProcessing'), iri('https://w3id.org/dpv#Use'), default_graph).
+rdf(iri('https://example.org/alpha_care_process'), iri('https://w3id.org/dpv#hasPurpose'), iri('https://w3id.org/dpv#Healthcare'), default_graph).
+rdf(iri('https://example.org/alpha_care_process'), iri('https://w3id.org/dpv#hasLegalBasis'), iri('https://w3id.org/dpv#Consent'), default_graph).
+rdf(iri('https://example.org/alpha_policy'), iri('http://www.w3.org/1999/02/22-rdf-syntax-ns#type'), iri('http://www.w3.org/ns/odrl/2/Policy'), default_graph).
+rdf(iri('https://example.org/alpha_policy'), iri('https://example.org/representsProcess'), iri('https://example.org/alpha_care_process'), default_graph).
+rdf(iri('https://example.org/alpha_policy'), iri('http://www.w3.org/ns/odrl/2/permission'), iri('https://example.org/alpha_permission'), default_graph).
+rdf(iri('https://example.org/alpha_permission'), iri('http://www.w3.org/1999/02/22-rdf-syntax-ns#type'), iri('http://www.w3.org/ns/odrl/2/Permission'), default_graph).
+rdf(iri('https://example.org/alpha_permission'), iri('http://www.w3.org/ns/odrl/2/assigner'), iri('https://example.org/hospital_a'), default_graph).
+rdf(iri('https://example.org/alpha_permission'), iri('http://www.w3.org/ns/odrl/2/assignee'), iri('https://example.org/research_partner'), default_graph).
+rdf(iri('https://example.org/alpha_permission'), iri('http://www.w3.org/ns/odrl/2/target'), iri('https://example.org/lab_result'), default_graph).
+rdf(iri('https://example.org/alpha_permission'), iri('http://www.w3.org/ns/odrl/2/action'), iri('http://www.w3.org/ns/odrl/2/use'), default_graph).
+rdf(iri('https://example.org/alpha_permission'), iri('http://www.w3.org/ns/odrl/2/constraint'), iri('https://example.org/alpha_purpose_constraint'), default_graph).
+rdf(iri('https://example.org/alpha_permission'), iri('http://www.w3.org/ns/odrl/2/constraint'), iri('https://example.org/alpha_basis_constraint'), default_graph).
+rdf(iri('https://example.org/alpha_purpose_constraint'), iri('http://www.w3.org/1999/02/22-rdf-syntax-ns#type'), iri('http://www.w3.org/ns/odrl/2/Constraint'), default_graph).
+rdf(iri('https://example.org/alpha_purpose_constraint'), iri('http://www.w3.org/ns/odrl/2/leftOperand'), iri('http://www.w3.org/ns/odrl/2/purpose'), default_graph).
+rdf(iri('https://example.org/alpha_purpose_constraint'), iri('http://www.w3.org/ns/odrl/2/operator'), iri('http://www.w3.org/ns/odrl/2/isA'), default_graph).
+rdf(iri('https://example.org/alpha_purpose_constraint'), iri('http://www.w3.org/ns/odrl/2/rightOperand'), iri('https://w3id.org/dpv#Healthcare'), default_graph).
+rdf(iri('https://example.org/alpha_basis_constraint'), iri('http://www.w3.org/1999/02/22-rdf-syntax-ns#type'), iri('http://www.w3.org/ns/odrl/2/Constraint'), default_graph).
+rdf(iri('https://example.org/alpha_basis_constraint'), iri('http://www.w3.org/ns/odrl/2/leftOperand'), iri('https://example.org/legalBasis'), default_graph).
+rdf(iri('https://example.org/alpha_basis_constraint'), iri('http://www.w3.org/ns/odrl/2/operator'), iri('http://www.w3.org/ns/odrl/2/isA'), default_graph).
+rdf(iri('https://example.org/alpha_basis_constraint'), iri('http://www.w3.org/ns/odrl/2/rightOperand'), iri('https://w3id.org/dpv#Consent'), default_graph).
+
+% The DPV process and ODRL policy are RDF data. The rules verify the six
+% correspondences and return one deterministic mapping report.
+%% goal: result_rdf(_, _, _, _)
+
+dpv_odrl_purpose_mapping(Mappings) :-
+  findall(
+    mapping(SourceRole, Value, TargetRole),
+    mapped_role(SourceRole, Value, TargetRole),
+    Mappings
+  ).
+
+mapped_role(data_controller, Controller, assigner) :-
+  rdf_link(ex(alpha_care_process), dpv(hasDataController), ex(Controller)),
+  rdf_link(ex(alpha_permission), odrl(assigner), ex(Controller)).
+
+mapped_role(recipient, Recipient, assignee) :-
+  rdf_link(ex(alpha_care_process), dpv(hasRecipient), ex(Recipient)),
+  rdf_link(ex(alpha_permission), odrl(assignee), ex(Recipient)).
+
+mapped_role(personal_data, Data, target) :-
+  rdf_link(ex(alpha_care_process), dpv(hasPersonalData), ex(Data)),
+  rdf_link(ex(alpha_permission), odrl(target), ex(Data)).
+
+mapped_role(processing, dpv_use, action) :-
+  rdf_link(ex(alpha_care_process), dpv(hasProcessing), dpv('Use')),
+  rdf_link(ex(alpha_permission), odrl(action), odrl(use)).
+
+mapped_role(purpose, dpv_healthcare, constraint(alpha_purpose_constraint)) :-
+  rdf_link(ex(alpha_care_process), dpv(hasPurpose), dpv('Healthcare')),
+  odrl_constraint(alpha_purpose_constraint, odrl(purpose), dpv('Healthcare')).
+
+mapped_role(legal_basis, dpv_consent, constraint(alpha_basis_constraint)) :-
+  rdf_link(ex(alpha_care_process), dpv(hasLegalBasis), dpv('Consent')),
+  odrl_constraint(alpha_basis_constraint, ex(legalBasis), dpv('Consent')).
+
+odrl_constraint(Name, LeftOperand, RightOperand) :-
+  rdf_link(ex(alpha_permission), odrl(constraint), ex(Name)),
+  rdf_link(ex(Name), odrl('leftOperand'), LeftOperand),
+  rdf_link(ex(Name), odrl(operator), odrl('isA')),
+  rdf_link(ex(Name), odrl('rightOperand'), RightOperand).
+
+rdf_link(Subject, Predicate, Object) :-
+  iri_term(Subject, SubjectIri),
+  iri_term(Predicate, PredicateIri),
+  rdf(iri(SubjectIri), iri(PredicateIri), iri(ObjectIri), default_graph),
+  iri_term(Object, ObjectIri).
+
+iri_term(ex(Name), Iri) :- namespace_iri('https://example.org/', Name, Iri).
+iri_term(dpv(Name), Iri) :- namespace_iri('https://w3id.org/dpv#', Name, Iri).
+iri_term(odrl(Name), Iri) :- namespace_iri('http://www.w3.org/ns/odrl/2/', Name, Iri).
+
+namespace_iri(Prefix, Name, Iri) :- atom_concat(Prefix, Name, Iri).
+
+% RDF form of every verified DPV -> ODRL mapping.
+result_rdf(iri(Node), iri('https://example.org/sourceRole'), iri(RoleIri), default_graph) :-
+  mapped_role(Role, _Value, _Target),
+  mapping_node(Role, Node),
+  mapping_role_iri(Role, RoleIri).
+result_rdf(iri(Node), iri('https://example.org/value'), iri(ValueIri), default_graph) :-
+  mapped_role(Role, Value, _Target),
+  mapping_node(Role, Node),
+  mapping_value_iri(Role, Value, ValueIri).
+result_rdf(iri(Node), iri('https://example.org/mappingTarget'), iri(TargetIri), default_graph) :-
+  mapped_role(Role, _Value, Target),
+  mapping_node(Role, Node),
+  mapping_target_iri(Target, TargetIri).
+
+mapping_node(Role, Iri) :- atom_concat('https://example.org/result/mapping/', Role, Iri).
+mapping_role_iri(Role, Iri) :- atom_concat('https://example.org/role/', Role, Iri).
+
+mapping_value_iri(data_controller, Value, Iri) :- iri_term(ex(Value), Iri).
+mapping_value_iri(recipient, Value, Iri) :- iri_term(ex(Value), Iri).
+mapping_value_iri(personal_data, Value, Iri) :- iri_term(ex(Value), Iri).
+mapping_value_iri(processing, dpv_use, Iri) :- iri_term(dpv('Use'), Iri).
+mapping_value_iri(purpose, dpv_healthcare, Iri) :- iri_term(dpv('Healthcare'), Iri).
+mapping_value_iri(legal_basis, dpv_consent, Iri) :- iri_term(dpv('Consent'), Iri).
+
+mapping_target_iri(assigner, Iri) :- iri_term(odrl(assigner), Iri).
+mapping_target_iri(assignee, Iri) :- iri_term(odrl(assignee), Iri).
+mapping_target_iri(target, Iri) :- iri_term(odrl(target), Iri).
+mapping_target_iri(action, Iri) :- iri_term(odrl(action), Iri).
+mapping_target_iri(constraint(Name), Iri) :- iri_term(ex(Name), Iri).
+
+% ISO Prolog helper: print the complete test result as rdf/4 facts.
+write_results :-
+  result_rdf(S, P, O, G),
+  write_term(rdf(S, P, O, G), [quoted(true)]),
+  write('.'),
+  nl,
+  fail.
+write_results.

package/examples/odrl-dpv-fpv-trust-flow.pl

@@ -0,0 +1,154 @@
+% Adapted from rdf-prolog-roundtrip.
+% This standalone program combines generated RDF input with its ISO Prolog rules.
+
+% Generated by rdf-prolog-roundtrip.
+
+% RDF terms use rdf(Subject, Predicate, Object, Graph).
+
+rdf(iri('https://example.org/trust-policy'), iri('http://www.w3.org/ns/odrl/2/permission'), iri('https://example.org/healthcare-permission'), default_graph).
+rdf(iri('https://example.org/trust-policy'), iri('http://www.w3.org/ns/odrl/2/prohibition'), iri('https://example.org/marketing-prohibition'), default_graph).
+rdf(iri('https://example.org/healthcare-permission'), iri('http://www.w3.org/ns/odrl/2/assignee'), iri('https://example.org/research-partner'), default_graph).
+rdf(iri('https://example.org/healthcare-permission'), iri('http://www.w3.org/ns/odrl/2/target'), iri('https://example.org/lab-result'), default_graph).
+rdf(iri('https://example.org/healthcare-permission'), iri('http://www.w3.org/ns/odrl/2/action'), iri('http://www.w3.org/ns/odrl/2/use'), default_graph).
+rdf(iri('https://example.org/healthcare-permission'), iri('http://www.w3.org/ns/odrl/2/purpose'), iri('https://example.org/healthcare'), default_graph).
+rdf(iri('https://example.org/healthcare-permission'), iri('https://example.org/minTrust'), literal('0.80', datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph).
+rdf(iri('https://example.org/marketing-prohibition'), iri('http://www.w3.org/ns/odrl/2/assignee'), iri('https://example.org/ad-network'), default_graph).
+rdf(iri('https://example.org/marketing-prohibition'), iri('http://www.w3.org/ns/odrl/2/target'), iri('https://example.org/lab-result'), default_graph).
+rdf(iri('https://example.org/marketing-prohibition'), iri('http://www.w3.org/ns/odrl/2/action'), iri('http://www.w3.org/ns/odrl/2/distribute'), default_graph).
+rdf(iri('https://example.org/marketing-prohibition'), iri('http://www.w3.org/ns/odrl/2/purpose'), iri('https://example.org/marketing'), default_graph).
+rdf(iri('https://example.org/hospital-a'), iri('https://example.org/trustScore'), literal('0.92', datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph).
+rdf(iri('https://example.org/small-clinic'), iri('https://example.org/trustScore'), literal('0.63', datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph).
+rdf(iri('https://example.org/ad-network'), iri('https://example.org/trustScore'), literal('0.28', datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph).
+rdf(iri('https://example.org/flow-care'), iri('https://example.org/source'), iri('https://example.org/hospital-a'), default_graph).
+rdf(iri('https://example.org/flow-care'), iri('https://example.org/recipient'), iri('https://example.org/research-partner'), default_graph).
+rdf(iri('https://example.org/flow-care'), iri('https://example.org/data'), iri('https://example.org/lab-result'), default_graph).
+rdf(iri('https://example.org/flow-care'), iri('https://example.org/requestedAction'), iri('http://www.w3.org/ns/odrl/2/use'), default_graph).
+rdf(iri('https://example.org/flow-care'), iri('https://example.org/requestedPurpose'), iri('https://example.org/healthcare'), default_graph).
+rdf(iri('https://example.org/flow-clinic'), iri('https://example.org/source'), iri('https://example.org/small-clinic'), default_graph).
+rdf(iri('https://example.org/flow-clinic'), iri('https://example.org/recipient'), iri('https://example.org/research-partner'), default_graph).
+rdf(iri('https://example.org/flow-clinic'), iri('https://example.org/data'), iri('https://example.org/lab-result'), default_graph).
+rdf(iri('https://example.org/flow-clinic'), iri('https://example.org/requestedAction'), iri('http://www.w3.org/ns/odrl/2/use'), default_graph).
+rdf(iri('https://example.org/flow-clinic'), iri('https://example.org/requestedPurpose'), iri('https://example.org/healthcare'), default_graph).
+rdf(iri('https://example.org/flow-ads'), iri('https://example.org/source'), iri('https://example.org/hospital-a'), default_graph).
+rdf(iri('https://example.org/flow-ads'), iri('https://example.org/recipient'), iri('https://example.org/ad-network'), default_graph).
+rdf(iri('https://example.org/flow-ads'), iri('https://example.org/data'), iri('https://example.org/lab-result'), default_graph).
+rdf(iri('https://example.org/flow-ads'), iri('https://example.org/requestedAction'), iri('http://www.w3.org/ns/odrl/2/distribute'), default_graph).
+rdf(iri('https://example.org/flow-ads'), iri('https://example.org/requestedPurpose'), iri('https://example.org/marketing'), default_graph).
+
+% ODRL policy rules, trust scores, and requested flows are RDF data. The rules
+% produce one deterministic FPV-style decision report.
+%% goal: result_rdf(_, _, _, _)
+
+trust_flow_report([Care, Clinic, Ads]) :-
+  flow_decision(flow_care, Care),
+  flow_decision(flow_clinic, Clinic),
+  flow_decision(flow_ads, Ads).
+
+flow_decision(Flow, decision(Flow, permit, confidence(Score), status(executable_flow))) :-
+  permitted_flow(Flow, Score).
+flow_decision(Flow, decision(Flow, review, confidence(Score), risk(trustworthiness_risk))) :-
+  review_flow(Flow, Score).
+flow_decision(Flow, decision(Flow, deny, status(blocked_flow), risk(unwanted_disclosure))) :-
+  prohibited_flow(Flow).
+
+permitted_flow(Flow, Score) :-
+  flow_request(Flow, Source, Recipient, Data, Action, Purpose),
+  policy_rule(odrl(permission), Rule, Recipient, Data, Action, Purpose),
+  rdf_number(Rule, ex(minTrust), Minimum),
+  rdf_number(Source, ex(trustScore), Score),
+  Score >= Minimum.
+
+review_flow(Flow, Score) :-
+  flow_request(Flow, Source, Recipient, Data, Action, Purpose),
+  policy_rule(odrl(permission), Rule, Recipient, Data, Action, Purpose),
+  rdf_number(Rule, ex(minTrust), Minimum),
+  rdf_number(Source, ex(trustScore), Score),
+  Score < Minimum.
+
+prohibited_flow(Flow) :-
+  flow_request(Flow, _Source, Recipient, Data, Action, Purpose),
+  policy_rule(odrl(prohibition), _Rule, Recipient, Data, Action, Purpose).
+
+flow_request(Flow, Source, Recipient, Data, Action, Purpose) :-
+  flow_resource(Flow, Resource),
+  rdf_link(Resource, ex(source), Source),
+  rdf_link(Resource, ex(recipient), Recipient),
+  rdf_link(Resource, ex(data), Data),
+  rdf_link(Resource, ex(requestedAction), Action),
+  rdf_link(Resource, ex(requestedPurpose), Purpose).
+
+policy_rule(Type, Rule, Recipient, Data, Action, Purpose) :-
+  rdf_link(ex('trust-policy'), Type, Rule),
+  rdf_link(Rule, odrl(assignee), Recipient),
+  rdf_link(Rule, odrl(target), Data),
+  rdf_link(Rule, odrl(action), Action),
+  rdf_link(Rule, odrl(purpose), Purpose).
+
+flow_resource(flow_care, ex('flow-care')).
+flow_resource(flow_clinic, ex('flow-clinic')).
+flow_resource(flow_ads, ex('flow-ads')).
+
+rdf_link(Subject, Predicate, Object) :-
+  iri_term(Subject, SubjectIri),
+  iri_term(Predicate, PredicateIri),
+  rdf(iri(SubjectIri), iri(PredicateIri), iri(ObjectIri), default_graph),
+  iri_term(Object, ObjectIri).
+
+rdf_number(Subject, Predicate, Number) :-
+  iri_term(Subject, SubjectIri),
+  iri_term(Predicate, PredicateIri),
+  rdf(iri(SubjectIri), iri(PredicateIri), literal(Text, datatype(_Datatype)), default_graph),
+  atom_chars(Text, Chars),
+  number_chars(Number, Chars).
+
+iri_term(ex(Name), Iri) :- namespace_iri('https://example.org/', Name, Iri).
+iri_term(odrl(Name), Iri) :- namespace_iri('http://www.w3.org/ns/odrl/2/', Name, Iri).
+
+namespace_iri(Prefix, Name, Iri) :- atom_concat(Prefix, Name, Iri).
+
+% RDF form of each flow decision.
+result_rdf(iri(FlowIri), iri('https://example.org/decision'), iri(DecisionIri), default_graph) :-
+  flow_decision(Flow, DecisionTerm),
+  decision_name(DecisionTerm, Decision),
+  flow_resource(Flow, FlowResource),
+  iri_term(FlowResource, FlowIri),
+  atom_concat('https://example.org/', Decision, DecisionIri).
+result_rdf(iri(FlowIri), iri('https://example.org/confidence'), literal(Text, datatype('http://www.w3.org/2001/XMLSchema#decimal')), default_graph) :-
+  flow_decision(Flow, DecisionTerm),
+  decision_has_confidence(DecisionTerm),
+  flow_resource(Flow, FlowResource),
+  iri_term(FlowResource, FlowIri),
+  flow_request(Flow, Source, _Recipient, _Data, _Action, _Purpose),
+  iri_term(Source, SourceIri),
+  rdf(iri(SourceIri), iri('https://example.org/trustScore'), literal(Text, datatype(_)), default_graph).
+result_rdf(iri(FlowIri), iri('https://example.org/status'), iri(StatusIri), default_graph) :-
+  flow_decision(Flow, DecisionTerm),
+  decision_status(DecisionTerm, Status),
+  flow_resource(Flow, FlowResource),
+  iri_term(FlowResource, FlowIri),
+  atom_concat('https://example.org/', Status, StatusIri).
+result_rdf(iri(FlowIri), iri('https://example.org/risk'), iri(RiskIri), default_graph) :-
+  flow_decision(Flow, DecisionTerm),
+  decision_risk(DecisionTerm, Risk),
+  flow_resource(Flow, FlowResource),
+  iri_term(FlowResource, FlowIri),
+  atom_concat('https://example.org/', Risk, RiskIri).
+
+decision_name(decision(_, permit, _, _), permit).
+decision_name(decision(_, review, _, _), review).
+decision_name(decision(_, deny, _, _), deny).
+decision_has_confidence(decision(_, permit, confidence(_), _)).
+decision_has_confidence(decision(_, review, confidence(_), _)).
+decision_status(decision(_, permit, _, status(Status)), Status).
+decision_status(decision(_, deny, status(Status), _), Status).
+decision_risk(decision(_, review, _, risk(Risk)), Risk).
+decision_risk(decision(_, deny, _, risk(Risk)), Risk).
+
+% ISO Prolog helper: print the complete test result as rdf/4 facts.
+write_results :-
+  result_rdf(S, P, O, G),
+  write_term(rdf(S, P, O, G), [quoted(true)]),
+  write('.'),
+  nl,
+  fail.
+write_results.

package/examples/odrl-dpv-healthcare-risk-ranked.pl

@@ -0,0 +1,177 @@
+% Adapted from rdf-prolog-roundtrip.
+% This standalone program combines generated RDF input with its ISO Prolog rules.
+
+% Generated by rdf-prolog-roundtrip.
+
+% RDF terms use rdf(Subject, Predicate, Object, Graph).
+
+rdf(iri('https://example.org/healthcare-policy'), iri('http://www.w3.org/ns/odrl/2/permission'), iri('https://example.org/research-use'), default_graph).
+rdf(iri('https://example.org/healthcare-policy'), iri('http://www.w3.org/ns/odrl/2/permission'), iri('https://example.org/genomic-sharing'), default_graph).
+rdf(iri('https://example.org/healthcare-policy'), iri('http://www.w3.org/ns/odrl/2/permission'), iri('https://example.org/record-retention'), default_graph).
+rdf(iri('https://example.org/healthcare-policy'), iri('https://example.org/riskProfile'), iri('https://example.org/consent-profile'), default_graph).
+rdf(iri('https://example.org/healthcare-policy'), iri('https://example.org/riskProfile'), iri('https://example.org/sharing-profile'), default_graph).
+rdf(iri('https://example.org/healthcare-policy'), iri('https://example.org/riskProfile'), iri('https://example.org/retention-profile'), default_graph).
+rdf(iri('https://example.org/research-use'), iri('https://example.org/clause'), literal('h1', datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph).
+rdf(iri('https://example.org/research-use'), iri('http://www.w3.org/ns/odrl/2/action'), iri('http://www.w3.org/ns/odrl/2/use'), default_graph).
+rdf(iri('https://example.org/genomic-sharing'), iri('https://example.org/clause'), literal('h2', datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph).
+rdf(iri('https://example.org/genomic-sharing'), iri('http://www.w3.org/ns/odrl/2/action'), iri('https://example.org/disclose'), default_graph).
+rdf(iri('https://example.org/genomic-sharing'), iri('http://www.w3.org/ns/odrl/2/target'), iri('https://example.org/genomic-data'), default_graph).
+rdf(iri('https://example.org/record-retention'), iri('https://example.org/clause'), literal('h4', datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph).
+rdf(iri('https://example.org/record-retention'), iri('http://www.w3.org/ns/odrl/2/constraint'), iri('https://example.org/retention-constraint'), default_graph).
+rdf(iri('https://example.org/retention-constraint'), iri('http://www.w3.org/ns/odrl/2/leftOperand'), iri('https://example.org/retentionDays'), default_graph).
+rdf(iri('https://example.org/retention-constraint'), iri('http://www.w3.org/ns/odrl/2/operator'), iri('http://www.w3.org/ns/odrl/2/eq'), default_graph).
+rdf(iri('https://example.org/retention-constraint'), iri('http://www.w3.org/ns/odrl/2/rightOperand'), literal('3650', datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph).
+rdf(iri('https://example.org/consent-profile'), iri('https://example.org/risk'), iri('https://example.org/consent-risk'), default_graph).
+rdf(iri('https://example.org/consent-profile'), iri('https://example.org/policyRule'), iri('https://example.org/research-use'), default_graph).
+rdf(iri('https://example.org/consent-profile'), iri('https://example.org/need'), iri('https://example.org/explicit-consent-for-research'), default_graph).
+rdf(iri('https://example.org/consent-profile'), iri('https://example.org/baseScore'), literal('85', datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph).
+rdf(iri('https://example.org/consent-profile'), iri('https://example.org/mitigation'), iri('https://example.org/require-explicit-consent'), default_graph).
+rdf(iri('https://example.org/sharing-profile'), iri('https://example.org/risk'), iri('https://example.org/sharing-risk'), default_graph).
+rdf(iri('https://example.org/sharing-profile'), iri('https://example.org/policyRule'), iri('https://example.org/genomic-sharing'), default_graph).
+rdf(iri('https://example.org/sharing-profile'), iri('https://example.org/need'), iri('https://example.org/deidentify-before-sharing'), default_graph).
+rdf(iri('https://example.org/sharing-profile'), iri('https://example.org/baseScore'), literal('90', datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph).
+rdf(iri('https://example.org/sharing-profile'), iri('https://example.org/mitigation'), iri('https://example.org/require-deidentification'), default_graph).
+rdf(iri('https://example.org/retention-profile'), iri('https://example.org/risk'), iri('https://example.org/retention-risk'), default_graph).
+rdf(iri('https://example.org/retention-profile'), iri('https://example.org/policyRule'), iri('https://example.org/record-retention'), default_graph).
+rdf(iri('https://example.org/retention-profile'), iri('https://example.org/need'), iri('https://example.org/retention-limit-3-years'), default_graph).
+rdf(iri('https://example.org/retention-profile'), iri('https://example.org/baseScore'), literal('55', datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph).
+rdf(iri('https://example.org/retention-profile'), iri('https://example.org/mitigation'), iri('https://example.org/limit-retention-to-1095-days'), default_graph).
+rdf(iri('https://example.org/explicit-consent-for-research'), iri('https://example.org/importance'), literal('35', datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph).
+rdf(iri('https://example.org/deidentify-before-sharing'), iri('https://example.org/importance'), literal('35', datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph).
+rdf(iri('https://example.org/retention-limit-3-years'), iri('https://example.org/importance'), literal('15', datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph).
+rdf(iri('https://example.org/retention-limit-3-years'), iri('https://example.org/maximumDays'), literal('1095', datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph).
+
+% ODRL permissions and DPV-style risk profiles are RDF data. The rules detect
+% missing safeguards, score the risks, and return one deterministic ranking.
+%% goal: result_rdf(_, _, _, _)
+
+healthcare_risk_report(Ranked) :-
+  findall(
+    key(InverseScore, Clause)-dpv_risk(Risk, Score, Level, Clause, Mitigation),
+    (
+      risk_report(Risk, Score, Level, Clause, Mitigation),
+      InverseScore is 1000 - Score
+    ),
+    Unsorted
+  ),
+  sort(Unsorted, Sorted),
+  ranked_values(Sorted, 1, Ranked).
+
+risk_report(Risk, Score, Level, Clause, Mitigation) :-
+  risk_profile(_Profile, Risk, Rule, Need, Base, Mitigation),
+  risk_triggered(Risk, Rule, Need),
+  rdf_text(Rule, ex(clause), ClauseText),
+  Clause = ClauseText,
+  rdf_number(Need, ex(importance), Importance),
+  Raw is Base + Importance,
+  (Raw > 100 -> Score = 100 ; Score = Raw),
+  risk_level(Score, Level).
+
+risk_profile(Profile, Risk, Rule, Need, Base, Mitigation) :-
+  rdf_link(ex('healthcare-policy'), ex(riskProfile), Profile),
+  rdf_link(Profile, ex(risk), RiskResource),
+  risk_resource(Risk, RiskResource),
+  rdf_link(Profile, ex(policyRule), Rule),
+  rdf_link(Profile, ex(need), Need),
+  rdf_number(Profile, ex(baseScore), Base),
+  rdf_link(Profile, ex(mitigation), MitigationResource),
+  mitigation_resource(Mitigation, MitigationResource).
+
+risk_triggered(consent_risk, Rule, _Need) :-
+  rdf_link(ex('healthcare-policy'), odrl(permission), Rule),
+  rdf_link(Rule, odrl(action), odrl(use)),
+  \+ constraint_text(Rule, ex(explicitConsent), 'true').
+
+risk_triggered(sharing_risk, Rule, _Need) :-
+  rdf_link(ex('healthcare-policy'), odrl(permission), Rule),
+  rdf_link(Rule, odrl(action), ex(disclose)),
+  rdf_link(Rule, odrl(target), ex('genomic-data')),
+  \+ constraint_text(Rule, ex(deidentified), 'true').
+
+risk_triggered(retention_risk, Rule, Need) :-
+  rdf_link(ex('healthcare-policy'), odrl(permission), Rule),
+  constraint_number(Rule, ex(retentionDays), Days),
+  rdf_number(Need, ex(maximumDays), Maximum),
+  Days > Maximum.
+
+constraint_text(Rule, LeftOperand, Value) :-
+  rdf_link(Rule, odrl(constraint), Constraint),
+  rdf_link(Constraint, odrl('leftOperand'), LeftOperand),
+  rdf_link(Constraint, odrl(operator), odrl(eq)),
+  rdf_text(Constraint, odrl('rightOperand'), Value).
+
+constraint_number(Rule, LeftOperand, Number) :-
+  constraint_text(Rule, LeftOperand, Text),
+  atom_chars(Text, Chars),
+  number_chars(Number, Chars).
+
+risk_level(Score, high) :- Score > 79.
+risk_level(Score, moderate) :- Score > 49, Score < 80.
+
+ranked_values([], _Rank, []).
+ranked_values([_Key-Risk|Rest], Rank, [rank(Rank, Risk)|Ranked]) :-
+  NextRank is Rank + 1,
+  ranked_values(Rest, NextRank, Ranked).
+
+risk_resource(consent_risk, ex('consent-risk')).
+risk_resource(sharing_risk, ex('sharing-risk')).
+risk_resource(retention_risk, ex('retention-risk')).
+
+mitigation_resource(require_explicit_consent, ex('require-explicit-consent')).
+mitigation_resource(require_deidentification, ex('require-deidentification')).
+mitigation_resource(limit_retention_to_1095_days, ex('limit-retention-to-1095-days')).
+
+rdf_link(Subject, Predicate, Object) :-
+  iri_term(Subject, SubjectIri),
+  iri_term(Predicate, PredicateIri),
+  rdf(iri(SubjectIri), iri(PredicateIri), iri(ObjectIri), default_graph),
+  iri_term(Object, ObjectIri).
+
+rdf_text(Subject, Predicate, Text) :-
+  iri_term(Subject, SubjectIri),
+  iri_term(Predicate, PredicateIri),
+  rdf(iri(SubjectIri), iri(PredicateIri), literal(Text, datatype(_Datatype)), default_graph).
+
+rdf_number(Subject, Predicate, Number) :-
+  rdf_text(Subject, Predicate, Text),
+  atom_chars(Text, Chars),
+  number_chars(Number, Chars).
+
+iri_term(ex(Name), Iri) :- namespace_iri('https://example.org/', Name, Iri).
+iri_term(odrl(Name), Iri) :- namespace_iri('http://www.w3.org/ns/odrl/2/', Name, Iri).
+
+namespace_iri(Prefix, Name, Iri) :- atom_concat(Prefix, Name, Iri).
+
+% RDF form of the ranked healthcare risks.
+result_rdf(iri(RiskIri), iri('https://example.org/rank'), literal(RankText, datatype('http://www.w3.org/2001/XMLSchema#integer')), default_graph) :-
+  healthcare_ranked_item(Rank, Risk, _Score, _Level, _Clause, _Mitigation),
+  risk_resource(Risk, RiskTerm), iri_term(RiskTerm, RiskIri), number_atom(Rank, RankText).
+result_rdf(iri(RiskIri), iri('https://example.org/score'), literal(ScoreText, datatype('http://www.w3.org/2001/XMLSchema#integer')), default_graph) :-
+  healthcare_ranked_item(_Rank, Risk, Score, _Level, _Clause, _Mitigation),
+  risk_resource(Risk, RiskTerm), iri_term(RiskTerm, RiskIri), number_atom(Score, ScoreText).
+result_rdf(iri(RiskIri), iri('https://example.org/level'), iri(LevelIri), default_graph) :-
+  healthcare_ranked_item(_Rank, Risk, _Score, Level, _Clause, _Mitigation),
+  risk_resource(Risk, RiskTerm), iri_term(RiskTerm, RiskIri), atom_concat('https://example.org/', Level, LevelIri).
+result_rdf(iri(RiskIri), iri('https://example.org/clause'), literal(Clause, datatype('http://www.w3.org/2001/XMLSchema#string')), default_graph) :-
+  healthcare_ranked_item(_Rank, Risk, _Score, _Level, Clause, _Mitigation),
+  risk_resource(Risk, RiskTerm), iri_term(RiskTerm, RiskIri).
+result_rdf(iri(RiskIri), iri('https://example.org/mitigation'), iri(MitigationIri), default_graph) :-
+  healthcare_ranked_item(_Rank, Risk, _Score, _Level, _Clause, Mitigation),
+  risk_resource(Risk, RiskTerm), iri_term(RiskTerm, RiskIri),
+  mitigation_resource(Mitigation, MitigationTerm), iri_term(MitigationTerm, MitigationIri).
+
+healthcare_ranked_item(Rank, Risk, Score, Level, Clause, Mitigation) :-
+  healthcare_risk_report(Ranked),
+  list_member(rank(Rank, dpv_risk(Risk, Score, Level, Clause, Mitigation)), Ranked).
+list_member(X, [X|_]).
+list_member(X, [_|Xs]) :- list_member(X, Xs).
+number_atom(Number, Atom) :- number_chars(Number, Chars), atom_chars(Atom, Chars).
+
+% ISO Prolog helper: print the complete test result as rdf/4 facts.
+write_results :-
+  result_rdf(S, P, O, G),
+  write_term(rdf(S, P, O, G), [quoted(true)]),
+  write('.'),
+  nl,
+  fail.
+write_results.