v3.7 Pass 1: reconcile version-state model (.ckproject manifest), drop EdgeKernel/WssHubKernel, add agent CRD type

Ontology (docs/public/ontology/v3.7/):
- core.ttl: remove ckp:EdgeKernel and ckp:WssHubKernel classes (stale —
  edges are ontology predicates, broadcast externalized to CK.Stream);
  remove ckp:mediatesEdge property; rewrite ckp:Project description to
  reflect symlink + SHA1 manifest model; fix stale storage/instances/
  path to data/instances/
- processes.ttl: remove hasMediatorKernel (EdgeKernel range) and
  hasBroadcastMediator (WssHubKernel range); rewrite Edge communication
  and Broadcast temporal phases in predicate/NATS language
- relations.ttl: remove mediates_communication and mediates_broadcast
  object properties (keep mediates_governance — CK.Consensus still
  exists)
- rbac.ttl: replace EdgeKernel authorization-check references with
  target-kernel authorization on message receipt

Prose (docs/v3.7/):
- Retire serving.json across 12 docs that still treated it as live
  (bfo-grounding, compliance, evolution, isolation, namespace-security,
  proof, reconciliation, spawning, subagent, three-loops, tool-loop)
- Document the .ckproject manifest as v3.7's version-state mechanism:
  symlink from project root into CK.Project's DATA organ; holds SHA1
  commit pins per organ (ck/, tool/, data/) per kernel version
- project.md: rewrite Project Instance Structure around .ckproject
  manifest; add Manifest Contents section showing symlink layout and
  version-pin YAML; augment Required Fields and Conformance tables
- versioning.md: add ".ckproject and .git-ref -- Two Halves of the
  Provenance Contract" section tying manifest pins (intent) to per-
  organ .git-ref markers (outcome)
- ck-loop.md, operator.md, changelog.md, introduction.md: update
  retirement callouts to cite .ckproject manifest instead of just CR
- isolation.md: replace "serving.json Exception" section with "No
  Write-Through Exception (v3.7)" — CK loop is fully immutable
- evolution.md: rewrite Version Pinning around .ckproject manifest
- crd.md: add "agent" kernel type to spec.type enum to match
  extends.md/taxonomy.md normative usage (CK.Claude)

Verified: npm run docs:build clean; playwright confirms
- /v3.7/project renders .ckproject manifest sections, symlink mechanics
- /v3.7/versioning renders two-halves-of-provenance section
- /v3.7/isolation: serving.json Exception replaced; zero console errors
- /browse/ loads all 9 v3.7 TTLs with 200; zero EdgeKernel/WssHubKernel
  references in the merged ontology; ConsensusKernel retained

Author: styk-tv

docs/public/ontology/v3.7/core.ttl

@@ -177,7 +177,7 @@ ckp:Edge a owl:Class ;
     rdfs:comment "An abstract relationship between two kernels — the ONLY mechanism for inter-Kernel communication. Edges are constructed artifacts that define the connectivity graph. Formally grounded in cco:Artifact."@en ;
     ckp:implementationStatus "WELL_IMPLEMENTED"^^xsd:string ;
     ckp:coverageScore "0.85"^^xsd:decimal ;
-    ckp:architecturalConstraint "NO direct Kernel-to-Kernel communication. ONLY through EdgeKernel-managed Edges."^^xsd:string .
+    ckp:architecturalConstraint "NO direct Kernel-to-Kernel communication. All inter-Kernel interaction is mediated by authorized Edges declared in each target's queue_contract.edges."^^xsd:string .
 
 ### Edge Relationship Types
 
@@ -267,7 +267,7 @@ ckp:hasIncomingEdge a owl:ObjectProperty ;
     rdfs:comment "An edge targeting this kernel"@en ;
     owl:inverseOf ckp:hasTarget .
 
-### Edge Authorization (enforced by EdgeKernel)
+### Edge Authorization (enforced by target kernel's queue_contract.edges)
 
 ckp:isAuthorized a owl:DatatypeProperty ;
     rdfs:domain ckp:Edge ;
@@ -282,7 +282,7 @@ ckp:isAuthorized a owl:DatatypeProperty ;
 ckp:Instance a owl:Class ;
     rdfs:subClassOf iao:0000027 ;  # iao:DataItem
     rdfs:label "Instance"@en ;
-    rdfs:comment "A persistent information entity — the result of a Process. Instances are immutable artifacts stored in {kernel}/storage/instances/i-{identifier}/. Formally grounded in iao:DataItem — an instance is a truthful data item about something."@en ;
+    rdfs:comment "A persistent information entity — the result of a Process. Instances are immutable artifacts stored in {kernel}/data/instances/i-{identifier}/. Formally grounded in iao:DataItem — an instance is a truthful data item about something."@en ;
     ckp:implementationStatus "WELL_IMPLEMENTED"^^xsd:string ;
     ckp:coverageScore "0.80"^^xsd:decimal .
 
@@ -459,23 +459,23 @@ ckp:hasOntology a owl:ObjectProperty , owl:FunctionalProperty ;
 ckp:Project a owl:Class ;
     rdfs:subClassOf cco:Organization ;  # cco:Organization
     rdfs:label "Project"@en ;
-    rdfs:comment ".ckproject declaration, organizes kernels into a coherent unit. A project is the top-level container that groups related kernels, edges, and workflows. Formally grounded in cco:Organization. v3.7: CK.Project is a static kernel providing AuthConfig and storage configuration."@en ;
-    dc:description "Declared via .ckproject file at project root. CK.Project kernel declares existence, scope, and configuration." ;
+    rdfs:comment "Organizes kernels into a coherent deployment unit: a pinned set of frozen versions, the edges between them, and project-scoped configuration. Formally grounded in cco:Organization."@en ;
+    dc:description "Each Project instance is materialized by a .ckproject manifest. The manifest is the authoritative record of the project's frozen deployment — SHA1 commit pins for each of the 3 organs (ck, tool, data) per kernel. The instance lives in CK.Project's DATA organ under ck-data/<project>/.ckproject on the SeaweedFS filer; a symlink at the project root (<project>/.ckproject) points at the same instance. CK.Operator reads the manifest to materialize kernels at their pinned versions."@en ;
     ckp:implementationStatus "PARTIAL"^^xsd:string .
 
 #################################################################
-#    System Mediators (Special Independent Continuants)
+#    System Kernels
 #################################################################
-
-### EdgeKernel - Communication Mediator
-
-ckp:EdgeKernel a owl:Class ;
-    rdfs:subClassOf ckp:Kernel , ckp:HotKernel ;
-    rdfs:label "Edge Kernel"@en ;
-    rdfs:comment "Special system kernel that mediates ALL inter-Kernel communication. Enforces Edge-only communication (architectural constraint)."@en ;
-    dc:description "URN: ckp://System.EdgeKernel:v1.0" ;
-    ckp:implementationStatus "WELL_IMPLEMENTED"^^xsd:string ;
-    ckp:architecturalRole "Communication Mediator"^^xsd:string .
+#
+# v3.7: Edges are ontology-level predicates on kernels (see ckp:Edge,
+# ckp:RelationshipType, ckp:isAuthorized above), not a dedicated kernel
+# class. Inter-Kernel communication is authorized and traced through
+# Edge instances declared in each target's queue_contract.edges and
+# carried over NATS — no EdgeKernel mediator is required.
+#
+# Real-time broadcast responsibilities previously assigned to a
+# WssHubKernel are externalized into the CK.Stream library kernel
+# concept and out of scope for the core ontology.
 
 ### System.Consensus - Governance Mediator
 
@@ -487,16 +487,6 @@ ckp:ConsensusKernel a owl:Class ;
     ckp:implementationStatus "PARTIAL"^^xsd:string ;
     ckp:architecturalRole "Governance Mediator"^^xsd:string .
 
-### System.WssHub - Broadcast Mediator
-
-ckp:WssHubKernel a owl:Class ;
-    rdfs:subClassOf ckp:Kernel , ckp:HotKernel ;
-    rdfs:label "WebSocket Hub Kernel"@en ;
-    rdfs:comment "Special system kernel that mediates ALL real-time broadcasts (WebSocket events to all clients)."@en ;
-    dc:description "URN: ckp://System.WssHub:v1.0" ;
-    ckp:implementationStatus "WELL_IMPLEMENTED"^^xsd:string ;
-    ckp:architecturalRole "Broadcast Mediator"^^xsd:string .
-
 #################################################################
 #    Base Relationship Property
 #################################################################
@@ -515,12 +505,9 @@ ckp:mediates a owl:ObjectProperty ;
     rdfs:label "mediates"@en ;
     rdfs:comment "A mediator kernel manages or controls some entity or process"@en .
 
-ckp:mediatesEdge a owl:ObjectProperty ;
-    rdfs:subPropertyOf ckp:mediates ;
-    rdfs:domain ckp:EdgeKernel ;
-    rdfs:range ckp:Edge ;
-    rdfs:label "mediates edge"@en ;
-    rdfs:comment "EdgeKernel manages this edge"@en .
+# ckp:mediatesEdge removed in v3.7 — edges are ontology-level predicates,
+# not objects managed by a mediator kernel. See ckp:Edge, ckp:hasSource,
+# ckp:hasTarget, ckp:hasRelationshipType, ckp:isAuthorized above.
 
 #################################################################
 #    Architectural Constraints (as OWL Axioms)

docs/public/ontology/v3.7/processes.ttl

@@ -169,12 +169,11 @@ ckpp:CompletedPhase a owl:Class ;
 ckpp:EdgeCommunicationProcess a owl:Class ;
     rdfs:subClassOf ckpp:Process ;
     rdfs:label "Edge Communication Process"@en ;
-    rdfs:comment "The FUNDAMENTAL process by which kernels interact - mediated by EdgeKernel. This is the ONLY way kernels can communicate (architectural constraint)."@en ;
+    rdfs:comment "The FUNDAMENTAL process by which kernels interact — authorized by an Edge declared in the target's queue_contract.edges and carried over NATS. The ONLY way kernels can communicate (architectural constraint)."@en ;
     dc:description "Edge communication process — inter-kernel message relay" ;
-    dc:description "Also: EdgeRequestBuilder.js:createEdgeRequests():64-128" ;
     ckp:implementationStatus "PARTIAL"^^xsd:string ;
     ckp:coverageScore "0.65"^^xsd:decimal ;
-    ckp:architecturalConstraint "NO direct Kernel-to-Kernel communication. ONLY via EdgeKernel."^^xsd:string ;
+    ckp:architecturalConstraint "NO direct Kernel-to-Kernel communication. All inter-Kernel interaction flows through an authorized Edge (ckp:isAuthorized true in the target's queue_contract.edges), carried over NATS."^^xsd:string ;
     ckp:criticalGap "No Process URN generation. Temporal parts not tracked."^^xsd:string .
 
 ### Edge Communication Participants
@@ -197,12 +196,9 @@ ckpp:hasTargetKernel a owl:ObjectProperty , owl:FunctionalProperty ;
     rdfs:label "has target kernel"@en ;
     rdfs:comment "The kernel receiving the routed instance"@en .
 
-ckpp:hasMediatorKernel a owl:ObjectProperty , owl:FunctionalProperty ;
-    rdfs:domain ckpp:EdgeCommunicationProcess ;
-    rdfs:range ckp:EdgeKernel ;
-    rdfs:label "has mediator kernel"@en ;
-    rdfs:comment "The EdgeKernel that mediates this communication"@en ;
-    ckp:architecturalInvariant "ALWAYS System.EdgeKernel"^^xsd:string .
+# ckpp:hasMediatorKernel removed in v3.7 — edge communication is not
+# mediated by a dedicated kernel; authorization is declared at the target
+# (ckp:Edge with ckp:isAuthorized) and the message is carried over NATS.
 
 ckpp:routesInstance a owl:ObjectProperty , owl:FunctionalProperty ;
     rdfs:domain ckpp:EdgeCommunicationProcess ;
@@ -221,21 +217,21 @@ ckpp:InstanceCreatedPhase a owl:Class ;
 ckpp:EdgeDetectedPhase a owl:Class ;
     rdfs:subClassOf ckpp:TemporalPart ;
     rdfs:label "Edge Detected Phase"@en ;
-    rdfs:comment "EdgeKernel detects new instance and queries outgoing edges"@en ;
+    rdfs:comment "Source kernel publishes the instance and its outgoing Edge declarations are resolved"@en ;
     ckp:implementationStatus "IMPLICIT"^^xsd:string .
 
 ckpp:TypeValidatedPhase a owl:Class ;
     rdfs:subClassOf ckpp:TemporalPart ;
     rdfs:label "Type Validated Phase"@en ;
-    rdfs:comment "EdgeKernel validates instance type against edge type_mapping"@en ;
-    dc:description "Validates source kernel identity before accepting edge communication" ;
+    rdfs:comment "Target kernel validates instance type against its queue_contract.edges before accepting"@en ;
+    dc:description "Target-side validation of source kernel identity and instance type prior to handler dispatch" ;
     ckp:implementationStatus "IMPLICIT"^^xsd:string .
 
 ckpp:RoutedPhase a owl:Class ;
     rdfs:subClassOf ckpp:TemporalPart ;
     rdfs:label "Routed Phase"@en ;
-    rdfs:comment "EdgeKernel creates symlink in target inbox (routing)"@en ;
-    dc:description "Establishes destination link for edge communication" ;
+    rdfs:comment "NATS delivers the message to the target kernel's input topic along the authorized Edge"@en ;
+    dc:description "Delivery over NATS along an authorized Edge" ;
     ckp:implementationStatus "IMPLICIT"^^xsd:string .
 
 ckpp:DeliveredPhase a owl:Class ;
@@ -251,7 +247,7 @@ ckpp:EdgeSubscriptionProcess a owl:Class ;
     rdfs:subClassOf ckpp:Process ;
     rdfs:label "Edge Subscription Process"@en ;
     rdfs:comment "The process of establishing a new Edge between kernels. Requires consensus approval and public announcement."@en ;
-    dc:description "NOT IMPLEMENTED: EdgeKernel doesn't trigger consensus for edge creation" ;
+    dc:description "NOT IMPLEMENTED: no automated flow triggers consensus on edge creation" ;
     ckp:implementationStatus "NOT_IMPLEMENTED"^^xsd:string ;
     ckp:coverageScore "0.00"^^xsd:decimal ;
     ckp:criticalGap "Edge creation is manual (ck create-edge). No consensus integration."^^xsd:string .
@@ -267,7 +263,7 @@ ckpp:SubscriptionRequestPhase a owl:Class ;
 ckpp:ConsensusProposalPhase a owl:Class ;
     rdfs:subClassOf ckpp:TemporalPart ;
     rdfs:label "Consensus Proposal Phase"@en ;
-    rdfs:comment "EdgeKernel creates consensus proposal"@en ;
+    rdfs:comment "Requesting kernel creates a consensus proposal for the new Edge"@en ;
     ckp:implementationStatus "NOT_IMPLEMENTED"^^xsd:string .
 
 ckpp:VotingPhase a owl:Class ;
@@ -279,13 +275,13 @@ ckpp:VotingPhase a owl:Class ;
 ckpp:EdgeCreationPhase a owl:Class ;
     rdfs:subClassOf ckpp:TemporalPart ;
     rdfs:label "Edge Creation Phase"@en ;
-    rdfs:comment "Upon approval, EdgeKernel creates Edge entity"@en ;
+    rdfs:comment "Upon approval, the Edge is recorded in the target's queue_contract.edges and the requesting kernel's outbound edges"@en ;
     ckp:implementationStatus "NOT_IMPLEMENTED"^^xsd:string .
 
 ckpp:AnnouncementPhase a owl:Class ;
     rdfs:subClassOf ckpp:TemporalPart ;
     rdfs:label "Announcement Phase"@en ;
-    rdfs:comment "WssHub broadcasts new Edge (public announcement)"@en ;
+    rdfs:comment "The new Edge is broadcast to subscribers on the project's event.* NATS topics"@en ;
     ckp:implementationStatus "NOT_IMPLEMENTED"^^xsd:string .
 
 #################################################################
@@ -382,11 +378,10 @@ ckpp:hasEventSource a owl:ObjectProperty ;
     rdfs:label "has event source"@en ;
     rdfs:comment "The kernel that generated the event"@en .
 
-ckpp:hasBroadcastMediator a owl:ObjectProperty , owl:FunctionalProperty ;
-    rdfs:domain ckpp:BroadcastProcess ;
-    rdfs:range ckp:WssHubKernel ;
-    rdfs:label "has broadcast mediator"@en ;
-    rdfs:comment "The WssHub kernel broadcasting this event"@en .
+# ckpp:hasBroadcastMediator removed in v3.7 — broadcast is not owned
+# by a dedicated WssHubKernel class. Real-time broadcast to clients is
+# handled by the library kernel concept (CK.Stream, externalized; see
+# streaming.md for the NATS stream.* topic scheme).
 
 ckpp:hasClientRecipient a owl:DatatypeProperty ;
     rdfs:domain ckpp:BroadcastProcess ;
@@ -405,22 +400,20 @@ ckpp:EventGeneratedPhase a owl:Class ;
 ckpp:EventReceivedPhase a owl:Class ;
     rdfs:subClassOf ckpp:TemporalPart ;
     rdfs:label "Event Received Phase"@en ;
-    rdfs:comment "WssHub receives event (via inbox symlink)"@en ;
-    dc:description "Code: /concepts/System.WssHub/tool/tool.js:watcher.on('add'):84-136" ;
+    rdfs:comment "The broadcasting library kernel receives the event on its subscribed NATS subject"@en ;
     ckp:implementationStatus "IMPLICIT"^^xsd:string .
 
 ckpp:FilteringPhase a owl:Class ;
     rdfs:subClassOf ckpp:TemporalPart ;
     rdfs:label "Filtering Phase"@en ;
-    rdfs:comment "WssHub filters based on client subscriptions"@en ;
+    rdfs:comment "Events are filtered by client subscription predicate before delivery"@en ;
     ckp:implementationStatus "NOT_IMPLEMENTED"^^xsd:string ;
-    ckp:criticalGap "No filtering. All clients receive all events."^^xsd:string .
+    ckp:criticalGap "No filtering. All subscribed clients receive all events."^^xsd:string .
 
 ckpp:DeliveryPhase a owl:Class ;
     rdfs:subClassOf ckpp:TemporalPart ;
     rdfs:label "Delivery Phase"@en ;
-    rdfs:comment "Parallel delivery to N WebSocket clients"@en ;
-    dc:description "Code: /concepts/System.WssHub/tool/tool.js:broadcast():59-64" ;
+    rdfs:comment "Parallel delivery to N WebSocket clients via the stream.* NATS topic scheme"@en ;
     ckp:implementationStatus "WELL_IMPLEMENTED"^^xsd:string .
 
 ckpp:CompletionPhase a owl:Class ;
@@ -513,7 +506,7 @@ ckpp:precedes a owl:ObjectProperty ;
     rdfs:label "Occurrent Coverage"@en ;
     ckp:coverageScore "0.45"^^xsd:decimal ;
     rdfs:comment "Overall Occurrent coverage: Invocation (60%), EdgeCommunication (65%), EdgeSubscription (0%), Consensus (50%), Broadcast (70%)"@en ;
-    ckp:criticalGap "No Process URN generation. No temporal parts tracking. EdgeKernel-Consensus not integrated."^^xsd:string .
+    ckp:criticalGap "No Process URN generation. No temporal parts tracking. Edge creation not integrated with Consensus."^^xsd:string .
 
 #################################################################
 #################################################################

docs/public/ontology/v3.7/rbac.ttl

@@ -227,7 +227,7 @@ ckp:AuthorizationCheck a owl:Class ;
     rdfs:subClassOf bfo:0000015 ;  # bfo:Process
     rdfs:label "Authorization Check"@en ;
     rdfs:comment "A temporal process that validates whether an agent has permission to perform an action. Implemented as SPARQL ASK query against unified ontology."@en ;
-    dc:description "Performed by: EdgeKernel (before routing), PermissionChecker (before action)" ;
+    dc:description "Performed by: target kernel (edge authorization on message receipt), PermissionChecker (before action)" ;
     dc:description "Query: ASK { ?agent ckp:hasRole ?role . ?role ckp:grants ?perm . ?perm ckp:permissionString ?permString }" ;
     ckp:implementationStatus "PARTIAL"^^xsd:string ;
     ckp:criticalGap "Not ontology-driven yet, uses hardcoded logic"^^xsd:string .
@@ -365,7 +365,7 @@ ckp:Role
 # - Other systems query System.Ontology for discovery
 
 # NOTE 3: Authorization Enforcement Points
-# - EdgeKernel: Queries ontology BEFORE routing (edge authorization)
+# - Target kernel: validates Edge authorization (ckp:isAuthorized in queue_contract.edges) on message receipt
 # - PermissionChecker: Queries ontology BEFORE action (permission check)
 # - System.Consensus: Queries ontology for quorum validation
 

docs/public/ontology/v3.7/relations.ttl

@@ -119,12 +119,9 @@ ckpr:mediates a owl:ObjectProperty ;
     rdfs:domain ckp:Kernel ;
     rdfs:range owl:Thing .
 
-ckpr:mediates_communication a owl:ObjectProperty ;
-    rdfs:subPropertyOf ckpr:mediates ;
-    rdfs:label "mediates communication"@en ;
-    rdfs:comment "EdgeKernel mediates ALL inter-kernel communication"@en ;
-    rdfs:domain ckp:EdgeKernel ;
-    rdfs:range ckpp:EdgeCommunicationProcess .
+# ckpr:mediates_communication removed in v3.7 — edge communication is
+# not owned by a dedicated mediator kernel; it flows along authorized
+# Edges over NATS (see ckp:Edge, ckp:isAuthorized).
 
 ckpr:mediates_governance a owl:ObjectProperty ;
     rdfs:subPropertyOf ckpr:mediates ;
@@ -133,12 +130,9 @@ ckpr:mediates_governance a owl:ObjectProperty ;
     rdfs:domain ckp:ConsensusKernel ;
     rdfs:range ckpp:ConsensusProcess .
 
-ckpr:mediates_broadcast a owl:ObjectProperty ;
-    rdfs:subPropertyOf ckpr:mediates ;
-    rdfs:label "mediates broadcast"@en ;
-    rdfs:comment "System.WssHub mediates ALL real-time broadcasts"@en ;
-    rdfs:domain ckp:WssHubKernel ;
-    rdfs:range ckpp:BroadcastProcess .
+# ckpr:mediates_broadcast removed in v3.7 — real-time broadcast is
+# externalized into the CK.Stream library kernel concept and not
+# described by the core ontology.
 
 #################################################################
 #    Provenance Relations
@@ -237,7 +231,7 @@ ckpr:authorizes_edge a owl:ObjectProperty ;
     rdfs:range ckp:Edge .
 
 # If Edge E has target Kernel K, and K lists E in queue_contract.edges, then K authorizes E
-# This must be validated at runtime by EdgeKernel
+# This must be validated at runtime by the target kernel on message receipt.
 
 ckpr:authorized_by a owl:ObjectProperty ;
     rdfs:label "authorized by"@en ;

docs/v3.7/bfo-grounding.md

@@ -97,7 +97,7 @@ The TBox and ABox mappings are rigorous. The RBox mapping is approximate -- the
 
 | DL Box | CKP Loop | Contents | Physical Realisation | DL Rigour |
 |--------|----------|----------|---------------------|-----------|
-| TBox | CK Loop | `conceptkernel.yaml`, `ontology.yaml`, `rules.shacl`, `serving.json` | Volume `ck-{guid}-ck`, ReadOnly | Rigorous |
+| TBox | CK Loop | `conceptkernel.yaml`, `ontology.yaml`, `rules.shacl` | Volume `ck-{guid}-ck`, ReadOnly | Rigorous |
 | RBox | TOOL Loop | `tool/processor.py`, scripts, services, build artifacts | Volume `ck-{guid}-tool`, ReadOnly | Approximate |
 | ABox | DATA Loop | `data/instances/`, `proof/`, `ledger/`, `index/`, `llm/`, `web/` | Volume `ck-{guid}-storage`, ReadWrite | Rigorous |