You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<pclass="abstract">v3.5 extends the CKP ontology with base instance shapes inherited by all kernels, a materialised proof model with SHA-256 hash chains, and the kernel-as-datatype rule — every kernel's <code>ontology.yaml</code> is its type definition, and every instance is a typed individual. The ontology governs the tool, not the reverse.</p>
62
+
<pclass="abstract">v3.5 extends the CKP ontology with base instance shapes inherited by all kernels, a materialised proof model with SHA-256 hash verification, PROV-O aligned provenance properties, and the kernel-as-datatype rule — every kernel's <code>ontology.yaml</code> is its type definition, and every instance is a typed individual. The ontology governs the tool, not the reverse.</p>
<tr><td>Kernel Metadata</td><td><ahref="kernel-metadata.ttl">kernel-metadata.ttl</a></td><td>Roles and Functions borne by kernels</td><tdclass="bfo">0000023, 0000034</td></tr>
<tr><td>Self-Improvement</td><td><ahref="self-improvement.ttl">self-improvement.ttl</a></td><td>Validation issues and recommendations</td><td></td></tr>
76
-
<tr><td>Shapes</td><td><ahref="shapes.ttl">shapes.ttl</a></td><td>SHACL validation for protocol conformance</td><td></td></tr>
<tr><td>Kernel-as-Datatype</td><td>base-instances.ttl</td><td>A kernel IS a datatype. <code>ontology.yaml</code> defines the type. Instances are typed individuals.</td></tr>
83
-
<tr><td>Materialised Proof</td><td>proof.ttl</td><td>SHA-256 hash chain in <code>proof.json</code> stored with every instance. Governance evidence.</td></tr>
83
+
<tr><td>Materialised Proof</td><td>proof.ttl</td><td>SHA-256 hash verification per instance in <code>proof.json</code>. SPIFFE/SVID identity binding.</td></tr>
84
84
<tr><td>Base Instance Shapes</td><td>base-instances.ttl</td><td>InstanceManifest, SealedInstance, LedgerEntry — inherited by every kernel.</td></tr>
85
+
<tr><td>GovernanceMode</td><td>core.ttl</td><td><code>ckp:GovernanceMode</code> (BFO Disposition) with individuals STRICT, RELAXED, AUTONOMOUS.</td></tr>
86
+
<tr><td>Action Class</td><td>core.ttl</td><td><code>ckp:Action</code> (BFO Process) — every kernel exposes typed actions with access levels.</td></tr>
87
+
<tr><td>Edge Predicates</td><td>core.ttl</td><td>EXTENDS, COMPOSES, TRIGGERS — governance-loop relationship types for edges.</td></tr>
<tr><td><ahref="kernel-entity-template.ttl">kernel-entity-template.ttl</a></td><td>Turtle</td><td>Template for per-kernel ontology.ttl generation</td></tr>
92
-
<tr><td><ahref="schema.yaml">schema.yaml</a></td><td>LinkML</td><td>Governance definitions + base instance classes + proof types</td></tr>
<p><ahref="base-instances.ttl">base-instances.ttl</a> imports the <code>prov:</code> namespace (<code>http://www.w3.org/ns/prov#</code>) and defines three PROV-O aligned sub-properties on <code>InstanceManifest</code>:</p>
<tr><td><code>ckp:instanceWasGeneratedBy</code></td><td>sub-property of <code>prov:wasGeneratedBy</code></td><td>Links instance to the action/process that created it</td></tr>
115
+
<tr><td><code>ckp:instanceWasAttributedTo</code></td><td>sub-property of <code>prov:wasAttributedTo</code></td><td>Links instance to the kernel that produced it</td></tr>
116
+
<tr><td><code>ckp:instanceGeneratedAtTime</code></td><td>sub-property of <code>prov:generatedAtTime</code></td><td>ISO 8601 timestamp of instance creation</td></tr>
117
+
</table>
118
+
<p>This enables standard PROV-O tooling to query provenance chains across sealed instances.</p>
119
+
120
+
<h2>Not Yet Implemented</h2>
121
+
<p>The following items appear in the CKP v3.5 specification but are not yet present in the ontology Turtle files:</p>
<tr><td>SPIFFE signing at seal time</td><td>SPEC.CKP.v3.5.alpha-3 Section 3</td><td>ProofRecord carries <code>ckp:svid</code> field; runtime SPIFFE signing not yet wired</td></tr>
125
+
<tr><td>Ontology validation at seal time</td><td>SPEC.CKP.v3.5.alpha-3 Section 4.3</td><td>ManifestShape and SealedDataShape defined in spec, not yet in shapes.ttl</td></tr>
126
+
<tr><td>Session / ActionInstance classes</td><td>SPEC.CKP.v3.5.alpha-3</td><td>Mentioned in spec prose; no OWL classes defined</td></tr>
127
+
<tr><td>Serving Model ontology</td><td>SPEC.SERVING-MODEL.v3.5.alpha-4</td><td>KernelProcess, WebServing, ProcessMode, GatewayAuth — proposed, not yet created</td></tr>
0 commit comments