seam-lang 2.0.0

package/examples/odrl-dpv-healthcare-risk-ranked.pl

@@ -0,0 +1,270 @@
+% ODRL + DPV healthcare risk ranking adapted from Eyeling.
+%
+% The scenario models a healthcare data-use agreement, patient needs, processing
+% clauses, risk scores, and mitigation suggestions.  Rules derive violations, raw
+% and normalized scores, risk levels, and small formula-valued suggestion graphs.
+%
+% This is one of the richer policy examples: it combines structured policy data,
+% ranked risk computation, and report-oriented materialization.
+% Output declarations: materialize/2 selects the relations written to this example's golden output.
+materialize(policyGraph, 2).
+materialize(contains, 2).
+materialize(dpv_hasRisk, 2).
+materialize(type, 2).
+materialize(scoreRaw, 2).
+materialize(score, 2).
+materialize(dpv_hasRiskLevel, 2).
+materialize(dpv_hasSeverity, 2).
+materialize(aboutClause, 2).
+materialize(violatesNeed, 2).
+materialize(dct_source, 2).
+materialize(dct_description, 2).
+materialize(reportKey, 2).
+materialize(dpv_isMitigatedByMeasure, 2).
+materialize(suggestAddGraph, 2).
+materialize(firstRisk, 2).
+materialize(retentionRiskScore, 2).
+
+% Program structure: facts set up the scenario, and rules derive the materialized conclusions.
+party(hospital).
+party(researchUnit).
+party(pharmaPartner).
+party(clinicalAIService).
+data_asset(healthRecordData).
+data_asset(genomicData).
+process(processContextHC1).
+
+title(agreementHC1, "Example Healthcare & Life-Sciences Data Use Agreement").
+title(patientExample, "Example patient profile").
+
+has_need(patientExample, need_ConsentForResearch).
+has_need(patientExample, need_DeIdentifyBeforeSharing).
+has_need(patientExample, need_HumanReviewForAutomatedTriage).
+has_need(patientExample, need_RetentionLimit3y).
+
+importance(need_ConsentForResearch, 35).
+importance(need_DeIdentifyBeforeSharing, 35).
+importance(need_HumanReviewForAutomatedTriage, 25).
+importance(need_RetentionLimit3y, 15).
+max_retention_days(need_RetentionLimit3y, 1095).
+
+clause_id(clauseH1, "H1").
+clause_text(clauseH1, "Hospital may use EHR and genomic data for internal clinical research and publication.").
+clause_id(clauseH2, "H2").
+clause_text(clauseH2, "Hospital may share genomic data with pharmaceutical partners for drug discovery and R&D.").
+clause_id(clauseH3, "H3").
+clause_text(clauseH3, "Hospital may use automated triage and prioritisation systems using EHR data.").
+clause_id(clauseH4, "H4").
+clause_text(clauseH4, "Hospital retains patient health records for 10 years.").
+
+agreement_policy_graph(agreementHC1, policyGraphHC1).
+
+policy_graph(policyGraphHC1, (
+  type(policyHC1, odrl_Policy),
+  odrl_permission(policyHC1, permResearchUse),
+  odrl_permission(policyHC1, permShareWithPharma),
+  odrl_permission(policyHC1, permAutomatedTriage),
+  odrl_permission(policyHC1, permRetention10y),
+
+  type(permResearchUse, odrl_Permission),
+  odrl_assigner(permResearchUse, hospital),
+  odrl_assignee(permResearchUse, researchUnit),
+  odrl_action(permResearchUse, hl7ca_use),
+  odrl_target(permResearchUse, healthRecordData),
+  odrl_target(permResearchUse, genomicData),
+  odrl_constraint(permResearchUse, cResearchPurpose),
+  odrl_leftOperand(cResearchPurpose, odrl_purpose),
+  odrl_rightOperandReference(cResearchPurpose, purposeHMB),
+  clause(permResearchUse, clauseH1),
+
+  type(permShareWithPharma, odrl_Permission),
+  odrl_assigner(permShareWithPharma, hospital),
+  odrl_assignee(permShareWithPharma, pharmaPartner),
+  odrl_action(permShareWithPharma, hl7ca_disclose),
+  odrl_target(permShareWithPharma, genomicData),
+  odrl_constraint(permShareWithPharma, cSharePurpose),
+  odrl_leftOperand(cSharePurpose, odrl_purpose),
+  odrl_rightOperandReference(cSharePurpose, purposeHMB),
+  clause(permShareWithPharma, clauseH2),
+
+  type(permAutomatedTriage, odrl_Permission),
+  odrl_assigner(permAutomatedTriage, hospital),
+  odrl_assignee(permAutomatedTriage, clinicalAIService),
+  odrl_action(permAutomatedTriage, hl7ca_use),
+  odrl_target(permAutomatedTriage, healthRecordData),
+  odrl_constraint(permAutomatedTriage, cTriagePurpose),
+  odrl_leftOperand(cTriagePurpose, odrl_purpose),
+  odrl_rightOperandReference(cTriagePurpose, purposeCC),
+  odrl_duty(permAutomatedTriage, dutyHumanReview),
+  odrl_action(dutyHumanReview, humanReview),
+  odrl_constraint(dutyHumanReview, cTriageEncryption),
+  odrl_leftOperand(cTriageEncryption, encryptionAtRest),
+  odrl_rightOperand(cTriageEncryption, true),
+  clause(permAutomatedTriage, clauseH3),
+
+  type(permRetention10y, odrl_Permission),
+  odrl_assigner(permRetention10y, hospital),
+  odrl_assignee(permRetention10y, hospital),
+  odrl_action(permRetention10y, hl7ca_collect),
+  odrl_target(permRetention10y, healthRecordData),
+  odrl_constraint(permRetention10y, cRetentionPurpose),
+  odrl_leftOperand(cRetentionPurpose, odrl_purpose),
+  odrl_rightOperandReference(cRetentionPurpose, purposeCC),
+  odrl_constraint(permRetention10y, cRetentionDays),
+  odrl_leftOperand(cRetentionDays, retentionDays),
+  odrl_rightOperand(cRetentionDays, 3650),
+  clause(permRetention10y, clauseH4)
+)).
+
+% Derivation rules: each rule below contributes one logical step toward the displayed results.
+policy_statement(Graphname, Subject, Predicate, Object) :-
+  policy_graph(Graphname, Context),
+  holds(Context, Predicate, [Subject, Object]).
+
+permission(Graph, Permission) :- policy_statement(Graph, policyHC1, odrl_permission, Permission).
+clause(Graph, Permission, Clause) :- policy_statement(Graph, Permission, clause, Clause).
+action(Graph, Permission, Action) :- policy_statement(Graph, Permission, odrl_action, Action).
+target(Graph, Permission, Target) :- policy_statement(Graph, Permission, odrl_target, Target).
+duty(Graph, Permission, Duty) :- policy_statement(Graph, Permission, odrl_duty, Duty).
+duty_action(Graph, Duty, Action) :- policy_statement(Graph, Duty, odrl_action, Action).
+constraint(Graph, Permission, Constraint) :- policy_statement(Graph, Permission, odrl_constraint, Constraint).
+constraint_left(Graph, Constraint, Left) :- policy_statement(Graph, Constraint, odrl_leftOperand, Left).
+constraint_right(Graph, Constraint, Right) :- policy_statement(Graph, Constraint, odrl_rightOperand, Right).
+
+has_constraint(Graph, Permission, Left, Right) :-
+  constraint(Graph, Permission, Constraint),
+  constraint_left(Graph, Constraint, Left),
+  constraint_right(Graph, Constraint, Right).
+
+has_duty_action(Graph, Permission, Action) :-
+  duty(Graph, Permission, Duty),
+  duty_action(Graph, Duty, Action).
+
+missing_explicit_consent(Graph, Permission) :-
+  permission(Graph, Permission),
+  not(has_constraint(Graph, Permission, explicitConsent, true)).
+
+missing_deidentified(Graph, Permission) :-
+  permission(Graph, Permission),
+  not(has_constraint(Graph, Permission, deIdentified, true)).
+
+missing_human_review(Graph, Permission) :-
+  permission(Graph, Permission),
+  not(has_duty_action(Graph, Permission, humanReview)).
+
+retention_days(Graph, Permission, Days) :-
+  has_constraint(Graph, Permission, retentionDays, Days).
+
+risk(riskH1) :-
+  agreement_policy_graph(agreementHC1, Graph),
+  has_need(patientExample, need_ConsentForResearch),
+  permission(Graph, permResearchUse),
+  clause(Graph, permResearchUse, clauseH1),
+  missing_explicit_consent(Graph, permResearchUse).
+
+risk(riskH2) :-
+  agreement_policy_graph(agreementHC1, Graph),
+  has_need(patientExample, need_DeIdentifyBeforeSharing),
+  permission(Graph, permShareWithPharma),
+  target(Graph, permShareWithPharma, genomicData),
+  clause(Graph, permShareWithPharma, clauseH2),
+  missing_deidentified(Graph, permShareWithPharma).
+
+risk(riskH3) :-
+  agreement_policy_graph(agreementHC1, Graph),
+  has_need(patientExample, need_HumanReviewForAutomatedTriage),
+  permission(Graph, permAutomatedTriage),
+  clause(Graph, permAutomatedTriage, clauseH3),
+  missing_human_review(Graph, permAutomatedTriage).
+
+risk(riskH4) :-
+  agreement_policy_graph(agreementHC1, Graph),
+  has_need(patientExample, need_RetentionLimit3y),
+  max_retention_days(need_RetentionLimit3y, Max),
+  permission(Graph, permRetention10y),
+  clause(Graph, permRetention10y, clauseH4),
+  retention_days(Graph, permRetention10y, Days),
+  gt(Days, Max).
+
+base_score(riskH1, 85).
+base_score(riskH2, 90).
+base_score(riskH3, 80).
+base_score(riskH4, 55).
+violates_need(riskH1, need_ConsentForResearch).
+violates_need(riskH2, need_DeIdentifyBeforeSharing).
+violates_need(riskH3, need_HumanReviewForAutomatedTriage).
+violates_need(riskH4, need_RetentionLimit3y).
+about_clause(riskH1, clauseH1).
+about_clause(riskH2, clauseH2).
+about_clause(riskH3, clauseH3).
+about_clause(riskH4, clauseH4).
+risk_source_of(riskH1, permResearchUse).
+risk_source_of(riskH2, permShareWithPharma).
+risk_source_of(riskH3, permAutomatedTriage).
+risk_source_of(riskH4, permRetention10y).
+
+description(riskH1, "Risk: health/genomic data may be used for research without explicit opt-in consent.").
+description(riskH2, "Risk: genomic data may be shared with external pharma partners without a de-identification/pseudonymisation requirement.").
+description(riskH3, "Risk: automated triage may affect care pathways without a human review/override safeguard.").
+description(riskH4, "Risk: retention (3650 days) exceeds patient preference (1095 days).").
+
+mitigation_graph(riskH1, mitigateConsent, (
+  odrl_constraint(permResearchUse, cExplicitConsent),
+  odrl_leftOperand(cExplicitConsent, explicitConsent),
+  odrl_rightOperand(cExplicitConsent, true)
+)).
+mitigation_graph(riskH2, mitigateDeId, (
+  odrl_constraint(permShareWithPharma, cDeIdentified),
+  odrl_leftOperand(cDeIdentified, deIdentified),
+  odrl_rightOperand(cDeIdentified, true),
+  odrl_duty(permShareWithPharma, dutyDeIdentify),
+  odrl_action(dutyDeIdentify, deIdentify)
+)).
+mitigation_graph(riskH3, mitigateHumanReview, (
+  odrl_duty(permAutomatedTriage, dutyHumanReview),
+  odrl_action(dutyHumanReview, humanReview)
+)).
+mitigation_graph(riskH4, mitigateRetention, (
+  odrl_constraint(permRetention10y, cRetentionLimit),
+  odrl_leftOperand(cRetentionLimit, retentionDays),
+  odrl_rightOperand(cRetentionLimit, 1095)
+)).
+
+score_raw(Risk, Raw) :-
+  risk(Risk),
+  base_score(Risk, Base),
+  violates_need(Risk, Need),
+  importance(Need, Weight),
+  add(Base, Weight, Raw).
+
+score(Risk, 100) :- score_raw(Risk, Raw), gt(Raw, 100).
+score(Risk, Raw) :- score_raw(Risk, Raw), ge(100, Raw).
+
+severity(Risk, risk_HighSeverity) :- score(Risk, Score), gt(Score, 79).
+severity(Risk, risk_ModerateSeverity) :- score(Risk, Score), lt(Score, 80), gt(Score, 49).
+risk_level(Risk, risk_HighRisk) :- score(Risk, Score), gt(Score, 79).
+risk_level(Risk, risk_ModerateRisk) :- score(Risk, Score), lt(Score, 80), gt(Score, 49).
+
+report_key(Risk, Key) :- score(Risk, Score), sub(1000, Score, Key).
+
+policyGraph(agreementHC1, Graphterm) :-
+  agreement_policy_graph(agreementHC1, Graph),
+  policy_graph(Graph, Graphterm).
+
+contains(policyGraphHC1, statement(Subject, Predicate, Object)) :-
+  policy_statement(policyGraphHC1, Subject, Predicate, Object).
+
+dpv_hasRisk(processContextHC1, Risk) :- risk(Risk).
+type(Risk, dpv_Risk) :- risk(Risk).
+scoreRaw(Risk, Raw) :- score_raw(Risk, Raw).
+dpv_hasRiskLevel(Risk, Level) :- risk_level(Risk, Level).
+dpv_hasSeverity(Risk, Severity) :- severity(Risk, Severity).
+aboutClause(Risk, Clause) :- risk(Risk), about_clause(Risk, Clause).
+violatesNeed(Risk, Need) :- risk(Risk), violates_need(Risk, Need).
+dct_source(Risk, Source) :- risk(Risk), risk_source_of(Risk, Source).
+dct_description(Risk, Description) :- risk(Risk), description(Risk, Description).
+reportKey(Risk, Key) :- report_key(Risk, Key).
+dpv_isMitigatedByMeasure(Risk, Mitigation) :- risk(Risk), mitigation_graph(Risk, Mitigation, _graph).
+suggestAddGraph(Mitigation, Graph) :- mitigation_graph(Risk, Mitigation, Graph), risk(Risk).
+firstRisk(report, riskH1) :- score(riskH1, 100), score(riskH2, 100).
+retentionRiskScore(report, Score) :- score(riskH4, Score).

package/examples/odrl-dpv-risk-ranked.pl

@@ -0,0 +1,320 @@
+% ODRL + DPV ranked-risk assessment adapted from Eyeling odrl-dpv-risk-ranked.n3.
+% Eyeling keeps the ODRL rules inside an N3 quoted policy formula and prints a
+% Markdown report.  This seam translation also keeps the
+% policy as a formula-valued term, projects local predicates from that formula for
+% reasoning, and materializes the derived DPV risks as relation output.
+
+% Consumer profile and needs.
+% Output declarations: materialize/2 selects the relations written to this example's golden output.
+materialize(dct_title, 2).
+materialize(dpv_hasRisk, 2).
+materialize(type, 2).
+materialize(policyGraph, 2).
+materialize(contains, 2).
+materialize(source, 2).
+materialize(profile, 2).
+materialize(firstRisk, 2).
+materialize(before, 2).
+materialize(dct_source, 2).
+materialize(risk_hasRiskSource, 2).
+materialize(dpv_hasConsequence, 2).
+materialize(dpv_hasImpact, 2).
+materialize(aboutClause, 2).
+materialize(violatesNeed, 2).
+materialize(scoreRaw, 2).
+materialize(score, 2).
+materialize(dpv_hasSeverity, 2).
+materialize(dpv_hasRiskLevel, 2).
+materialize(dct_description, 2).
+materialize(reportKey, 2).
+materialize(dpv_isMitigatedByMeasure, 2).
+materialize(dpv_mitigatesRisk, 2).
+materialize(clauseId, 2).
+materialize(text, 2).
+
+% Program structure: facts set up the scenario, and rules derive the materialized conclusions.
+consumer(consumerExample).
+title(consumerExample, "Example consumer profile").
+has_need(consumerExample, need_DataCannotBeRemoved).
+has_need(consumerExample, need_ChangeOnlyWithPriorNotice).
+has_need(consumerExample, need_NoSharingWithoutConsent).
+has_need(consumerExample, need_DataPortability).
+
+importance(need_DataCannotBeRemoved, 20).
+description(need_DataCannotBeRemoved, "Provider must not remove the consumer account/data.").
+importance(need_ChangeOnlyWithPriorNotice, 15).
+min_notice_days(need_ChangeOnlyWithPriorNotice, 14).
+description(need_ChangeOnlyWithPriorNotice, "Agreement may change only with prior notice (>= 14 days).").
+importance(need_NoSharingWithoutConsent, 12).
+description(need_NoSharingWithoutConsent, "No data sharing without explicit consent.").
+importance(need_DataPortability, 10).
+description(need_DataPortability, "Consumer must be able to export their data.").
+
+% Agreement and ODRL-style policy structure.
+agreement(agreement1).
+title(agreement1, "Example Agreement").
+process_context(processContext1, agreement1).
+title(processContext1, "Service operation under Agreement1").
+
+% The ODRL policy is kept as a graph value.  The clauses below are not asserted
+% globally as permission/2, prohibition/2, action/2, ... facts; they are
+% binary terms inside policyGraph1.  The local projection predicates below read from the
+% formula when evaluating this agreement.  This mirrors N3 quoted formulae and avoids
+% making policy statements true outside the formula that contains them.
+policy_graph(policyGraph1, (
+  type(policy1, odrl_Policy),
+  odrl_appliesTo(policy1, agreement1),
+  odrl_permission(policy1, permDeleteAccount),
+  odrl_permission(policy1, permChangeTerms),
+  odrl_permission(policy1, permShareData),
+  odrl_prohibition(policy1, prohibitExportData),
+
+  odrl_assigner(permDeleteAccount, provider),
+  odrl_assignee(permDeleteAccount, consumerExample),
+  odrl_action(permDeleteAccount, tosl_removeAccount),
+  odrl_target(permDeleteAccount, userAccount),
+  clause(permDeleteAccount, clauseC1),
+
+  odrl_assigner(permChangeTerms, provider),
+  odrl_assignee(permChangeTerms, consumerExample),
+  odrl_action(permChangeTerms, tosl_changeTerms),
+  odrl_target(permChangeTerms, agreementText),
+  clause(permChangeTerms, clauseC2),
+  odrl_duty(permChangeTerms, odrl_inform),
+  noticeDays(permChangeTerms, 3),
+
+  odrl_assigner(permShareData, provider),
+  odrl_assignee(permShareData, consumerExample),
+  odrl_action(permShareData, tosl_shareData),
+  odrl_target(permShareData, userData),
+  clause(permShareData, clauseC3),
+
+  odrl_assigner(prohibitExportData, provider),
+  odrl_assignee(prohibitExportData, consumerExample),
+  odrl_action(prohibitExportData, tosl_exportData),
+  odrl_target(prohibitExportData, userData),
+  clause(prohibitExportData, clauseC4)
+)).
+
+% Derivation rules: each rule below contributes one logical step toward the displayed results.
+policy_statement(Subject, Predicate, Object) :-
+  policy_graph(_graph, Context),
+  holds(Context, Predicate, [Subject, Object]).
+
+policy(Policy, Agreement) :- policy_statement(Policy, odrl_appliesTo, Agreement).
+permission(Policy, Rule) :- policy_statement(Policy, odrl_permission, Rule).
+prohibition(Policy, Rule) :- policy_statement(Policy, odrl_prohibition, Rule).
+assigner(Rule, Party) :- policy_statement(Rule, odrl_assigner, Party).
+assignee(Rule, Party) :- policy_statement(Rule, odrl_assignee, Party).
+action(Rule, Action) :- policy_statement(Rule, odrl_action, Action).
+target(Rule, Target) :- policy_statement(Rule, odrl_target, Target).
+clause(Rule, Clause) :- policy_statement(Rule, clause, Clause).
+duty(Rule, Duty) :- policy_statement(Rule, odrl_duty, Duty).
+notice_days(Rule, Days) :- policy_statement(Rule, noticeDays, Days).
+consent_constraint(Rule, Value) :- policy_statement(Rule, consentConstraint, Value).
+
+clause_id(clauseC1, "C1").
+clause_text(clauseC1, "Provider may remove the user account (and associated data) at its discretion.").
+clause_id(clauseC2, "C2").
+clause_text(clauseC2, "Provider may change terms by informing users at least 3 days in advance.").
+clause_id(clauseC3, "C3").
+clause_text(clauseC3, "Provider may share user data with partners for business purposes.").
+clause_id(clauseC4, "C4").
+clause_text(clauseC4, "Users are not permitted to export their data.").
+
+% Missing-safeguard checks corresponding to the log_notIncludes tests in N3.
+missing_notice_constraint(Perm) :-
+  permission(policy1, Perm),
+  not(notice_days(Perm, _days)).
+
+missing_inform_duty(Perm) :-
+  permission(policy1, Perm),
+  not(duty(Perm, odrl_inform)).
+
+missing_consent_constraint(Perm) :-
+  permission(policy1, Perm),
+  action(Perm, tosl_shareData),
+  not(consent_constraint(Perm, true)).
+
+% ODRL -> DPV risk derivation.
+risk(risk1) :-
+  has_need(consumerExample, need_DataCannotBeRemoved),
+  permission(policy1, permDeleteAccount),
+  action(permDeleteAccount, tosl_removeAccount),
+  missing_notice_constraint(permDeleteAccount),
+  missing_inform_duty(permDeleteAccount).
+
+risk_source(risk1, src1).
+risk_class(risk1, risk_UnwantedDataDeletion).
+risk_class(risk1, risk_DataUnavailable).
+risk_class(risk1, risk_DataErasureError).
+risk_class(risk1, risk_DataLoss).
+risk_source_class(src1, risk_LegalComplianceRisk).
+risk_source_of(src1, permDeleteAccount).
+risk_consequence(risk1, risk_DataLoss).
+risk_consequence(risk1, risk_DataUnavailable).
+risk_consequence(risk1, risk_CustomerConfidenceLoss).
+risk_impact(risk1, risk_FinancialLoss).
+risk_impact(risk1, risk_NonMaterialDamage).
+about_clause(risk1, clauseC1).
+violates_need(risk1, need_DataCannotBeRemoved).
+risk_description(risk1, "Risk: account/data removal is permitted without notice safeguards (no notice constraint and no duty to inform). Clause C1: Provider may remove the user account (and associated data) at its discretion.").
+base_score(risk1, 90).
+mitigation(risk1, m11, "Add a notice constraint (minimum noticeDays) before account removal.").
+mitigation(risk1, m21, "Add a duty to inform the consumer prior to account removal.").
+
+risk(risk2) :-
+  has_need(consumerExample, need_ChangeOnlyWithPriorNotice),
+  min_notice_days(need_ChangeOnlyWithPriorNotice, Required),
+  permission(policy1, permChangeTerms),
+  action(permChangeTerms, tosl_changeTerms),
+  duty(permChangeTerms, odrl_inform),
+  notice_days(permChangeTerms, Days),
+  lt(Days, Required).
+
+risk_source(risk2, src2).
+risk_class(risk2, risk_PolicyRisk).
+risk_class(risk2, risk_CustomerConfidenceLoss).
+risk_source_class(src2, risk_PolicyRisk).
+risk_source_of(src2, permChangeTerms).
+risk_consequence(risk2, risk_CustomerConfidenceLoss).
+risk_impact(risk2, risk_NonMaterialDamage).
+about_clause(risk2, clauseC2).
+violates_need(risk2, need_ChangeOnlyWithPriorNotice).
+risk_description(risk2, "Risk: terms may change with notice (3 days) below consumer requirement (14 days). Clause C2: Provider may change terms by informing users at least 3 days in advance.").
+base_score(risk2, 70).
+mitigation(risk2, m12, "Increase minimum noticeDays in the inform duty to meet the consumer requirement.").
+
+risk(risk3) :-
+  has_need(consumerExample, need_NoSharingWithoutConsent),
+  permission(policy1, permShareData),
+  action(permShareData, tosl_shareData),
+  missing_consent_constraint(permShareData).
+
+risk_source(risk3, src3).
+risk_class(risk3, risk_UnwantedDisclosureData).
+risk_class(risk3, risk_CustomerConfidenceLoss).
+risk_source_class(src3, risk_PolicyRisk).
+risk_source_of(src3, permShareData).
+risk_consequence(risk3, risk_CustomerConfidenceLoss).
+risk_impact(risk3, risk_NonMaterialDamage).
+risk_impact(risk3, risk_FinancialLoss).
+about_clause(risk3, clauseC3).
+violates_need(risk3, need_NoSharingWithoutConsent).
+risk_description(risk3, "Risk: user data sharing is permitted without an explicit consent constraint. Clause C3: Provider may share user data with partners for business purposes.").
+base_score(risk3, 85).
+mitigation(risk3, m13, "Add an explicit consent constraint before data sharing.").
+
+risk(risk4) :-
+  has_need(consumerExample, need_DataPortability),
+  prohibition(policy1, prohibitExportData),
+  action(prohibitExportData, tosl_exportData).
+
+risk_source(risk4, src4).
+risk_class(risk4, risk_PolicyRisk).
+risk_class(risk4, risk_CustomerConfidenceLoss).
+risk_source_class(src4, risk_PolicyRisk).
+risk_source_of(src4, prohibitExportData).
+risk_consequence(risk4, risk_CustomerConfidenceLoss).
+risk_impact(risk4, risk_NonMaterialDamage).
+about_clause(risk4, clauseC4).
+violates_need(risk4, need_DataPortability).
+risk_description(risk4, "Risk: portability is restricted because exporting user data is prohibited. Clause C4: Users are not permitted to export their data.").
+base_score(risk4, 60).
+mitigation(risk4, m14, "Add a permission allowing data export (or remove the prohibition) to support portability.").
+
+score_raw(Risk, Raw) :-
+  risk(Risk),
+  base_score(Risk, Base),
+  violates_need(Risk, Need),
+  importance(Need, Weight),
+  add(Base, Weight, Raw).
+
+score(Risk, 100) :-
+  score_raw(Risk, Raw),
+  gt(Raw, 100).
+
+score(Risk, Raw) :-
+  score_raw(Risk, Raw),
+  ge(100, Raw).
+
+severity(Risk, risk_HighSeverity) :-
+  score(Risk, Score),
+  gt(Score, 79).
+
+risk_level(Risk, risk_HighRisk) :-
+  score(Risk, Score),
+  gt(Score, 79).
+
+severity(Risk, risk_ModerateSeverity) :-
+  score(Risk, Score),
+  lt(Score, 80),
+  gt(Score, 49).
+
+risk_level(Risk, risk_ModerateRisk) :-
+  score(Risk, Score),
+  lt(Score, 80),
+  gt(Score, 49).
+
+severity(Risk, risk_LowSeverity) :-
+  score(Risk, Score),
+  lt(Score, 50).
+
+risk_level(Risk, risk_LowRisk) :-
+  score(Risk, Score),
+  lt(Score, 50).
+
+report_key(Risk, key(Invscore, Clauseid)) :-
+  risk(Risk),
+  score(Risk, Score),
+  sub(1000, Score, Invscore),
+  about_clause(Risk, Clause),
+  clause_id(Clause, Clauseid).
+
+ranked_before(Left, Right) :-
+  report_key(Left, key(Leftinv, _leftclause)),
+  report_key(Right, key(Rightinv, _rightclause)),
+  lt(Leftinv, Rightinv).
+
+ranked_before(Left, Right) :-
+  report_key(Left, key(Inv, Leftclause)),
+  report_key(Right, key(Inv, Rightclause)),
+  not_matches(Leftclause, Rightclause),
+  lt(Leftclause, Rightclause).
+
+% Output layer.
+dct_title(agreement1, Title) :- title(agreement1, Title).
+dct_title(consumerExample, Title) :- title(consumerExample, Title).
+dct_title(processContext1, Title) :- title(processContext1, Title).
+dpv_hasRisk(processContext1, Risk) :- risk(Risk).
+type(policyGraph1, policyGraph).
+policyGraph(agreement1, policyGraph1).
+contains(policyGraph1, statement(Subject, Predicate, Object)) :-
+  policy_statement(Subject, Predicate, Object).
+source(report, agreement1).
+profile(report, consumerExample).
+firstRisk(report, Risk) :- risk(Risk), not(ranked_before(_other, Risk)).
+before(riskRanking, pair(Left, Right)) :- ranked_before(Left, Right).
+
+type(Risk, dpv_Risk) :- risk(Risk).
+type(Risk, Class) :- risk(Risk), risk_class(Risk, Class).
+dct_source(Risk, Source) :- risk(Risk), risk_source(Risk, Src), risk_source_of(Src, Source).
+risk_hasRiskSource(Risk, Src) :- risk(Risk), risk_source(Risk, Src).
+type(Src, risk_RiskSource) :- risk_source(_risk, Src).
+type(Src, Class) :- risk_source_class(Src, Class).
+dct_source(Src, Source) :- risk_source_of(Src, Source).
+dpv_hasConsequence(Risk, Consequence) :- risk(Risk), risk_consequence(Risk, Consequence).
+dpv_hasImpact(Risk, Impact) :- risk(Risk), risk_impact(Risk, Impact).
+aboutClause(Risk, Clause) :- risk(Risk), about_clause(Risk, Clause).
+violatesNeed(Risk, Need) :- risk(Risk), violates_need(Risk, Need).
+scoreRaw(Risk, Raw) :- score_raw(Risk, Raw).
+dpv_hasSeverity(Risk, Severity) :- severity(Risk, Severity).
+dpv_hasRiskLevel(Risk, Level) :- risk_level(Risk, Level).
+dct_description(Risk, Text) :- risk(Risk), risk_description(Risk, Text).
+reportKey(Risk, Key) :- report_key(Risk, Key).
+dpv_isMitigatedByMeasure(Risk, Measure) :- mitigation(Risk, Measure, _text).
+type(Measure, dpv_RiskMitigationMeasure) :- mitigation(_risk, Measure, _text).
+dpv_mitigatesRisk(Measure, Risk) :- mitigation(Risk, Measure, _text).
+dct_description(Measure, Text) :- mitigation(_risk, Measure, Text).
+clauseId(Clause, Id) :- clause_id(Clause, Id).
+text(Clause, Text) :- clause_text(Clause, Text).