test(schema): nine-domain round-trip + authorship provenance check

claude · claude · commit f44f712b0653 · 2026-06-22T22:06:51.000Z
Extend the lift-surface verification from MARS-only to 10 domains:
MARS + Transport + Accounting + SalesDistribution + Credit + Cost +
ServiceManagement + WorkOrder + Compliance + Audit.

Coverage:

* 210 TTL files across 9 new domains (in addition to MARS's 29) — all
  parse, all round-trip via the generic `assert_domain_roundtrip`
  helper. Zero unparseable shapes; zero round-trip failures.
* `ttl_emit::tests::nine_domains_lift_surface_round_trip` is the
  permanent regression gate. Pins each domain's expected TTL count
  so an upstream re-vendor that drifts the inventory fires the test.

Authorship verification (per the operator's suggestion to check
`dcterms:creator`):

* WorkOrder is FULLY OURS — sole authors are internal agent names
  (`bus-compiler`, `family-codec-smith`). The unusual `rdfs:Class`-as-verb
  convention is ours to revise toward `owl:ObjectProperty` without
  external coordination.
* Accounting is MIXED-AUTHORSHIP — Viktor Voss (23 files, original arago)
  + a prior session's Claude extension (11 files, our local additions).
* All other 7 domains are pure-upstream (single external human authors:
  chris.boos@almato.com, Marek Meyer, Peter Larem, Ola Irgens Kylling,
  Aymen Ayoub, …).

This makes WorkOrder the natural prototyping ground for new TTL
predicates OGAR wants to ship before pitching them to OGIT upstream.

Doc updates:

* `docs/OGIT-DOMAIN-LIFT-CATALOGUE.md` — 10 rows promoted to Lift-tested
  with per-row authorship provenance. Adds a verification recipe
  (`§ Verifying domain authorship`) so future sessions can re-run the
  `dcterms:creator` scan in one Python heredoc.
* `.claude/board/EPIPHANIES.md` — new FINDING on author-provenance as
  a who-can-change-what discriminator.

Test footprint: 16/16 in ogar-from-schema (was 15/15; the new test
adds one). Workspace-wide: nothing else touched.
diff --git a/.claude/board/EPIPHANIES.md b/.claude/board/EPIPHANIES.md
@@ -15,6 +15,46 @@
 
 ## Entries (newest first)
 
+## 2026-06-22 — Author provenance via `dcterms:creator` discriminates "ours to revise" from "upstream-coordinated"
+**Status:** FINDING
+**Scope:** OGIT NTO governance × multi-domain lift × who-can-change-what
+
+OGIT TTL files carry `dcterms:creator` on every subject. The field is
+free-form text but carries one of two semantic shapes in practice:
+
+- **Human author + email** (`chris.boos@almato.com`, `Viktor Voss`,
+  `fotto@arago.de`, `Marek Meyer`, `Peter Larem`, `Ola Irgens Kylling`,
+  …) — original arago/almato authors. Structural changes need upstream
+  coordination.
+- **Internal agent name** (`bus-compiler`, `family-codec-smith`,
+  `Claude (AdaWorldAPI/lance-graph 3-hop optim)`, …) — files authored
+  by our agent fleet against this org's forks. We are upstream for
+  these; structural changes need no external coordination.
+
+The 9-domain spot check (Transport, Accounting, SalesDistribution,
+Credit, Cost, ServiceManagement, WorkOrder, Compliance, Audit) revealed:
+
+- **WorkOrder is fully ours** — 100% internal-agent authorship (`bus-compiler`,
+  `family-codec-smith`). The unusual `rdfs:Class`-as-verb convention is
+  ours to revise toward standard `owl:ObjectProperty`-as-verb whenever
+  the AST predicate registry needs the WorkOrder verbs.
+- **Accounting is mixed-authorship** — Viktor Voss (23 files, original)
+  + a prior session's `Claude` extension (11 files). Structural changes
+  to the original 23 require upstream coordination; the 11 are ours.
+- **All other 7 domains are pure-upstream** — single-or-few external
+  human authors.
+
+This makes WorkOrder the **natural prototyping ground** for new TTL
+predicates OGAR wants to add: ship in WorkOrder first (no external
+coordination cost), validate the bijection, then pitch the pattern
+to OGIT upstream once it's proven.
+
+Evidence: the `dcterms:creator` provenance scan recipe lives in
+`docs/OGIT-DOMAIN-LIFT-CATALOGUE.md § Verifying domain authorship`;
+the round-trip stress test for the 9 domains is
+`ttl_emit::tests::nine_domains_lift_surface_round_trip` (zero failures
+on 210 TTLs across the nine).
+
 ## 2026-06-22 — Schema-vs-source duality: schemas lift structure bijectively; source ASTs lift behaviour best-effort; they cross-validate at the structural boundary
 **Status:** FINDING
 **Scope:** producer architecture × MARS calibration × Foundry-Odoo lens × the bardioc migration
diff --git a/crates/ogar-from-schema/src/ttl_emit.rs b/crates/ogar-from-schema/src/ttl_emit.rs
@@ -276,20 +276,102 @@ mod tests {
     /// predicate.
     #[test]
     fn all_mars_ttl_files_roundtrip() {
+        let stats = assert_domain_roundtrip("MARS");
+        // 29 .ttl files in NTO/MARS at the SHA pinned by PROVENANCE.md.
+        assert!(
+            stats.total >= 29,
+            "expected ≥ 29 TTL files in MARS, got {}",
+            stats.total
+        );
+    }
+
+    /// Generic helper that walks `vocab/imports/ogit/NTO/<domain>/`,
+    /// dispatches each TTL to the right parser (`parse_file` for entities
+    /// and datatype attributes, `crate::sgo::parse_verb` for in-domain
+    /// `owl:ObjectProperty` verbs), and asserts semantic round-trip.
+    /// Returns per-shape counts so callers can sanity-check the lift
+    /// surface they're claiming.
+    fn assert_domain_roundtrip(domain: &str) -> DomainStats {
         let dir = std::path::Path::new(env!("CARGO_MANIFEST_DIR"))
-            .join("../../vocab/imports/ogit/NTO/MARS");
-        let mut checked = 0usize;
+            .join("../../vocab/imports/ogit/NTO")
+            .join(domain);
+        let mut stats = DomainStats::default();
         for entry in walk_ttl(&dir) {
             let src = std::fs::read_to_string(&entry).expect("read");
+            stats.total += 1;
             match parse_file(&src) {
-                Some(TtlDeclaration::Entity(_)) => assert_entity_roundtrip(&src),
-                Some(TtlDeclaration::DatatypeAttribute(_)) => assert_attribute_roundtrip(&src),
-                None => {}
+                Some(TtlDeclaration::Entity(_)) => {
+                    assert_entity_roundtrip(&src);
+                    stats.entities += 1;
+                }
+                Some(TtlDeclaration::DatatypeAttribute(_)) => {
+                    assert_attribute_roundtrip(&src);
+                    stats.attributes += 1;
+                }
+                None => {
+                    // Try the verb path — some NTO domains carry their own
+                    // in-domain `owl:ObjectProperty` verbs (Transport,
+                    // Accounting, Credit, Compliance) alongside SGO's
+                    // upstream-shared vocabulary.
+                    let Some(once) = crate::sgo::parse_verb(&src) else {
+                        panic!(
+                            "TTL has no recognised subject type in {domain}: {}",
+                            entry.display()
+                        );
+                    };
+                    let emitted = crate::sgo::emit_verb(&once);
+                    let twice = crate::sgo::parse_verb(&emitted).expect("re-parse verb");
+                    assert_eq!(
+                        once,
+                        twice,
+                        "verb round-trip lost a predicate in {domain}: {}",
+                        entry.display()
+                    );
+                    stats.verbs += 1;
+                }
             }
-            checked += 1;
         }
-        // 29 .ttl files in NTO/MARS at the SHA pinned by PROVENANCE.md.
-        assert!(checked >= 29, "expected ≥ 29 TTL files, got {checked}");
+        stats
+    }
+
+    #[derive(Debug, Default)]
+    struct DomainStats {
+        total: usize,
+        entities: usize,
+        attributes: usize,
+        verbs: usize,
+    }
+
+    /// Cross-domain bijection coverage. Each row is one of the nine
+    /// domains the operator asked OGAR to verify before promoting
+    /// the lift surface from MARS-only to multi-domain. If any of
+    /// these fails, the producer can't land on that domain without
+    /// extending `EntityDecl` / `AttributeDecl` / `VerbDecl` first.
+    ///
+    /// Counts are also a sanity check on the inventory — they prove
+    /// the catalogue's per-domain numbers match what's actually in
+    /// `vocab/imports/`.
+    #[test]
+    fn nine_domains_lift_surface_round_trip() {
+        for (domain, expected_total) in [
+            ("Transport", 27),
+            ("Accounting", 36),
+            ("SalesDistribution", 23),
+            ("Credit", 21),
+            ("Cost", 5),
+            ("ServiceManagement", 59),
+            ("WorkOrder", 27),
+            ("Compliance", 9),
+            ("Audit", 3),
+        ] {
+            let stats = assert_domain_roundtrip(domain);
+            assert_eq!(
+                stats.total, expected_total,
+                "{domain}: TTL count drifted from inventory \
+                 (expected {expected_total}, got {})",
+                stats.total
+            );
+        }
     }
 
     fn walk_ttl(root: &std::path::Path) -> Vec<std::path::PathBuf> {
diff --git a/docs/OGIT-DOMAIN-LIFT-CATALOGUE.md b/docs/OGIT-DOMAIN-LIFT-CATALOGUE.md
@@ -17,12 +17,46 @@
 | **Production** | A consumer deployment exercises the lifted form (see `DOMAIN-INSTANCES.md`) |
 
 A domain advances Imported → Lift-tested → Cross-walked → Production
-left-to-right. All 72 are Imported today (just landed). MARS is the
-first Lift-tested. OpenProject/Odoo/Healthcare are Production via the
+left-to-right. All 72 are Imported today (just landed). The following
+**10 domains are Lift-tested** (round-trip mechanically enforced by
+`ttl_emit::tests::nine_domains_lift_surface_round_trip` +
+`all_mars_ttl_files_roundtrip`): MARS, Transport, Accounting,
+SalesDistribution, Credit, Cost, ServiceManagement, WorkOrder,
+Compliance, Audit. OpenProject/Odoo/Healthcare are Production via the
 existing canonical concept work but use the source-AST lift, not the
 schema lift — they enter Lift-tested when their TTLs are added to the
 round-trip stress test.
 
+## Verifying domain authorship (who can change what)
+
+Provenance is `dcterms:creator` on each TTL. Run:
+
+```bash
+python3 - <<'PY'
+import os, re
+from collections import Counter
+creator_re = re.compile(r'dcterms:creator\s+"([^"]+)"')
+for d in sorted(os.listdir('vocab/imports/ogit/NTO')):
+    root = f'vocab/imports/ogit/NTO/{d}'
+    authors = Counter()
+    for r,_,fs in os.walk(root):
+        for f in fs:
+            if not f.endswith('.ttl'): continue
+            with open(os.path.join(r,f)) as fh:
+                for m in creator_re.finditer(fh.read()):
+                    authors[m.group(1)] += 1
+    if not authors: continue
+    top = ', '.join(f'{a} ({c})' for a,c in authors.most_common(5))
+    print(f'{d:<28} {top}')
+PY
+```
+
+Internal-agent authors (`bus-compiler`, `family-codec-smith`, `Claude
+(...)`, etc.) signal "our extension — we can revise without external
+coordination." External authors (`chris.boos@almato.com`, `Viktor Voss`,
+`fotto@arago.de`, …) signal "upstream-owned — structural changes need
+arago/almato coordination."
+
 ## How to add a new domain to the lift
 
 1. **Verify import** — `ls vocab/imports/ogit/NTO/<Domain>/`. If
@@ -44,16 +78,16 @@ round-trip stress test.
 
 | Domain | Entities | Attributes | Verbs | Status | Notes |
 |---|--:|--:|--:|---|---|
-| `Accounting` | 9 | 20 | 7 | Imported | Covered conceptually via `0x02XX` commerce/ERP via Odoo lift |
+| `Accounting` | 9 | 20 | 7 | Lift-tested | Mixed-authorship: `Viktor Voss` (23 files, original arago/almato) + a prior session's extension (`Claude (AdaWorldAPI/lance-graph 3-hop optim)`, 11 files). Covered conceptually via `0x02XX` commerce/ERP via Odoo lift. Structural changes to the original 23 need upstream coordination; the 11 extensions are ours. |
 | `Advertising` | 16 | 0 | 0 | Imported | |
-| `Audit` | 3 | 0 | 0 | Imported | Audit-as-Lance-version (ADR-013) covers the semantics |
+| `Audit` | 3 | 0 | 0 | Lift-tested | `Marek Meyer` (sole author) — pure upstream. Audit-as-Lance-version (ADR-013) covers the semantics. |
 | `Auth` | 13 | 24 | 6 | Imported | Cross-walk to `0x0BXX` auth domain (Zitadel/Zanzibar) queued |
 | `Automation` | 22 | 105 | 0 | Imported | OLD `marsNodeType` superseded by `NTO/MARS/` |
 | `Botany` | 2 | 0 | 0 | Imported | |
 | `ClassificationStandard` | 2 | 5 | 2 | Imported | |
-| `Compliance` | 1 | 4 | 4 | Imported | |
-| `Cost` | 5 | 0 | 0 | Imported | |
-| `Credit` | 12 | 0 | 9 | Imported | |
+| `Compliance` | 1 | 4 | 4 | Lift-tested | `chris.boos@almato.com` (sole author) — pure upstream |
+| `Cost` | 5 | 0 | 0 | Lift-tested | `Peter Larem` (sole author) — pure upstream |
+| `Credit` | 12 | 0 | 9 | Lift-tested | `Ola Irgens Kylling` (sole author, 21 files) — pure upstream; capitalised `Entities/` + `Verbs/` dirs (content-driven parser is dir-case-agnostic) |
 | `CustomerSupport` | 7 | 31 | 2 | Imported | |
 | `Data` | 1 | 1 | 0 | Imported | |
 | `DataProcessing` | 2 | 6 | 0 | Imported | |
@@ -104,18 +138,18 @@ round-trip stress test.
 | `RPA` | 6 | 1 | 1 | Imported | |
 | `Religion` | 1 | 0 | 0 | Imported | |
 | `SaaS` | 10 | 12 | 0 | Imported | |
-| `SalesDistribution` | 12 | 11 | 0 | Imported | |
+| `SalesDistribution` | 12 | 11 | 0 | Lift-tested | `Marek Meyer` (sole author, 23 files) — pure upstream |
 | `Schedule` | 5 | 7 | 0 | Imported | |
 | `Security` | 2 | 0 | 0 | Imported | |
-| `ServiceManagement` | 17 | 42 | 0 | Imported | MARS Machine `generates` Log/Timeseries lands here |
+| `ServiceManagement` | 17 | 42 | 0 | Lift-tested | 8 distinct authors led by `Peter Larem` (42 files); pure upstream. MARS Machine `generates` Log/Timeseries lands here. |
 | `SharePoint` | 0 | 2 | 0 | Imported | Attributes-only |
 | `Software` | 5 | 0 | 0 | Imported | Distinct from `NTO/MARS/Software/` — this is a software-engineering vocabulary |
 | `Statistics` | 1 | 0 | 0 | Imported | |
 | `Survey` | 3 | 0 | 0 | Imported | |
-| `Transport` | 5 | 14 | 8 | Imported | |
+| `Transport` | 5 | 14 | 8 | Lift-tested | `chris.boos@almato.com` (sole author, 27 files) — pure upstream-arago |
 | `UserMeta` | 4 | 0 | 4 | Imported | |
 | `Version` | 0 | 3 | 0 | Imported | Used by MARS Machine for OS version |
-| `WorkOrder` | 15 | 0 | 12 | Imported | Covered conceptually by WoA (`0x0003`) |
+| **`WorkOrder`** | 27 | 0 | 0 | **Lift-tested** | **Our extension** (`dcterms:creator` = `bus-compiler` + `family-codec-smith` — internal agent authors, zero external). Authored for `woa-rs`. All 27 TTLs declared as `rdfs:Class`, including the 12 in `verbs/` (unusual `rdfs:Class`-as-verb convention). Round-trips cleanly. **Since we're upstream**, the verb files can be re-authored as `owl:ObjectProperty` for the AST predicate registry without external coordination. Previous catalogue row split 15 entities + 12 verbs by directory; content-driven count is 27 entities (what `ogar-from-schema` actually sees). |
 | **TOTALS** | **549** | **599** | **241** | — | + 42 other (Medical sql_mirror, etc.) |
 
 ## Adjacent imports (not NTO)
