eyeprolog 1.3.99 → 1.4.0

package/examples/data/sbom-vulnerability-response-rules.pl

@@ -0,0 +1,85 @@
+% Flagship example: software supply-chain deployment risk.
+% RDF carries the SBOM, vulnerability feed, and policy. ISO Prolog performs
+% transitive dependency analysis, waiver handling, and the deployment decision.
+
+:- use_module(library(lists)).
+
+%% goal: deployment_decision(X0, X1)
+%% goal: exposure_path(X0, X1, X2)
+%% goal: required_action(X0, X1)
+%% goal: waiver_effect(X0, X1, X2)
+
+v(root_component, iri('https://example.org/vocab/rootComponent')).
+v(depends_on, iri('https://example.org/vocab/dependsOn')).
+v(affected_by, iri('https://example.org/vocab/affectedBy')).
+v(severity_score, iri('https://example.org/vocab/severityScore')).
+v(fixed_component, iri('https://example.org/vocab/fixedComponent')).
+v(critical_service, iri('https://example.org/vocab/criticalService')).
+v(current_date, iri('https://example.org/vocab/currentDate')).
+v(waives_for_service, iri('https://example.org/vocab/waivesForService')).
+v(waives_vulnerability, iri('https://example.org/vocab/waivesVulnerability')).
+v(expires_on, iri('https://example.org/vocab/expiresOn')).
+
+g(sbom, iri('https://example.org/supply-chain/graph/sbom')).
+g(vulnerabilities, iri('https://example.org/supply-chain/graph/vulnerabilities')).
+g(policy, iri('https://example.org/supply-chain/graph/policy')).
+
+resource(checkout_prod, iri('https://example.org/supply-chain/service/checkout-prod')).
+resource(shop_app, iri('https://example.org/supply-chain/component/shop-app')).
+resource(payments_sdk, iri('https://example.org/supply-chain/component/payments-sdk')).
+resource(crypto_wrapper, iri('https://example.org/supply-chain/component/crypto-wrapper')).
+resource(openssl_3_0_12, iri('https://example.org/supply-chain/component/openssl-3.0.12')).
+resource(log_agent, iri('https://example.org/supply-chain/component/log-agent')).
+resource(log_core_2_1, iri('https://example.org/supply-chain/component/log-core-2.1')).
+resource(openssl_3_0_14, iri('https://example.org/supply-chain/component/openssl-3.0.14')).
+resource(log_core_2_2, iri('https://example.org/supply-chain/component/log-core-2.2')).
+resource(cve_2026_7777, iri('https://example.org/supply-chain/cve/CVE-2026-7777')).
+resource(cve_2026_2222, iri('https://example.org/supply-chain/cve/CVE-2026-2222')).
+
+yes(iri('https://example.org/supply-chain/value/yes')).
+
+integer_literal(literal(Text, datatype('http://www.w3.org/2001/XMLSchema#integer')), N) :- atom_chars(Text, Cs), number_chars(N, Cs).
+
+root_component(Service, Root) :- resource(Service,S), v(root_component,P), g(sbom,G), rdf(S,P,R,G), resource(Root,R).
+depends(A,B) :- resource(A,RA), resource(B,RB), v(depends_on,P), g(sbom,G), rdf(RA,P,RB,G).
+vulnerability(Component,Vuln) :- resource(Component,C), resource(Vuln,V), v(affected_by,P), g(vulnerabilities,G), rdf(C,P,V,G).
+severity(Vuln,Score) :- resource(Vuln,V), v(severity_score,P), g(vulnerabilities,G), rdf(V,P,L,G), integer_literal(L,Score).
+fix(Vuln,Fixed) :- resource(Vuln,V), resource(Fixed,F), v(fixed_component,P), g(vulnerabilities,G), rdf(V,P,F,G).
+
+component_path(A,B,Path) :- component_path(A,B,[A],Path).
+component_path(A,B,Visited,[A,B]) :- depends(A,B), \+ member(B,Visited).
+component_path(A,B,Visited,[A|Rest]) :- depends(A,C), \+ member(C,Visited), component_path(C,B,[C|Visited],Rest).
+
+dependency_path(Service,Component,Path) :- root_component(Service,Root), component_path(Root,Component,Path).
+
+current_date(Service,Date) :- resource(Service,S), v(current_date,P), g(policy,G), rdf(S,P,L,G), integer_literal(L,Date).
+critical(Service) :- resource(Service,S), v(critical_service,P), g(policy,G), yes(Y), rdf(S,P,Y,G).
+active_waiver(Service,Vuln) :-
+  resource(Service,S), resource(Vuln,V), g(policy,G),
+  v(waives_for_service,PS), v(waives_vulnerability,PV), v(expires_on,PE),
+  rdf(W,PS,S,G), rdf(W,PV,V,G), rdf(W,PE,L,G), integer_literal(L,Expiry), current_date(Service,Today), Expiry >= Today.
+
+exposed(Service,Vuln,Path,Score) :-
+  dependency_path(Service,Component,Path), vulnerability(Component,Vuln), severity(Vuln,Score), \+ active_waiver(Service,Vuln).
+
+blocking_exposure(Service,Vuln,Path,Score) :- exposed(Service,Vuln,Path,Score), Score >= 70.
+
+deployment_decision(Service, block) :- critical(Service), blocking_exposure(Service,_V,_P,_S).
+exposure_path(Service,Vuln,Path) :- blocking_exposure(Service,Vuln,Path,_Score).
+required_action(Service, upgrade(Component,Fixed)) :-
+  blocking_exposure(Service,Vuln,Path,_), last(Path,Component), fix(Vuln,Fixed).
+waiver_effect(Service,Vuln,accepted_until(Expiry)) :-
+  active_waiver(Service,Vuln), resource(Service,S), resource(Vuln,V), g(policy,G),
+  v(waives_for_service,PS), v(waives_vulnerability,PV), v(expires_on,PE),
+  rdf(W,PS,S,G), rdf(W,PV,V,G), rdf(W,PE,L,G), integer_literal(L,Expiry).
+
+result_rdf(S, iri('https://example.org/vocab/deploymentDecision'), iri('https://example.org/supply-chain/decision/block'), iri('https://example.org/supply-chain/graph/derived')) :-
+  deployment_decision(checkout_prod,block), resource(checkout_prod,S).
+result_rdf(S, iri('https://example.org/vocab/exposedTo'), V, iri('https://example.org/supply-chain/graph/derived')) :-
+  exposure_path(checkout_prod,Vuln,_), resource(checkout_prod,S), resource(Vuln,V).
+result_rdf(C, iri('https://example.org/vocab/upgradeTo'), F, iri('https://example.org/supply-chain/graph/derived')) :-
+  required_action(checkout_prod,upgrade(Component,Fixed)), resource(Component,C), resource(Fixed,F).
+
+write_results :- result_rdf(S,P,O,G), write_term(rdf(S,P,O,G), [quoted(true)]), write('.'), nl, fail.
+write_results.
+:- set_prolog_flag(unknown, fail).

package/examples/data/scientific-evidence-graph-input.nq

@@ -0,0 +1,32 @@
+VERSION "1.2"
+
+<https://example.org/evidence/study/study-a> <https://example.org/vocab/statement> <<( <https://example.org/evidence/intervention/therapy-x> <https://example.org/vocab/reduces> <https://example.org/evidence/outcome/inflammation-marker> )>> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-a> <https://example.org/vocab/direction> <https://example.org/evidence/direction/supports> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-a> <https://example.org/vocab/design> <https://example.org/evidence/design/randomized-trial> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-a> <https://example.org/vocab/institution> <https://example.org/evidence/institution/lab-a> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-a> <https://example.org/vocab/sampleSize> "240"^^<http://www.w3.org/2001/XMLSchema#integer> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-a> <https://example.org/vocab/peerReviewed> <https://example.org/evidence/value/yes> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-b> <https://example.org/vocab/statement> <<( <https://example.org/evidence/intervention/therapy-x> <https://example.org/vocab/reduces> <https://example.org/evidence/outcome/inflammation-marker> )>> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-b> <https://example.org/vocab/direction> <https://example.org/evidence/direction/supports> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-b> <https://example.org/vocab/design> <https://example.org/evidence/design/randomized-trial> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-b> <https://example.org/vocab/institution> <https://example.org/evidence/institution/lab-b> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-b> <https://example.org/vocab/sampleSize> "310"^^<http://www.w3.org/2001/XMLSchema#integer> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-b> <https://example.org/vocab/peerReviewed> <https://example.org/evidence/value/yes> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-c> <https://example.org/vocab/statement> <<( <https://example.org/evidence/intervention/therapy-x> <https://example.org/vocab/reduces> <https://example.org/evidence/outcome/inflammation-marker> )>> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-c> <https://example.org/vocab/direction> <https://example.org/evidence/direction/contradicts> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-c> <https://example.org/vocab/design> <https://example.org/evidence/design/observational> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-c> <https://example.org/vocab/institution> <https://example.org/evidence/institution/lab-c> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-c> <https://example.org/vocab/sampleSize> "40"^^<http://www.w3.org/2001/XMLSchema#integer> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-c> <https://example.org/vocab/peerReviewed> <https://example.org/evidence/value/yes> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-d> <https://example.org/vocab/statement> <<( <https://example.org/evidence/intervention/therapy-x> <https://example.org/vocab/improves> <https://example.org/evidence/outcome/survival> )>> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-d> <https://example.org/vocab/direction> <https://example.org/evidence/direction/supports> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-d> <https://example.org/vocab/design> <https://example.org/evidence/design/randomized-trial> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-d> <https://example.org/vocab/institution> <https://example.org/evidence/institution/lab-a> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-d> <https://example.org/vocab/sampleSize> "180"^^<http://www.w3.org/2001/XMLSchema#integer> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-d> <https://example.org/vocab/peerReviewed> <https://example.org/evidence/value/yes> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-e> <https://example.org/vocab/statement> <<( <https://example.org/evidence/intervention/therapy-x> <https://example.org/vocab/improves> <https://example.org/evidence/outcome/survival> )>> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-e> <https://example.org/vocab/direction> <https://example.org/evidence/direction/contradicts> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-e> <https://example.org/vocab/design> <https://example.org/evidence/design/randomized-trial> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-e> <https://example.org/vocab/institution> <https://example.org/evidence/institution/lab-b> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-e> <https://example.org/vocab/sampleSize> "210"^^<http://www.w3.org/2001/XMLSchema#integer> <https://example.org/evidence/graph/evidence> .
+<https://example.org/evidence/study/study-e> <https://example.org/vocab/peerReviewed> <https://example.org/evidence/value/yes> <https://example.org/evidence/graph/evidence> .

package/examples/data/scientific-evidence-graph-output.nq

@@ -0,0 +1,4 @@
+VERSION "1.2"
+
+<https://example.org/evidence/claim/marker-reduction> <https://example.org/vocab/evidenceState> <https://example.org/evidence/state/supported> <https://example.org/evidence/graph/derived> .
+<https://example.org/evidence/claim/survival-benefit> <https://example.org/vocab/evidenceState> <https://example.org/evidence/state/contested> <https://example.org/evidence/graph/derived> .

package/examples/data/scientific-evidence-graph-output.pl

@@ -0,0 +1,2 @@
+rdf(iri('https://example.org/evidence/claim/marker-reduction'),iri('https://example.org/vocab/evidenceState'),iri('https://example.org/evidence/state/supported'),iri('https://example.org/evidence/graph/derived')).
+rdf(iri('https://example.org/evidence/claim/survival-benefit'),iri('https://example.org/vocab/evidenceState'),iri('https://example.org/evidence/state/contested'),iri('https://example.org/evidence/graph/derived')).

package/examples/data/scientific-evidence-graph-rules.pl

@@ -0,0 +1,54 @@
+% Flagship example: a scientific evidence graph with RDF 1.2 triple terms.
+% Studies make statements about candidate claims without turning every claim into
+% accepted truth. Prolog combines study design, sample size, independence, and
+% conflicting evidence into explicit evidence states.
+
+%% goal: evidence_state(X0, X1)
+%% goal: supporting_study(X0, X1)
+%% goal: counterevidence(X0, X1, X2)
+%% goal: evidence_reason(X0, X1)
+
+v(statement,iri('https://example.org/vocab/statement')).
+v(direction,iri('https://example.org/vocab/direction')).
+v(design,iri('https://example.org/vocab/design')).
+v(institution,iri('https://example.org/vocab/institution')).
+v(sample_size,iri('https://example.org/vocab/sampleSize')).
+v(peer_reviewed,iri('https://example.org/vocab/peerReviewed')).
+g(evidence,iri('https://example.org/evidence/graph/evidence')).
+
+yes(iri('https://example.org/evidence/value/yes')).
+supports(iri('https://example.org/evidence/direction/supports')).
+contradicts(iri('https://example.org/evidence/direction/contradicts')).
+randomized(iri('https://example.org/evidence/design/randomized-trial')).
+
+claim(marker_reduction,iri('https://example.org/evidence/claim/marker-reduction'),triple(iri('https://example.org/evidence/intervention/therapy-x'),iri('https://example.org/vocab/reduces'),iri('https://example.org/evidence/outcome/inflammation-marker'))).
+claim(survival_benefit,iri('https://example.org/evidence/claim/survival-benefit'),triple(iri('https://example.org/evidence/intervention/therapy-x'),iri('https://example.org/vocab/improves'),iri('https://example.org/evidence/outcome/survival'))).
+
+study(study_a,iri('https://example.org/evidence/study/study-a')). study(study_b,iri('https://example.org/evidence/study/study-b')). study(study_c,iri('https://example.org/evidence/study/study-c')).
+study(study_d,iri('https://example.org/evidence/study/study-d')). study(study_e,iri('https://example.org/evidence/study/study-e')).
+integer_literal(literal(Text,datatype('http://www.w3.org/2001/XMLSchema#integer')),N):-atom_chars(Text,Cs),number_chars(N,Cs).
+
+study_statement(Study,Claim,Direction,Institution,Design,N):-
+ study(Study,S),claim(Claim,_ClaimResource,C),g(evidence,G),v(statement,PS),v(direction,PD),v(institution,PI),v(design,PDe),v(sample_size,PN),v(peer_reviewed,PP),
+ rdf(S,PS,C,G),rdf(S,PD,Direction,G),rdf(S,PI,Institution,G),rdf(S,PDe,Design,G),rdf(S,PN,L,G),integer_literal(L,N),yes(Y),rdf(S,PP,Y,G).
+
+high_quality(Study,Claim,Direction,Institution):-study_statement(Study,Claim,Direction,Institution,Design,N),randomized(R),Design=R,N >= 100.
+independent_support_pair(Claim,S1,S2):-supports(S),high_quality(S1,Claim,S,I1),high_quality(S2,Claim,S,I2),S1 @< S2,I1 \= I2.
+high_quality_counterevidence(Claim,Study):-contradicts(C),high_quality(Study,Claim,C,_).
+
+supporting_study(Claim,Study):-supports(S),high_quality(Study,Claim,S,_).
+counterevidence(Claim,Study,low_quality):-contradicts(C),study_statement(Study,Claim,C,_I,_D,_N),\+ high_quality(Study,Claim,C,_).
+counterevidence(Claim,Study,high_quality):-high_quality_counterevidence(Claim,Study).
+
+evidence_state(Claim,supported):-independent_support_pair(Claim,_S1,_S2),\+ high_quality_counterevidence(Claim,_Counter).
+evidence_state(Claim,contested):-supporting_study(Claim,_),high_quality_counterevidence(Claim,_).
+
+evidence_reason(marker_reduction,"Two independent randomized studies with sample size >= 100 support the claim; the contradictory observational study is retained as lower-quality counterevidence."):-evidence_state(marker_reduction,supported).
+evidence_reason(survival_benefit,"High-quality randomized evidence exists on both sides, so the claim remains contested instead of being collapsed to a single truth value."):-evidence_state(survival_benefit,contested).
+
+result_rdf(ClaimResource,iri('https://example.org/vocab/evidenceState'),State,iri('https://example.org/evidence/graph/derived')):-claim(Claim,ClaimResource,_Statement),evidence_state(Claim,S),state_iri(S,State).
+state_iri(supported,iri('https://example.org/evidence/state/supported')). state_iri(contested,iri('https://example.org/evidence/state/contested')).
+
+write_results:-result_rdf(S,P,O,G),write_term(rdf(S,P,O,G),[quoted(true)]),write('.'),nl,fail.
+write_results.
+:- set_prolog_flag(unknown, fail).

package/examples/deck/README.md

@@ -2,5 +2,10 @@
 
 Wide-audience companion explanations for selected runnable examples.
 
+- [Cross-organization data sharing](cross-organization-data-sharing.md) — ODRL/DPV sharing decisions with permit, deny, review, safeguards, and obligations.
+- [Explainable EV-depot configuration](explainable-ev-depot-configuration.md) — reversible configuration rules that select a charger, explain blockers, and derive required changes.
 - [ODRL policy reasoning](odrl-policy-reasoning.md) — permissions, prohibitions, duties, conflicts, and defaults.
+- [Operational incident response](operational-incident-response.md) — topology-aware root-cause, impact, evidence-chain, and safe-mitigation reasoning.
+- [SBOM vulnerability response](sbom-vulnerability-response.md) — transitive exposure paths, severity policy, waivers, deployment decisions, and upgrade actions.
+- [Scientific evidence graph](scientific-evidence-graph.md) — RDF 1.2 claims, provenance, evidence quality, corroboration, and explicit disagreement.
 - [Symbiotic Knowledge Graphs](symbiotic-knowledge-graphs.md) — a real-world RDF → Prolog → RDF heatwave-response loop in which AI proposes, explicit rules govern, people review, and accepted knowledge improves later decisions.

package/examples/deck/cross-organization-data-sharing.md

@@ -0,0 +1,35 @@
+# Cross-organization data sharing
+
+## Decision
+
+**May this dataset be shared with this organization for this purpose, under these safeguards?**
+
+Three requests deliberately exercise different outcomes: an EU research request is **permitted**, a marketing distribution is **denied** by an explicit ODRL prohibition, and an otherwise valid out-of-region research request is sent to **review** because a required transfer safeguard is missing.
+
+## Why this is challenging
+
+A real sharing decision is not one boolean rule. It combines the requested action and purpose, recipient properties, retention, technical safeguards, legal basis, jurisdiction, explicit prohibitions, and obligations that apply after permission.
+
+The example uses RDF as the interoperable data layer, W3C ODRL terms for permissions/prohibitions, DPV terms for purposes/legal basis, and ISO Prolog rules for the decision procedure. The important output is not only `permit/deny/review`, but the exact condition that produced it.
+
+## Files
+
+- [`../cross-organization-data-sharing.pl`](../cross-organization-data-sharing.pl)
+- [`../data/cross-organization-data-sharing-input.nq`](../data/cross-organization-data-sharing-input.nq)
+- [`../data/cross-organization-data-sharing-rules.pl`](../data/cross-organization-data-sharing-rules.pl)
+- [`../data/cross-organization-data-sharing-output.nq`](../data/cross-organization-data-sharing-output.nq)
+
+## Reproduce
+
+```sh
+rdf-to-prolog examples/data/cross-organization-data-sharing-input.nq \
+  --rules examples/data/cross-organization-data-sharing-rules.pl \
+  -o examples/cross-organization-data-sharing.pl
+
+eyeprolog examples/cross-organization-data-sharing.pl
+
+eyeprolog --goal write_results examples/cross-organization-data-sharing.pl \
+  > examples/data/cross-organization-data-sharing-output.pl
+prolog-to-rdf examples/data/cross-organization-data-sharing-output.pl \
+  -o examples/data/cross-organization-data-sharing-output.nq
+```

package/examples/deck/explainable-ev-depot-configuration.md

@@ -0,0 +1,38 @@
+# Explainable EV-depot configuration
+
+## Questions, not just filtering
+
+A depot needs a charger compatible with its **60 kW available site power**, **22 kW minimum charging rate**, **CCS2 connector**, and **three-phase supply**.
+
+EyeProlog does four useful things with the same rules:
+
+1. finds the compatible option (`fleet22`);
+2. recommends it;
+3. explains why each rejected option fails; and
+4. answers the reverse question: **what would have to change to make this option viable?**
+
+Examples include `increase_site_power_to(80)`, `choose_charger_at_least_kw(22)`, and `use_connector(ccs2)`.
+
+That reversibility is a practical difference between a relational rule model and a one-way scoring/filtering pipeline. The rules describe the relationships that must hold, so they can support selection, diagnosis, and what-if questions without creating three separate business-rule implementations.
+
+## Files
+
+- [`../explainable-ev-depot-configuration.pl`](../explainable-ev-depot-configuration.pl)
+- [`../data/explainable-ev-depot-configuration-input.nq`](../data/explainable-ev-depot-configuration-input.nq)
+- [`../data/explainable-ev-depot-configuration-rules.pl`](../data/explainable-ev-depot-configuration-rules.pl)
+- [`../data/explainable-ev-depot-configuration-output.nq`](../data/explainable-ev-depot-configuration-output.nq)
+
+## Reproduce
+
+```sh
+rdf-to-prolog examples/data/explainable-ev-depot-configuration-input.nq \
+  --rules examples/data/explainable-ev-depot-configuration-rules.pl \
+  -o examples/explainable-ev-depot-configuration.pl
+
+eyeprolog examples/explainable-ev-depot-configuration.pl
+
+eyeprolog --goal write_results examples/explainable-ev-depot-configuration.pl \
+  > examples/data/explainable-ev-depot-configuration-output.pl
+prolog-to-rdf examples/data/explainable-ev-depot-configuration-output.pl \
+  -o examples/data/explainable-ev-depot-configuration-output.nq
+```

package/examples/deck/operational-incident-response.md

@@ -0,0 +1,35 @@
+# Operational incident response
+
+## Decision
+
+**What is the most defensible root cause, what is impacted, and what should operations do next?**
+
+The scenario combines a live service topology with incident symptoms and telemetry. EyeProlog correlates a payment API database-timeout symptom with a primary database at 100% disk usage, confirms that the authentication service is healthy, propagates impact through the dependency graph, and recommends failover only because the replica is independently healthy.
+
+## Why this is harder than alert matching
+
+Production incidents are graph-shaped. The component that alarms is often not the component that failed, downstream business services inherit impact transitively, and a mitigation is safe only under additional conditions. A useful answer therefore needs both **correlation** and **dependency reasoning**.
+
+The example exposes the complete chain as ordinary relations: `root_cause/3`, `impacted_service/2`, `recommended_action/2`, and `evidence_chain/2`.
+
+## Files
+
+- [`../operational-incident-response.pl`](../operational-incident-response.pl)
+- [`../data/operational-incident-response-input.nq`](../data/operational-incident-response-input.nq)
+- [`../data/operational-incident-response-rules.pl`](../data/operational-incident-response-rules.pl)
+- [`../data/operational-incident-response-output.nq`](../data/operational-incident-response-output.nq)
+
+## Reproduce
+
+```sh
+rdf-to-prolog examples/data/operational-incident-response-input.nq \
+  --rules examples/data/operational-incident-response-rules.pl \
+  -o examples/operational-incident-response.pl
+
+eyeprolog examples/operational-incident-response.pl
+
+eyeprolog --goal write_results examples/operational-incident-response.pl \
+  > examples/data/operational-incident-response-output.pl
+prolog-to-rdf examples/data/operational-incident-response-output.pl \
+  -o examples/data/operational-incident-response-output.nq
+```

package/examples/deck/sbom-vulnerability-response.md

@@ -0,0 +1,42 @@
+# Software supply-chain vulnerability response
+
+## Decision
+
+**Should `checkout-prod` be deployed, and if not, exactly which transitive dependency and fix are responsible?**
+
+The checked example answers **block**. The production service reaches a critical CVE through `shop-app → payments-sdk → crypto-wrapper → openssl-3.0.12`. A separate medium-severity logging CVE is covered by an active, explicit waiver, so it does not masquerade as the blocking reason.
+
+## Why this is a useful EyeProlog case
+
+Real SBOM review is a graph problem plus policy: dependencies are transitive, vulnerability feeds change, exceptions expire, and reviewers need more than a red/green score. EyeProlog keeps the dependency path, policy, exception, and resulting action in the same inspectable reasoning model.
+
+The example demonstrates:
+
+- transitive dependency reasoning over RDF `rdf/4` facts;
+- severity policy and time-bounded waivers;
+- a concrete deployment decision;
+- an exact exposure path, not just “vulnerable”;
+- a machine-readable upgrade conclusion that can round-trip to RDF.
+
+## Files
+
+- [`../sbom-vulnerability-response.pl`](../sbom-vulnerability-response.pl) — runnable combined example
+- [`../data/sbom-vulnerability-response-input.nq`](../data/sbom-vulnerability-response-input.nq) — RDF 1.2 input
+- [`../data/sbom-vulnerability-response-rules.pl`](../data/sbom-vulnerability-response-rules.pl) — portable rules
+- [`../data/sbom-vulnerability-response-output.nq`](../data/sbom-vulnerability-response-output.nq) — materialized RDF result
+
+## Reproduce the boundary
+
+```sh
+rdf-to-prolog examples/data/sbom-vulnerability-response-input.nq \
+  --rules examples/data/sbom-vulnerability-response-rules.pl \
+  -o examples/sbom-vulnerability-response.pl
+
+eyeprolog examples/sbom-vulnerability-response.pl
+
+eyeprolog --goal write_results examples/sbom-vulnerability-response.pl \
+  > examples/data/sbom-vulnerability-response-output.pl
+
+prolog-to-rdf examples/data/sbom-vulnerability-response-output.pl \
+  -o examples/data/sbom-vulnerability-response-output.nq
+```

package/examples/deck/scientific-evidence-graph.md

@@ -0,0 +1,40 @@
+# Scientific evidence graph
+
+## Decision
+
+**What should a knowledge graph say when studies disagree?**
+
+This example does not turn every published statement into truth. RDF 1.2 triple terms represent the scientific claims themselves, while study metadata records who produced evidence, study design, sample size, peer review, and whether the result supports or contradicts the claim.
+
+EyeProlog then derives two deliberately different conclusions:
+
+- **marker reduction: supported** — two independent randomized studies with sample size ≥100 agree; a small observational contradiction remains visible as lower-quality counterevidence;
+- **survival benefit: contested** — high-quality randomized evidence exists on both sides, so the graph refuses to flatten the disagreement into a single accepted assertion.
+
+## Why this matters
+
+Knowledge graphs are good at storing statements and provenance, but scientific use needs an explicit policy for what those statements justify. The interesting reasoning is about **quality, independence, corroboration, contradiction, and the boundary between evidence and accepted conclusion**.
+
+This is also a natural symbiotic-KG case: machines can extract candidate evidence, RDF preserves the source structure, Prolog makes the acceptance policy inspectable, and humans can challenge either the evidence metadata or the policy itself.
+
+## Files
+
+- [`../scientific-evidence-graph.pl`](../scientific-evidence-graph.pl)
+- [`../data/scientific-evidence-graph-input.nq`](../data/scientific-evidence-graph-input.nq)
+- [`../data/scientific-evidence-graph-rules.pl`](../data/scientific-evidence-graph-rules.pl)
+- [`../data/scientific-evidence-graph-output.nq`](../data/scientific-evidence-graph-output.nq)
+
+## Reproduce
+
+```sh
+rdf-to-prolog examples/data/scientific-evidence-graph-input.nq \
+  --rules examples/data/scientific-evidence-graph-rules.pl \
+  -o examples/scientific-evidence-graph.pl
+
+eyeprolog examples/scientific-evidence-graph.pl
+
+eyeprolog --goal write_results examples/scientific-evidence-graph.pl \
+  > examples/data/scientific-evidence-graph-output.pl
+prolog-to-rdf examples/data/scientific-evidence-graph-output.pl \
+  -o examples/data/scientific-evidence-graph-output.nq
+```

package/examples/explainable-ev-depot-configuration.pl

@@ -0,0 +1,78 @@
+% Generated by rdf-prolog-roundtrip.
+
+% RDF terms use rdf(Subject, Predicate, Object, Graph).
+
+rdf(iri('https://example.org/ev-depot/site/depot-a'), iri('https://example.org/vocab/availablePowerKw'), literal('60', datatype('http://www.w3.org/2001/XMLSchema#integer')), iri('https://example.org/ev-depot/graph/site')).
+rdf(iri('https://example.org/ev-depot/site/depot-a'), iri('https://example.org/vocab/requiredChargeKw'), literal('22', datatype('http://www.w3.org/2001/XMLSchema#integer')), iri('https://example.org/ev-depot/graph/site')).
+rdf(iri('https://example.org/ev-depot/site/depot-a'), iri('https://example.org/vocab/requiredConnector'), iri('https://example.org/ev-depot/connector/ccs2'), iri('https://example.org/ev-depot/graph/site')).
+rdf(iri('https://example.org/ev-depot/site/depot-a'), iri('https://example.org/vocab/supply'), iri('https://example.org/ev-depot/supply/three-phase'), iri('https://example.org/ev-depot/graph/site')).
+rdf(iri('https://example.org/ev-depot/charger/fleet22'), iri('https://example.org/vocab/chargeKw'), literal('22', datatype('http://www.w3.org/2001/XMLSchema#integer')), iri('https://example.org/ev-depot/graph/catalog')).
+rdf(iri('https://example.org/ev-depot/charger/fleet22'), iri('https://example.org/vocab/sitePowerRequirementKw'), literal('45', datatype('http://www.w3.org/2001/XMLSchema#integer')), iri('https://example.org/ev-depot/graph/catalog')).
+rdf(iri('https://example.org/ev-depot/charger/fleet22'), iri('https://example.org/vocab/connector'), iri('https://example.org/ev-depot/connector/ccs2'), iri('https://example.org/ev-depot/graph/catalog')).
+rdf(iri('https://example.org/ev-depot/charger/fleet22'), iri('https://example.org/vocab/supply'), iri('https://example.org/ev-depot/supply/three-phase'), iri('https://example.org/ev-depot/graph/catalog')).
+rdf(iri('https://example.org/ev-depot/charger/rapid50'), iri('https://example.org/vocab/chargeKw'), literal('50', datatype('http://www.w3.org/2001/XMLSchema#integer')), iri('https://example.org/ev-depot/graph/catalog')).
+rdf(iri('https://example.org/ev-depot/charger/rapid50'), iri('https://example.org/vocab/sitePowerRequirementKw'), literal('80', datatype('http://www.w3.org/2001/XMLSchema#integer')), iri('https://example.org/ev-depot/graph/catalog')).
+rdf(iri('https://example.org/ev-depot/charger/rapid50'), iri('https://example.org/vocab/connector'), iri('https://example.org/ev-depot/connector/ccs2'), iri('https://example.org/ev-depot/graph/catalog')).
+rdf(iri('https://example.org/ev-depot/charger/rapid50'), iri('https://example.org/vocab/supply'), iri('https://example.org/ev-depot/supply/three-phase'), iri('https://example.org/ev-depot/graph/catalog')).
+rdf(iri('https://example.org/ev-depot/charger/budget11'), iri('https://example.org/vocab/chargeKw'), literal('11', datatype('http://www.w3.org/2001/XMLSchema#integer')), iri('https://example.org/ev-depot/graph/catalog')).
+rdf(iri('https://example.org/ev-depot/charger/budget11'), iri('https://example.org/vocab/sitePowerRequirementKw'), literal('25', datatype('http://www.w3.org/2001/XMLSchema#integer')), iri('https://example.org/ev-depot/graph/catalog')).
+rdf(iri('https://example.org/ev-depot/charger/budget11'), iri('https://example.org/vocab/connector'), iri('https://example.org/ev-depot/connector/ccs2'), iri('https://example.org/ev-depot/graph/catalog')).
+rdf(iri('https://example.org/ev-depot/charger/budget11'), iri('https://example.org/vocab/supply'), iri('https://example.org/ev-depot/supply/three-phase'), iri('https://example.org/ev-depot/graph/catalog')).
+rdf(iri('https://example.org/ev-depot/charger/legacy22'), iri('https://example.org/vocab/chargeKw'), literal('22', datatype('http://www.w3.org/2001/XMLSchema#integer')), iri('https://example.org/ev-depot/graph/catalog')).
+rdf(iri('https://example.org/ev-depot/charger/legacy22'), iri('https://example.org/vocab/sitePowerRequirementKw'), literal('45', datatype('http://www.w3.org/2001/XMLSchema#integer')), iri('https://example.org/ev-depot/graph/catalog')).
+rdf(iri('https://example.org/ev-depot/charger/legacy22'), iri('https://example.org/vocab/connector'), iri('https://example.org/ev-depot/connector/type2'), iri('https://example.org/ev-depot/graph/catalog')).
+rdf(iri('https://example.org/ev-depot/charger/legacy22'), iri('https://example.org/vocab/supply'), iri('https://example.org/ev-depot/supply/three-phase'), iri('https://example.org/ev-depot/graph/catalog')).
+
+% Rules
+% Flagship example: explainable configuration rather than opaque filtering.
+% The same relational model answers: what fits, why does an option fail, and
+% what would have to change to make a rejected option viable?
+
+%% goal: compatible(X0, X1)
+%% goal: recommendation(X0, X1)
+%% goal: blocker(X0, X1, X2)
+%% goal: required_change(X0, X1, X2)
+
+v(available_power,iri('https://example.org/vocab/availablePowerKw')).
+v(required_charge,iri('https://example.org/vocab/requiredChargeKw')).
+v(required_connector,iri('https://example.org/vocab/requiredConnector')).
+v(supply,iri('https://example.org/vocab/supply')).
+v(charge_kw,iri('https://example.org/vocab/chargeKw')).
+v(site_power_requirement,iri('https://example.org/vocab/sitePowerRequirementKw')).
+v(connector,iri('https://example.org/vocab/connector')).
+
+g(site,iri('https://example.org/ev-depot/graph/site')). g(catalog,iri('https://example.org/ev-depot/graph/catalog')).
+resource(depot_a,iri('https://example.org/ev-depot/site/depot-a')).
+resource(fleet22,iri('https://example.org/ev-depot/charger/fleet22')).
+resource(rapid50,iri('https://example.org/ev-depot/charger/rapid50')).
+resource(budget11,iri('https://example.org/ev-depot/charger/budget11')).
+resource(legacy22,iri('https://example.org/ev-depot/charger/legacy22')).
+product(fleet22). product(rapid50). product(budget11). product(legacy22).
+integer_literal(literal(Text,datatype('http://www.w3.org/2001/XMLSchema#integer')),N):-atom_chars(Text,Cs),number_chars(N,Cs).
+
+site_number(Key,N):-resource(depot_a,S),v(Key,P),g(site,G),rdf(S,P,L,G),integer_literal(L,N).
+site_term(Key,V):-resource(depot_a,S),v(Key,P),g(site,G),rdf(S,P,V,G).
+product_number(Product,Key,N):-resource(Product,R),v(Key,P),g(catalog,G),rdf(R,P,L,G),integer_literal(L,N).
+product_term(Product,Key,V):-resource(Product,R),v(Key,P),g(catalog,G),rdf(R,P,V,G).
+
+blocker(depot_a,Product,insufficient_site_power(Available,Needed)):-product(Product),site_number(available_power,Available),product_number(Product,site_power_requirement,Needed),Available < Needed.
+blocker(depot_a,Product,insufficient_charge_rate(Offered,Required)):-product(Product),product_number(Product,charge_kw,Offered),site_number(required_charge,Required),Offered < Required.
+blocker(depot_a,Product,connector_mismatch(Offered,Required)):-product(Product),product_term(Product,connector,OfferedIri),site_term(required_connector,RequiredIri),OfferedIri \= RequiredIri,connector_name(OfferedIri,Offered),connector_name(RequiredIri,Required).
+blocker(depot_a,Product,supply_mismatch):-product(Product),product_term(Product,supply,S),site_term(supply,SiteS),S \= SiteS.
+
+connector_name(iri('https://example.org/ev-depot/connector/ccs2'),ccs2).
+connector_name(iri('https://example.org/ev-depot/connector/type2'),type2).
+
+compatible(depot_a,Product):-product(Product),\+ blocker(depot_a,Product,_).
+recommendation(depot_a,fleet22):-compatible(depot_a,fleet22).
+
+required_change(depot_a,Product,increase_site_power_to(Needed)):-blocker(depot_a,Product,insufficient_site_power(_,Needed)).
+required_change(depot_a,Product,choose_charger_at_least_kw(Required)):-blocker(depot_a,Product,insufficient_charge_rate(_,Required)).
+required_change(depot_a,Product,use_connector(Required)):-blocker(depot_a,Product,connector_mismatch(_,Required)).
+
+result_rdf(S,iri('https://example.org/vocab/recommendedCharger'),C,iri('https://example.org/ev-depot/graph/derived')):-recommendation(depot_a,Product),resource(depot_a,S),resource(Product,C).
+result_rdf(C,iri('https://example.org/vocab/configurationStatus'),iri('https://example.org/ev-depot/state/compatible'),iri('https://example.org/ev-depot/graph/derived')):-compatible(depot_a,Product),resource(Product,C).
+
+write_results:-result_rdf(S,P,O,G),write_term(rdf(S,P,O,G),[quoted(true)]),write('.'),nl,fail.
+write_results.
+:- set_prolog_flag(unknown, fail).

package/examples/operational-incident-response.pl

@@ -0,0 +1,89 @@
+% Generated by rdf-prolog-roundtrip.
+
+% RDF terms use rdf(Subject, Predicate, Object, Graph).
+
+rdf(iri('https://example.org/operations/service/storefront'), iri('https://example.org/vocab/dependsOn'), iri('https://example.org/operations/service/checkout-api'), iri('https://example.org/operations/graph/topology')).
+rdf(iri('https://example.org/operations/service/mobile-app'), iri('https://example.org/vocab/dependsOn'), iri('https://example.org/operations/service/checkout-api'), iri('https://example.org/operations/graph/topology')).
+rdf(iri('https://example.org/operations/service/checkout-api'), iri('https://example.org/vocab/dependsOn'), iri('https://example.org/operations/service/payment-api'), iri('https://example.org/operations/graph/topology')).
+rdf(iri('https://example.org/operations/service/payment-api'), iri('https://example.org/vocab/dependsOn'), iri('https://example.org/operations/db/primary'), iri('https://example.org/operations/graph/topology')).
+rdf(iri('https://example.org/operations/service/payment-api'), iri('https://example.org/vocab/dependsOn'), iri('https://example.org/operations/service/auth-service'), iri('https://example.org/operations/graph/topology')).
+rdf(iri('https://example.org/operations/service/auth-service'), iri('https://example.org/vocab/dependsOn'), iri('https://example.org/operations/db/identity'), iri('https://example.org/operations/graph/topology')).
+rdf(iri('https://example.org/operations/incident/inc-900'), iri('https://example.org/vocab/symptom'), iri('https://example.org/operations/symptom/db-timeout'), iri('https://example.org/operations/graph/incident')).
+rdf(iri('https://example.org/operations/incident/inc-900'), iri('https://example.org/vocab/observedOn'), iri('https://example.org/operations/service/payment-api'), iri('https://example.org/operations/graph/incident')).
+rdf(iri('https://example.org/operations/db/primary'), iri('https://example.org/vocab/status'), iri('https://example.org/operations/state/unhealthy'), iri('https://example.org/operations/graph/telemetry')).
+rdf(iri('https://example.org/operations/db/primary'), iri('https://example.org/vocab/diskUsagePercent'), literal('100', datatype('http://www.w3.org/2001/XMLSchema#integer')), iri('https://example.org/operations/graph/telemetry')).
+rdf(iri('https://example.org/operations/db/replica'), iri('https://example.org/vocab/status'), iri('https://example.org/operations/state/healthy'), iri('https://example.org/operations/graph/telemetry')).
+rdf(iri('https://example.org/operations/service/auth-service'), iri('https://example.org/vocab/status'), iri('https://example.org/operations/state/healthy'), iri('https://example.org/operations/graph/telemetry')).
+rdf(iri('https://example.org/operations/service/payment-api'), iri('https://example.org/vocab/errorRatePercent'), literal('72', datatype('http://www.w3.org/2001/XMLSchema#integer')), iri('https://example.org/operations/graph/telemetry')).
+rdf(iri('https://example.org/operations/runbook/db-failover'), iri('https://example.org/vocab/whenCause'), iri('https://example.org/operations/cause/disk-full'), iri('https://example.org/operations/graph/runbook')).
+rdf(iri('https://example.org/operations/runbook/db-failover'), iri('https://example.org/vocab/action'), iri('https://example.org/operations/action/failover-to-replica'), iri('https://example.org/operations/graph/runbook')).
+
+% Rules
+% Flagship example: operational incident diagnosis and response.
+% The topology, incident observations, telemetry, and runbook are RDF data.
+% Prolog correlates evidence, traverses service dependencies, and recommends a
+% bounded mitigation with an inspectable evidence chain.
+
+%% goal: root_cause(X0, X1, X2)
+%% goal: impacted_service(X0, X1)
+%% goal: recommended_action(X0, X1)
+%% goal: evidence_chain(X0, X1)
+
+v(depends_on,iri('https://example.org/vocab/dependsOn')).
+v(symptom,iri('https://example.org/vocab/symptom')).
+v(observed_on,iri('https://example.org/vocab/observedOn')).
+v(status,iri('https://example.org/vocab/status')).
+v(disk_usage,iri('https://example.org/vocab/diskUsagePercent')).
+v(error_rate,iri('https://example.org/vocab/errorRatePercent')).
+v(when_cause,iri('https://example.org/vocab/whenCause')).
+v(action,iri('https://example.org/vocab/action')).
+
+g(topology,iri('https://example.org/operations/graph/topology')).
+g(telemetry,iri('https://example.org/operations/graph/telemetry')).
+g(incident,iri('https://example.org/operations/graph/incident')).
+g(runbook,iri('https://example.org/operations/graph/runbook')).
+
+resource(inc900,iri('https://example.org/operations/incident/inc-900')).
+resource(storefront,iri('https://example.org/operations/service/storefront')).
+resource(mobile_app,iri('https://example.org/operations/service/mobile-app')).
+resource(checkout_api,iri('https://example.org/operations/service/checkout-api')).
+resource(payment_api,iri('https://example.org/operations/service/payment-api')).
+resource(auth_service,iri('https://example.org/operations/service/auth-service')).
+resource(primary_db,iri('https://example.org/operations/db/primary')).
+resource(replica_db,iri('https://example.org/operations/db/replica')).
+
+integer_literal(literal(Text,datatype('http://www.w3.org/2001/XMLSchema#integer')),N):-atom_chars(Text,Cs),number_chars(N,Cs).
+
+depends(A,B):-resource(A,RA),resource(B,RB),v(depends_on,P),g(topology,G),rdf(RA,P,RB,G).
+transitively_depends(A,B):-depends(A,B).
+transitively_depends(A,B):-depends(A,C),transitively_depends(C,B).
+
+telemetry(Resource,Key,Value):-resource(Resource,R),v(Key,P),g(telemetry,G),rdf(R,P,Value,G).
+incident_fact(Key,Value):-resource(inc900,I),v(Key,P),g(incident,G),rdf(I,P,Value,G).
+
+root_cause(inc900,primary_db,disk_full):-
+ incident_fact(symptom,iri('https://example.org/operations/symptom/db-timeout')),
+ telemetry(primary_db,status,iri('https://example.org/operations/state/unhealthy')),
+ telemetry(primary_db,disk_usage,L),integer_literal(L,100),
+ telemetry(payment_api,error_rate,E),integer_literal(E,Rate),Rate >= 50,
+ telemetry(auth_service,status,iri('https://example.org/operations/state/healthy')).
+
+impacted_service(inc900,primary_db):-root_cause(inc900,primary_db,_).
+impacted_service(inc900,Service):-root_cause(inc900,primary_db,_),transitively_depends(Service,primary_db).
+
+cause_iri(disk_full,iri('https://example.org/operations/cause/disk-full')).
+action_iri(failover_to_replica,iri('https://example.org/operations/action/failover-to-replica')).
+runbook_action(Cause,Action):-g(runbook,G),v(when_cause,PC),v(action,PA),cause_iri(Cause,C),action_iri(Action,A),rdf(Rule,PC,C,G),rdf(Rule,PA,A,G).
+
+recommended_action(inc900,failover(primary_db,replica_db)):-
+ root_cause(inc900,primary_db,disk_full),runbook_action(disk_full,failover_to_replica),telemetry(replica_db,status,iri('https://example.org/operations/state/healthy')).
+
+evidence_chain(inc900,[payment_api_db_timeout,primary_db_unhealthy,primary_db_disk_100_percent,auth_service_healthy,replica_db_healthy]):-recommended_action(inc900,_).
+
+result_rdf(I,iri('https://example.org/vocab/rootCause'),C,iri('https://example.org/operations/graph/derived')):-root_cause(inc900,primary_db,disk_full),resource(inc900,I),resource(primary_db,C).
+result_rdf(I,iri('https://example.org/vocab/recommendedAction'),ActionIri,iri('https://example.org/operations/graph/derived')):-recommended_action(inc900,_),runbook_action(disk_full,failover_to_replica),action_iri(failover_to_replica,ActionIri),resource(inc900,I).
+result_rdf(I,iri('https://example.org/vocab/impacts'),S,iri('https://example.org/operations/graph/derived')):-impacted_service(inc900,Service),resource(inc900,I),resource(Service,S).
+
+write_results:-result_rdf(S,P,O,G),write_term(rdf(S,P,O,G),[quoted(true)]),write('.'),nl,fail.
+write_results.
+:- set_prolog_flag(unknown, fail).

package/examples/output/cross-organization-data-sharing.pl

@@ -0,0 +1,8 @@
+sharing_decision(marketing, deny).
+sharing_decision(research_us, review).
+sharing_decision(research_eu, permit).
+obligation(research_eu, delete_after_days(120)).
+obligation(research_eu, retain_audit_log).
+decision_reason(research_eu, "ODRL permission matches; recipient is certified, data is pseudonymized, retention is within 180 days, and the transfer stays in-region.").
+decision_reason(marketing, "The requested marketing distribution matches an explicit ODRL prohibition.").
+decision_reason(research_us, "The research purpose is permitted, but the out-of-region transfer lacks the required contractual safeguard and must be reviewed.").

package/examples/output/explainable-ev-depot-configuration.pl

@@ -0,0 +1,8 @@
+blocker(depot_a, rapid50, insufficient_site_power(60, 80)).
+blocker(depot_a, budget11, insufficient_charge_rate(11, 22)).
+blocker(depot_a, legacy22, connector_mismatch(type2, ccs2)).
+compatible(depot_a, fleet22).
+recommendation(depot_a, fleet22).
+required_change(depot_a, rapid50, increase_site_power_to(80)).
+required_change(depot_a, budget11, choose_charger_at_least_kw(22)).
+required_change(depot_a, legacy22, use_connector(ccs2)).