|
15 | 15 |
|
16 | 16 | ## Entries (newest first) |
17 | 17 |
|
| 18 | +## 2026-06-23 — Live 2026 receipt for the semantic-compiler thesis: bardioc is actively extending OGIT's Auth symbol table with a linker-phase external-IAM bridge (probably Zitadel) |
| 19 | +**Status:** FINDING (shape-grounded; external system not named in-file → [H], not [G]) |
| 20 | +**Scope:** addendum to the 2026-06-22 "OGIT was already a semantic compiler's symbol table" entry below × Auth-domain dating × the AuthStore-mapping pattern × the queued 0x0BXX cross-walk |
| 21 | + |
| 22 | +The 2026-06-22 entry below argued from the OGIT *shape* that bardioc |
| 23 | +built a semantic compiler. This is a **dated receipt** that they are |
| 24 | +STILL treating OGIT as the canonical symbol table — and that the |
| 25 | +current extension is a textbook **linker / name-resolution** phase. |
| 26 | + |
| 27 | +What the `NTO/Auth/` dates show ([G], read from `dcterms:valid`): |
| 28 | + |
| 29 | +- **The IAM core is arago's own, from 2018** — `Organization`, |
| 30 | + `OrgDomain`, `Account`, `Application`, `Role`, `RoleAssignment`, |
| 31 | + `Team`, `DataScope`, all `start=2018-01-01`, creator "arago GmbH". |
| 32 | + This **predates Zitadel's prominence** (open-sourced ~2020–2022), so |
| 33 | + the resource model is convergent-universal-IAM, NOT copied from |
| 34 | + Zitadel. |
| 35 | +- **A January 2026 batch by `Pablo Perez`** adds foreign-key-shaped ID |
| 36 | + attributes — `organizationId`, `accountId`, `applicationId`, |
| 37 | + `scopeId`, `configurationData` (all `start=2026-01-12`) — plus the |
| 38 | + `ApplicationContent` entity (`2026-01-14`). They hang off the |
| 39 | + `Configuration` entity, described as "individual configuration for an |
| 40 | + organization, user, application or scope **registered in hiro |
| 41 | + knowledge core**", `belongs Organization`. |
| 42 | + |
| 43 | +The tell ([H] — pattern, not a named string): **adding FK ID columns |
| 44 | +is what you do to bridge to an EXTERNAL system keyed by those |
| 45 | +identities.** You don't add `organizationId`/`applicationId` columns to |
| 46 | +your OWN native entities — you already have typed edges. You add them to |
| 47 | +point at someone else's primary keys. The config blob lives in HIRO, |
| 48 | +keyed by the external IAM's org/app/user/scope IDs. That's the graph |
| 49 | +*side* of a bridge; the IAM lives elsewhere. Zitadel is the most likely |
| 50 | +external system (its `org_id / project_id / app_id / user_id` are |
| 51 | +exactly these four FK shapes; matches the operator's stated stack) but |
| 52 | +**no file names Zitadel** — hence [H]. |
| 53 | + |
| 54 | +Caveat that keeps it honest: OGIT's Auth domain ALSO carries a |
| 55 | +**Zanzibar-relation shape** — `edgeRule` / `vertexRule` attributes |
| 56 | +(2018) + membership verbs (`isMemberOf`, `assigns`, `assumes`, |
| 57 | +`belongs`, `consents`, `uses`). So the domain is positioned to host |
| 58 | +both a Zitadel-resource binding AND an Ory/Keto relation-tuple binding |
| 59 | +— exactly the operator's earlier-this-session framing ("zitadel, |
| 60 | +zanzibar, ory/keto become preminted class profiles"). |
| 61 | + |
| 62 | +Two consequences: |
| 63 | + |
| 64 | +1. **Strengthens the semantic-compiler thesis with a fresh receipt.** |
| 65 | + The 2026-06-22 entry inferred compiler-grade discipline from a static |
| 66 | + read. This shows the discipline is *live*: in 2026 they extend the |
| 67 | + symbol table with external-symbol resolution — the linker phase of |
| 68 | + `OGAR-AS-IR §1`, actively in use. Not a fossil; a running compiler. |
| 69 | + |
| 70 | +2. **The `Configuration`-keyed-by-external-IDs entity IS the OGIT-side |
| 71 | + precedent for the "AuthStore class that does the mapping"** the |
| 72 | + operator specified earlier this session, and informs the queued |
| 73 | + `0x0BXX` auth-domain cross-walk (`OGIT-DOMAIN-LIFT-CATALOGUE.md` Auth |
| 74 | + row). bardioc already built the bridge node; OGAR's job is to give it |
| 75 | + a classid and resolve Zitadel/Zanzibar/Keto as preminted profiles. |
| 76 | + |
| 77 | +Evidence: `vocab/imports/ogit/NTO/Auth/attributes/{organizationId, |
| 78 | +accountId,applicationId,scopeId,configurationData}.ttl` (all |
| 79 | +`2026-01-12`, Pablo Perez); `entities/Configuration.ttl` (2018 class, |
| 80 | +2026 attribute list); `entities/ApplicationContent.ttl` (`2026-01-14`). |
| 81 | +Cross-ref the entry below + `docs/OGAR-AS-IR.md` (linker phase). |
| 82 | + |
| 83 | +## 2026-06-22 — OGIT was already a semantic compiler's symbol table — bardioc built the structural half deliberately, externalized behaviour to HIRO, never unified the two halves |
| 84 | +**Status:** FINDING (shape-inference from the OGIT artifact, not insider history) |
| 85 | +**Scope:** OGAR-AS-IR provenance × the structural/behavioural-arm split × what OGAR's actual contribution is |
| 86 | + |
| 87 | +Question posed: from the shape of OGIT, how likely is it that bardioc |
| 88 | +(arago's HIRO/Bardioc engine, the original OGIT authors) discovered the |
| 89 | +"semantic compiler" superpowers OGAR articulates? |
| 90 | + |
| 91 | +Assessment, reasoning purely from the OGIT artifact read end-to-end |
| 92 | +(NTO 72 domains + SGO upper ontology + MARS XSD + `extract_classes.py`), |
| 93 | +not from any insider knowledge: |
| 94 | + |
| 95 | +**High likelihood they discovered and EXPLOITED it operationally; low |
| 96 | +likelihood they FRAMED it as a compiler.** They built a thing that IS a |
| 97 | +semantic compiler and described it in Semantic-Web vocabulary |
| 98 | +(`rdfs:`/`owl:`/`dcterms:`), not compiler-engineering vocabulary. |
| 99 | + |
| 100 | +The discipline in the artifact is the tell — these are [G] (visible in |
| 101 | +the files), not inference: |
| 102 | + |
| 103 | +- **Symbol table with typed signatures** — SGO's 176 verbs, separately |
| 104 | + versioned, each with `ogit:from-to` domain→range typing. |
| 105 | +- **Type system with closed constraints** — `validation-type "fixed"` + |
| 106 | + exhaustive `validation-parameter` enums (round-trippable). |
| 107 | +- **Structural typing with cardinality** — `mandatory-/optional-/indexed-attributes`. |
| 108 | +- **Capability/interface declaration** — `ogit:allowed ([verb target])`. |
| 109 | +- **Module/namespace layering** — `ogit:scope "NTO"`/`"SGO"`; NTO/SGO/SDF split. |
| 110 | +- **Explicit dependency DAG** — MARS A→R→S→M `dependsOn` chain. |
| 111 | +- **Codegen back-end** — `extract_classes.py` lowers XSD/OGIT → rendered tables. |
| 112 | +- **IR-as-canonical-source** — OGIT was the source; HIRO consumed it; |
| 113 | + automations were driven FROM the ontology. |
| 114 | + |
| 115 | +Most RDF ontologies are loose, under-typed, aspirational. OGIT is none |
| 116 | +of those. `validation-type "fixed"` with exhaustive parameter lists AND |
| 117 | +a Python extractor that preserves them is compiler-grade thinking wearing |
| 118 | +Semantic-Web labels. |
| 119 | + |
| 120 | +**The sharpest single piece of evidence:** OGIT carries ONLY the |
| 121 | +structural arm; the behaviour lived in HIRO (Elixir `gen_statem`, |
| 122 | +automation rules — `ELIXIR-HIRO-PREFETCH.md`). That separation — |
| 123 | +declarative schema here, runtime behaviour there — IS the |
| 124 | +structural-arm / behavioural-arm split this workspace "rediscovered." |
| 125 | +bardioc had it years ago. |
| 126 | + |
| 127 | +On OGAR-AS-IR's own six IR-shape tests, OGIT satisfies ~3 of 6 by |
| 128 | +construction: typed-signature (yes), IR-is-canonical (yes), named-lowering |
| 129 | +(partial — `extract_classes` is one, unlabeled); but effect-annotations |
| 130 | +(no — effects lived in HIRO, not OGIT), SSA (no), semantic-preservation |
| 131 | +guarantee (no explicit one). That profile is precisely "a disciplined |
| 132 | +STRUCTURAL IR with the behavioural half externalized." |
| 133 | + |
| 134 | +**What they did NOT do — and what OGAR's actual contribution is:** the |
| 135 | +UNIFICATION. "These are two arms of ONE IR; the structural arm lowers to |
| 136 | +N back-ends; the behavioural arm stays in the Core; the same address |
| 137 | +resolves both." bardioc had two systems (OGIT + HIRO) with a "HIRO reads |
| 138 | +OGIT" seam, not one IR with two arms. OGAR is not discovering the |
| 139 | +superpower — it is RENAMING what bardioc built (in compiler vocabulary) |
| 140 | +and UNIFYING the two halves they kept apart. |
| 141 | + |
| 142 | +Consequence for how we talk about OGAR: the `OGAR-AS-IR` line "the docs |
| 143 | +were already compiler-shaped, just not labeled" applies one level down |
| 144 | +to OGIT itself. Honest framing in any external-facing material: OGAR |
| 145 | +stands on a deliberately-engineered semantic-compiler symbol table |
| 146 | +(OGIT) and contributes the IR unification + the compiler-vocabulary |
| 147 | +framing, NOT the underlying discovery. Crediting bardioc's structural |
| 148 | +discipline is both accurate and strengthens the claim (the substrate is |
| 149 | +battle-tested, not speculative). |
| 150 | + |
| 151 | +Fences (this is shape-inference, grade honestly): |
| 152 | +- "[G] the shape exhibits compiler properties" — strong, evidenced in files. |
| 153 | +- "[H] bardioc consciously knew they were building a compiler" — inference |
| 154 | + from discipline; plausible but unprovable from the artifact alone. |
| 155 | +- "[S] they had the full IR-discipline OGAR articulates" — no; the 6-test |
| 156 | + profile (3/6) falsifies this. The unification is genuinely OGAR's. |
| 157 | + |
| 158 | +Cross-ref: `docs/OGAR-AS-IR.md` (the framing), `docs/HIRO-IN-CLASSES.md` |
| 159 | +(the bardioc-efficiency story), `docs/ELIXIR-HIRO-PREFETCH.md` (HIRO = |
| 160 | +the behavioural arm), `docs/MARS-TRANSCODING.md` (the XSD calibration that |
| 161 | +exercised the structural arm). |
| 162 | + |
18 | 163 | ## 2026-06-22 — The "latent re-vendor bug" was a false premise; exports/ is a STAGING tier, not a permanent home (operator-decided) |
19 | 164 | **Status:** FINDING |
20 | 165 | **Scope:** vocab/ tree model × verify-before-acting × correcting a prior session's claim |
|
0 commit comments