index.jsonld
name: OutTheBox Governance Ontology
description: A machine-readable model of the governance patterns OutTheBox has currently published: their categories, which live pack each ships in, how patterns depend on, feed, encompass, or are commonly confused with each other, and the structured registry schema those patterns operate against. It supports machine discovery, navigation, and integration. It does not contain the decision logic, implementation guidance, worked examples, or Agent 365 templates delivered in the paid packs, and using it does not require purchasing a pack; the packs provide implementation assets beyond this public semantic model, not access to it.
ontology version: 1.0.0
published: 2026-09-06
modified: 2026-09-06
license: https://creativecommons.org/licenses/by/4.0/
publisher: OutTheBox.ai
namespace: https://www.outthebox.ai/ontology/
compatibility: This document replaces, in place at the same v1 path, the first draft published 2026-09-06 on the same day. No external consumer is known to have fetched that draft yet, so it is treated as pre-release and superseded here rather than preserved at a separate v2 path. From this point forward, the versioned path should be treated as stable: a future structural change of this scale would warrant a new /v2/ path instead of overwriting /v1/ again.
deprecation policy: A deprecated term is retained for at least one further minor version after its replacement ships, marked deprecated:true with a supersededBy pointer, before removal in a future major version.
changelog: https://www.outthebox.ai/ontology/CHANGELOG.md
categories:
  id: category:1
  type: Category
  name: Agent Lifecycle & Registration
  description: Whether an agent should exist, how it is identified, and what happens across its working life.
  number: 1
categories:
  id: category:2
  type: Category
  name: Pre-Deployment Gates
  description: Whether an agent, and the infrastructure decisions behind it, are actually ready to go live.
  number: 2
categories:
  id: category:3
  type: Category
  name: Oversight & Autonomy Transitions
  description: How much autonomy an agent has, who can change that, and what triggers a change.
  number: 3
categories:
  id: category:4
  type: Category
  name: Delegation & Multi-Agent Coordination
  description: What happens once one agent starts handing work to another.
  number: 4
categories:
  id: category:5
  type: Category
  name: Risk, Audit & Compliance
  description: Whether a failure can be caught, reported, and learned from.
  number: 5
categories:
  id: category:6
  type: Category
  name: Observability & Drift
  description: Whether an agent still behaves the way it did when it was approved.
  number: 6
categories:
  id: category:7
  type: Category
  name: Data & Semantic Governance
  description: Whether every agent touching a piece of data agrees on what it means.
  number: 7
categories:
  id: category:8
  type: Category
  name: Change Management
  description: Whether a change to an agent, or to what it relies on, gets reviewed before it takes effect.
  number: 8
categories:
  id: category:9
  type: Category
  name: Pre-Build & Vendor Governance
  description: Whether a use case should be built at all, and whether a capability you did not build yourself is actually governed.
  number: 9
categories:
  id: category:10
  type: Category
  name: Agent Identity & Credential Governance
  description: Whether an agent's access is owned, current, and actually revocable.
  number: 10
categories:
  id: category:11
  type: Category
  name: Agent Cost & Budget Governance
  description: Whether agentic spend is bounded, owned, and reconciled against what was planned.
  number: 11
categories:
  id: category:12
  type: Category
  name: Agent Sprawl & Shadow AI Discovery
  description: Whether every agent actually running has been counted.
  number: 12
categories:
  id: category:13
  type: Category
  name: Prompt Injection & Untrusted-Input Governance
  description: Whether an agent acting on content it did not generate can be trusted.
  number: 13
categories:
  id: category:14
  type: Category
  name: AI Coding Agent CI/CD Governance
  description: Whether an agent that writes and ships code is governed the same way a human contributor would be.
  number: 14
packs:
  id: pack:ai-coding-agent-ci-cd-governance
  type: Pack
  name: AI Coding Agent CI/CD Governance
  description: Governance patterns for AI agents that author and ship code changes.
  status: published
  contains pattern: pattern:agent-authored-commit-test-coverage-gate
  contains pattern: pattern:human-sign-off-gate-at-merge
  contains pattern: pattern:dependency-package-provenance-verification-gate
  contains pattern: pattern:pipeline-execution-credential-scoping-gate
  contains pattern: pattern:security-testing-gate-for-agent-authored-code
  contains pattern: pattern:autonomous-promotion-authorization-tier
  contains pattern: pattern:agent-initiated-rollback-remediation-boundary
packs:
  id: pack:agent-cost-and-budget-governance
  type: Pack
  name: Agent Cost & Budget Governance
  description: Governance patterns for bounding, owning, and reconciling agentic spend.
  status: published
  contains pattern: pattern:token-cost-consumption-observability-baseline
  contains pattern: pattern:fleet-budget-ceiling-circuit-breaker
  contains pattern: pattern:high-cost-action-pre-approval-gate
  contains pattern: pattern:cost-ownership-and-attribution
  contains pattern: pattern:cost-forecast-reconciliation-cadence
packs:
  id: pack:agent-identity-and-credential-governance
  type: Pack
  name: Agent Identity & Credential Governance
  description: Governance patterns for an agent's identity, ownership, and credential lifecycle.
  status: published
  contains pattern: pattern:agent-identity-ownership-sponsor-assignment
  contains pattern: pattern:orphaned-agent-credential-detection-decommissioning
  contains pattern: pattern:standing-access-review-cadence
  contains pattern: pattern:static-credential-long-lived-key-elimination-requirement
  contains pattern: pattern:runtime-permission-escalation-boundary
  contains pattern: pattern:identity-ownership-single-source-of-truth-requirement
packs:
  id: pack:agent-lifecycle-transitions
  type: Pack
  name: Agent Lifecycle Transitions
  description: Governance patterns for an agent's lifecycle transitions: promotion, demotion, deprecation, retirement.
  status: published
  contains pattern: pattern:ownership-assignment
  contains pattern: pattern:sponsor-business-owner-sign-off-gate
  contains pattern: pattern:promotion-gate
  contains pattern: pattern:demotion-downgrade-trigger
  contains pattern: pattern:agent-deprecation-process
  contains pattern: pattern:agent-retirement-decommissioning
packs:
  id: pack:agent-sprawl-and-shadow-ai-discovery
  type: Pack
  name: Agent Sprawl & Shadow AI Discovery
  description: Governance patterns for discovering and reconciling ungoverned or duplicate agents.
  status: published
  contains pattern: pattern:shadow-unauthorized-agent-discovery
  contains pattern: pattern:agent-inventory-reconciliation-cadence
  contains pattern: pattern:no-code-citizen-developer-agent-registration-gate
  contains pattern: pattern:duplicate-redundant-agent-consolidation-review
  contains pattern: pattern:decommissioned-agent-residual-footprint-cleanup
packs:
  id: pack:change-management
  type: Pack
  name: Change Management
  description: Governance patterns for reviewing and approving changes to an agent or what it relies on.
  status: published
  contains pattern: pattern:change-impact-classification-by-autonomy-tier
  contains pattern: pattern:underlying-model-drift-re-approval-trigger
  contains pattern: pattern:change-approval-workflow-by-risk-tier
  contains pattern: pattern:emergency-change-process
  contains pattern: pattern:post-change-validation-requirement
packs:
  id: pack:data-and-semantic-governance
  type: Pack
  name: Data & Semantic Governance
  description: Governance patterns for shared data definitions and meaning across agents.
  status: published
  contains pattern: pattern:shared-ontology-data-definition-gate
  contains pattern: pattern:data-lineage-requirements
  contains pattern: pattern:shared-vocabulary-enforcement
  contains pattern: pattern:data-quality-gate
  contains pattern: pattern:data-classification-for-agent-access
packs:
  id: pack:education-and-assessment
  type: Pack
  name: Education & Assessment
  description: Governance patterns for AI agents that score or assess educational work.
  status: published
  contains pattern: pattern:agent-tiering-governance-tier-classification
  contains pattern: pattern:agent-registry-decision-tier-metadata-revocation
  contains pattern: pattern:graduated-oversight-maturity-model
  contains pattern: pattern:action-level-authorization-boundaries
  contains pattern: pattern:cross-system-audit-log-reconciliation
  contains pattern: pattern:token-cost-consumption-observability-baseline
packs:
  id: pack:employment-and-recruitment
  type: Pack
  name: Employment & Recruitment
  description: Governance patterns for AI agents involved in candidate evaluation and recruitment decisions.
  status: published
  contains pattern: pattern:agent-tiering-governance-tier-classification
  contains pattern: pattern:agent-registry-decision-tier-metadata-revocation
  contains pattern: pattern:graduated-oversight-maturity-model
  contains pattern: pattern:action-level-authorization-boundaries
  contains pattern: pattern:cross-system-audit-log-reconciliation
  contains pattern: pattern:token-cost-consumption-observability-baseline

id: pack:go-live-readiness
type: Pack
name: Go-Live Readiness
description: Governance patterns confirming operational readiness immediately before go-live.
status: published
contains pattern: pattern:security-review-gate
contains pattern: pattern:data-access-scope-definition
contains pattern: pattern:rollback-plan-requirement
contains pattern: pattern:environment-segregation
contains pattern: pattern:user-acceptance-criteria-definition
contains pattern: pattern:go-live-readiness-checklist

id: pack:incident-and-compliance-operations
type: Pack
name: Incident & Compliance Operations
description: Governance patterns for incident response, review, and regulatory compliance operations.
status: published
contains pattern: pattern:audit-trail-requirements
contains pattern: pattern:incident-response-for-agent-failures
contains pattern: pattern:post-incident-review-process
contains pattern: pattern:compliance-attestation-cadence
contains pattern: pattern:whistleblower-escalation-channel
contains pattern: pattern:regulatory-change-monitoring-process

id: pack:multi-agent-orchestration-governance
type: Pack
name: Multi-Agent Orchestration Governance
description: Governance patterns for delegation and coordination between multiple agents.
status: published
contains pattern: pattern:agent-pairing-interaction-approval
contains pattern: pattern:multi-agent-interaction-composition-governance
contains pattern: pattern:delegation-depth-limits
contains pattern: pattern:cross-system-audit-log-reconciliation

id: pack:observability-and-drift
type: Pack
name: Observability & Drift
description: Governance patterns for monitoring whether an agent's behaviour has drifted from its approved baseline.
status: published
contains pattern: pattern:observability-minimum-standard-definition
contains pattern: pattern:drift-definition
contains pattern: pattern:decision-latency-drift-baseline
contains pattern: pattern:error-override-rate-drift-baseline
contains pattern: pattern:escalation-rate-drift-baseline
contains pattern: pattern:model-prompt-version-tracking
contains pattern: pattern:explainability-requirement-by-risk-tier
contains pattern: pattern:silent-failure-detection
contains pattern: pattern:token-cost-consumption-observability-baseline

id: pack:oversight-and-autonomy-governance
type: Pack
name: Oversight & Autonomy Governance
description: Governance patterns for an agent's autonomy level and escalation behaviour.
status: published
contains pattern: pattern:escalation-trigger-definition
contains pattern: pattern:override-intervention-mechanism
contains pattern: pattern:autonomy-regression-trigger
contains pattern: pattern:approval-authority-matrix-by-autonomy-level
contains pattern: pattern:time-bound-autonomy-trials
contains pattern: pattern:autonomy-level-audit-trail

id: pack:pre-build-readiness
type: Pack
name: Pre-Build Readiness
description: Governance patterns applied before an agent is built, scoping risk and authorisation.
status: published
contains pattern: pattern:use-case-risk-triage-pre-build-classification
contains pattern: pattern:fundamental-rights-impact-pre-check
contains pattern: pattern:build-authorization-guardrail-definition-gate

id: pack:pre-deployment-gates
type: Pack
name: Pre-Deployment Gates
description: Governance patterns applied to infrastructure and architecture decisions before deployment.
status: published
contains pattern: pattern:architecture-decision-gate-infrastructure-choices
contains pattern: pattern:infrastructure-ownership-threshold-gate
contains pattern: pattern:model-routing-provenance-gate
contains pattern: pattern:sovereign-hosting-consideration-gate

id: pack:pre-launch-readiness
type: Pack
name: Pre-Launch Readiness
description: Governance patterns confirming an agent is ready to move from pilot to production.
status: published
contains pattern: pattern:shadow-unauthorized-agent-discovery
contains pattern: pattern:pilot-to-production-governance-gate
contains pattern: pattern:kill-switch-verification-response-time-target

id: pack:prompt-injection-and-untrusted-input-governance
type: Pack
name: Prompt Injection & Untrusted-Input Governance
description: Governance patterns for agents acting on content they did not generate.
status: published
contains pattern: pattern:untrusted-content-trust-boundary-declaration
contains pattern: pattern:tool-capability-scope-minimization
contains pattern: pattern:high-impact-action-confirmation-gate-untrusted-derived-instructions
contains pattern: pattern:tool-call-decision-provenance-logging
contains pattern: pattern:baseline-prompt-behavior-deviation-monitoring

id: pack:vendor-and-embedded-agent-governance
type: Pack
name: Vendor & Embedded Agent Governance
description: Governance patterns for AI capability introduced via a third-party vendor tool.
status: published
contains pattern: pattern:vendor-agent-discovery
contains pattern: pattern:vendor-agent-classification
contains pattern: pattern:vendor-ai-terms-data-handling-review-gate
contains pattern: pattern:vendor-feature-change-monitoring

id: pack:worker-monitoring-and-performance-evaluation
type: Pack
name: Worker Monitoring & Performance Evaluation
description: Governance patterns for AI agents that monitor or evaluate worker performance.
status: published
contains pattern: pattern:agent-tiering-governance-tier-classification
contains pattern: pattern:agent-registry-decision-tier-metadata-revocation
contains pattern: pattern:graduated-oversight-maturity-model
contains pattern: pattern:action-level-authorization-boundaries
contains pattern: pattern:cross-system-audit-log-reconciliation
contains pattern: pattern:token-cost-consumption-observability-baseline

id: pattern:agent-tiering-governance-tier-classification
type: Pattern
name: Agent Tiering / Governance Tier Classification
category: category:1
ships in: pack:employment-and-recruitment
ships in: pack:worker-monitoring-and-performance-evaluation
ships in: pack:education-and-assessment
data contract type: write-only
pattern version: 1.0.0
writes: agent.tier

id: pattern:agent-registry-decision-tier-metadata-revocation
type: Pattern
name: Agent Registry with Decision-Tier Metadata and Revocation
category: category:1
ships in: pack:employment-and-recruitment
ships in: pack:worker-monitoring-and-performance-evaluation
ships in: pack:education-and-assessment
data contract type: organisational-process
pattern version: 1.0.0
reads: agent.tier
writes: agent.registry_id
writes: agent.status
data contract note: Aggregates several other patterns into one checklist-style gate; does not itself read or write a single registry field.
encompasses: pattern:shadow-unauthorized-agent-discovery
distinct from: pattern:agent-tiering-governance-tier-classification

id: pattern:shadow-unauthorized-agent-discovery
type: Pattern
name: Shadow / Unauthorized Agent Discovery
category: category:1
ships in: pack:pre-launch-readiness
ships in: pack:agent-sprawl-and-shadow-ai-discovery
data contract type: write-only
pattern version: 1.0.0
writes: agent.registry_id

id: pattern:ownership-assignment
type: Pattern
name: Ownership Assignment
category: category:1
ships in: pack:agent-lifecycle-transitions
data contract type: write-only
pattern version: 1.0.0
writes: agent.owner

id: pattern:sponsor-business-owner-sign-off-gate
type: Pattern
name: Sponsor/Business-Owner Sign-off Gate
category: category:1
ships in: pack:agent-lifecycle-transitions
data contract type: read-write
pattern version: 1.0.0
reads: agent.owner
writes: agent.sponsor
depends on: pattern:ownership-assignment

id: pattern:promotion-gate
type: Pattern
name: Promotion Gate (tier upgrade criteria)
category: category:1
ships in: pack:agent-lifecycle-transitions
data contract type: read-write
pattern version: 1.0.0
reads: agent.sponsor
writes: agent.tier
depends on: pattern:sponsor-business-owner-sign-off-gate

id: pattern:demotion-downgrade-trigger
type: Pattern
name: Demotion / Downgrade Trigger
category: category:1
ships in: pack:agent-lifecycle-transitions
data contract type: read-write
pattern version: 1.0.0
writes: agent.tier
distinct from: pattern:autonomy-regression-trigger
reads: agent.tier
data contract note: Medium confidence: narrative also implies a decision record this schema doesn't yet capture beyond the tier change itself.

id: pattern:agent-deprecation-process
type: Pattern
name: Agent Deprecation Process
category: category:1
ships in: pack:agent-lifecycle-transitions
data contract type: write-only
pattern version: 1.0.0
writes: agent.status
data contract note: Medium confidence: narrative centres on the deprecation process and notification, not solely the status field.

id: pattern:agent-retirement-decommissioning
type: Pattern
name: Agent Retirement & Decommissioning
category: category:1
ships in: pack:agent-lifecycle-transitions
data contract type: read-write
pattern version: 1.0.0
reads: agent.status
writes: agent.status
depends on: pattern:agent-deprecation-process

id: pattern:pilot-to-production-governance-gate
type: Pattern
name: Pilot-to-Production Governance Gate
category: category:2
ships in: pack:pre-launch-readiness
data contract type: read-write
pattern version: 1.0.0
reads: agent.tier
writes: agent.status
depends on: pattern:agent-tiering-governance-tier-classification
feeds: pattern:security-review-gate
feeds: pattern:rollback-plan-requirement

id: pattern:architecture-decision-gate-infrastructure-choices
type: Pattern
name: Architecture Decision Gate for Infrastructure Choices
category: category:2
ships in: pack:pre-deployment-gates
data contract type: organisational-process
pattern version: 1.0.0
reads: infrastructure_component.ownership_model
distinct from: pattern:infrastructure-ownership-threshold-gate
data contract note: Assesses whether a process or practice meets a bar across the board, not a single field's value.

id: pattern:infrastructure-ownership-threshold-gate
type: Pattern
name: Infrastructure Ownership Threshold Gate
category: category:2
ships in: pack:pre-deployment-gates
data contract type: write-only
pattern version: 1.0.0
writes: infrastructure_component.ownership_model
feeds: pattern:architecture-decision-gate-infrastructure-choices

id: pattern:model-routing-provenance-gate
type: Pattern
name: Model Routing Provenance Gate
category: category:2
ships in: pack:pre-deployment-gates
data contract type: read-only
pattern version: 1.0.0
reads: infrastructure_component.ownership_model
depends on: pattern:infrastructure-ownership-threshold-gate
related to: pattern:sovereign-hosting-consideration-gate

id: pattern:sovereign-hosting-consideration-gate
type: Pattern
name: Sovereign Hosting Consideration Gate
category: category:2
ships in: pack:pre-deployment-gates
data contract type: read-only
pattern version: 1.0.0
reads: infrastructure_component.ownership_model
depends on: pattern:infrastructure-ownership-threshold-gate

id: pattern:security-review-gate
type: Pattern
name: Security Review Gate
category: category:2
ships in: pack:go-live-readiness
data contract type: read-only
pattern version: 1.0.0
data contract note: Medium confidence: general security review may cover more than the automated security-test-result field captures.
related to: pattern:data-access-scope-definition
reads: change.security_test_result
reads: change.risk_tier

id: pattern:data-access-scope-definition
type: Pattern
name: Data Access Scope Definition
category: category:2
ships in: pack:go-live-readiness
data contract type: write-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
writes: agent.data_access_scope_ref

id: pattern:rollback-plan-requirement
type: Pattern
name: Rollback Plan Requirement
category: category:2
ships in: pack:go-live-readiness
data contract type: write-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
writes: deployment.rollback_plan_ref

id: pattern:environment-segregation
type: Pattern
name: Environment Segregation
category: category:2
ships in: pack:go-live-readiness
data contract type: read-only
pattern version: 1.0.0
data contract note: Field captures the environment label; the pattern's actual check (segregation enforced) has no dedicated field yet.
related to: pattern:rollback-plan-requirement
reads: deployment.environment

id: pattern:user-acceptance-criteria-definition
type: Pattern
name: User Acceptance Criteria Definition
category: category:2
ships in: pack:go-live-readiness
data contract type: write-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
related to: pattern:environment-segregation
writes: deployment.acceptance_criteria_ref

id: pattern:go-live-readiness-checklist
type: Pattern
name: Go-Live Readiness Checklist
category: category:2
ships in: pack:go-live-readiness
data contract type: organisational-process
pattern version: 1.0.0
writes: agent.status
data contract note: Aggregate checklist confirming five prior gates passed; not a field-level read or write itself.
encompasses: pattern:security-review-gate
encompasses: pattern:data-access-scope-definition
encompasses: pattern:rollback-plan-requirement
encompasses: pattern:environment-segregation
encompasses: pattern:user-acceptance-criteria-definition

id: pattern:graduated-oversight-maturity-model
type: Pattern
name: Graduated Oversight Maturity Model
category: category:3
ships in: pack:employment-and-recruitment
ships in: pack:worker-monitoring-and-performance-evaluation
ships in: pack:education-and-assessment
data contract type: read-write
pattern version: 1.0.0
reads: agent.tier
writes: agent.oversight_tier
depends on: pattern:agent-tiering-governance-tier-classification

id: pattern:action-level-authorization-boundaries
type: Pattern
name: Action-Level Authorization Boundaries
category: category:3
ships in: pack:employment-and-recruitment
ships in: pack:worker-monitoring-and-performance-evaluation
ships in: pack:education-and-assessment
data contract type: read-only
pattern version: 1.0.0
reads: agent.oversight_tier
related to: pattern:graduated-oversight-maturity-model

id: pattern:escalation-trigger-definition
type: Pattern
name: Escalation Trigger Definition
category: category:3
ships in: pack:oversight-and-autonomy-governance
data contract type: write-only
pattern version: 1.0.0
writes: agent.escalation_state

id: pattern:override-intervention-mechanism
type: Pattern
name: Override/Intervention Mechanism
category: category:3
ships in: pack:oversight-and-autonomy-governance
data contract type: read-write
pattern version: 1.0.0
reads: agent.escalation_state
writes: agent.override_count
depends on: pattern:escalation-trigger-definition

id: pattern:autonomy-regression-trigger
type: Pattern
name: Autonomy Regression Trigger
category: category:3
ships in: pack:oversight-and-autonomy-governance
data contract type: read-write
pattern version: 1.0.0
reads: agent.oversight_tier
writes: agent.oversight_tier
depends on: pattern:graduated-oversight-maturity-model
data contract note: Medium confidence: the regression signal itself isn't a distinct field, only its outcome (oversight tier changing) is captured.

id: pattern:approval-authority-matrix-by-autonomy-level
type: Pattern
name: Approval Authority Matrix by Autonomy Level
category: category:3
ships in: pack:oversight-and-autonomy-governance
data contract type: read-write
pattern version: 1.0.0
reads: agent.oversight_tier
depends on: pattern:graduated-oversight-maturity-model
writes: decision.approval_ref
writes: decision.decided_by
data contract note: The matrix lookup itself has no field; its output, a named approver, maps to Decision fields.

id: pattern:time-bound-autonomy-trials
type: Pattern
name: Time-Bound Autonomy Trials
category: category:3
ships in: pack:oversight-and-autonomy-governance
data contract type: read-write
pattern version: 1.0.0
reads: agent.oversight_tier
depends on: pattern:autonomy-regression-trigger
related to: pattern:graduated-oversight-maturity-model
writes: decision.valid_from
writes: decision.valid_until
writes: agent.oversight_tier

id: pattern:autonomy-level-audit-trail
type: Pattern
name: Autonomy Level Audit Trail
category: category:3
ships in: pack:oversight-and-autonomy-governance
data contract type: write-only
pattern version: 1.0.0
data contract note: Describes an immutable transition log; these are the closest existing fields, not a purpose-built audit-trail record.
writes: decision.decided_at
writes: decision.previous_decision_id
writes: decision.superseded_by
writes: decision.evidence_ref

id: pattern:agent-pairing-interaction-approval
type: Pattern
name: Agent-Pairing Interaction Approval
category: category:4
ships in: pack:multi-agent-orchestration-governance
data contract type: read-write
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
reads: delegation.from_agent_id
reads: delegation.to_agent_id
writes: delegation.approved

id: pattern:multi-agent-interaction-composition-governance
type: Pattern
name: Multi-Agent Interaction / Composition Governance
category: category:4
ships in: pack:multi-agent-orchestration-governance
data contract type: organisational-process
pattern version: 1.0.0
data contract note: Aggregates several other patterns into one checklist-style gate; does not itself read or write a single registry field.
encompasses: pattern:agent-pairing-interaction-approval

id: pattern:delegation-depth-limits
type: Pattern
name: Delegation Depth Limits
category: category:4
ships in: pack:multi-agent-orchestration-governance
data contract type: read-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
distinct from: pattern:agent-pairing-interaction-approval
reads: delegation.depth

id: pattern:cross-system-audit-log-reconciliation
type: Pattern
name: Cross-System Audit Log Reconciliation
category: category:4
ships in: pack:multi-agent-orchestration-governance
ships in: pack:employment-and-recruitment
ships in: pack:worker-monitoring-and-performance-evaluation
ships in: pack:education-and-assessment
data contract type: organisational-process
pattern version: 1.0.0
data contract note: Reconciliation check across multiple systems' logs; no single field represents this.

id: pattern:audit-trail-requirements
type: Pattern
name: Audit Trail Requirements
category: category:5
ships in: pack:incident-and-compliance-operations
data contract type: organisational-process
pattern version: 1.0.0
data contract note: Assesses whether a process or practice meets a bar across the board, not a single field's value.

id: pattern:incident-response-for-agent-failures
type: Pattern
name: Incident Response for Agent Failures
category: category:5
ships in: pack:incident-and-compliance-operations
data contract type: write-only
pattern version: 1.0.0
data contract note: Medium confidence: response process captured only partially by the incident record's root-cause field.
writes: incident.root_cause

id: pattern:kill-switch-verification-response-time-target
type: Pattern
name: Kill-Switch Verification & Response-Time Target
category: category:5
ships in: pack:pre-launch-readiness
data contract type: organisational-process
pattern version: 1.0.0
data contract note: Verifies a response-time target is met in testing; not a single ongoing field's value.

id: pattern:post-incident-review-process
type: Pattern
name: Post-Incident Review Process
category: category:5
ships in: pack:incident-and-compliance-operations
data contract type: write-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
writes: incident.root_cause
writes: incident.corrective_action_owner

id: pattern:compliance-attestation-cadence
type: Pattern
name: Compliance Attestation Cadence
category: category:5
ships in: pack:incident-and-compliance-operations
data contract type: read-write
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
reads: agent.last_attestation_at
writes: agent.last_attestation_at

id: pattern:whistleblower-escalation-channel
type: Pattern
name: Whistleblower/Escalation Channel for AI Concerns
category: category:5
ships in: pack:incident-and-compliance-operations
data contract type: organisational-process
pattern version: 1.0.0
data contract note: Only a .dmn decision table exists for this pattern (no narrative file was found to confirm field-level data use); treated as a process control until a narrative source can be reviewed.

id: pattern:regulatory-change-monitoring-process
type: Pattern
name: Regulatory Change Monitoring Process
category: category:5
ships in: pack:incident-and-compliance-operations
data contract type: organisational-process
pattern version: 1.0.0
data contract note: Assesses whether a process or practice meets a bar across the board, not a single field's value.

id: pattern:observability-minimum-standard-definition
type: Pattern
name: Observability Minimum Standard Definition
category: category:6
ships in: pack:observability-and-drift
data contract type: write-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
feeds: pattern:agent-tiering-governance-tier-classification
writes: agent.observability_status

id: pattern:drift-definition
type: Pattern
name: Drift Definition
category: category:6
ships in: pack:observability-and-drift
data contract type: write-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
depends on: pattern:observability-minimum-standard-definition
writes: agent.drift_definition_ref
writes: agent.behavioral_baseline_ref

id: pattern:decision-latency-drift-baseline
type: Pattern
name: Decision-Latency Drift Baseline
category: category:6
ships in: pack:observability-and-drift
data contract type: write-only
pattern version: 1.0.0
writes: agent.decision_latency
depends on: pattern:drift-definition
feeds: pattern:kill-switch-verification-response-time-target
feeds: pattern:underlying-model-drift-re-approval-trigger

id: pattern:error-override-rate-drift-baseline
type: Pattern
name: Error/Override-Rate Drift Baseline
category: category:6
ships in: pack:observability-and-drift
data contract type: write-only
pattern version: 1.0.0
writes: agent.override_count
depends on: pattern:drift-definition

id: pattern:escalation-rate-drift-baseline
type: Pattern
name: Escalation-Rate Drift Baseline
category: category:6
ships in: pack:observability-and-drift
data contract type: write-only
pattern version: 1.0.0
writes: agent.escalation_state
depends on: pattern:drift-definition

id: pattern:model-prompt-version-tracking
type: Pattern
name: Model/Prompt Version Tracking
category: category:6
ships in: pack:observability-and-drift
data contract type: write-only
pattern version: 1.0.0
writes: agent.model_version
feeds: pattern:token-cost-consumption-observability-baseline

id: pattern:explainability-requirement-by-risk-tier
type: Pattern
name: Explainability Requirement by Risk Tier
category: category:6
ships in: pack:observability-and-drift
data contract type: read-only
pattern version: 1.0.0
reads: agent.tier
depends on: pattern:agent-tiering-governance-tier-classification
distinct from: pattern:observability-minimum-standard-definition

id: pattern:silent-failure-detection
type: Pattern
name: Silent Failure Detection
category: category:6
ships in: pack:observability-and-drift
data contract type: read-write
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
reads: agent.observability_status
reads: agent.last_healthy_signal_at
writes: agent.last_healthy_signal_at

id: pattern:token-cost-consumption-observability-baseline
type: Pattern
name: Token & Cost Consumption Observability Baseline
category: category:6
ships in: pack:observability-and-drift
ships in: pack:agent-cost-and-budget-governance
ships in: pack:employment-and-recruitment
ships in: pack:worker-monitoring-and-performance-evaluation
ships in: pack:education-and-assessment
data contract type: read-write
pattern version: 1.0.0
reads: agent.model_version
writes: agent.cost_baseline

id: pattern:shared-ontology-data-definition-gate
type: Pattern
name: Shared Ontology / Data Definition Gate
category: category:7
ships in: pack:data-and-semantic-governance
data contract type: read-only
pattern version: 1.0.0
data contract note: Medium confidence: matches an owned, versioned definition reasonably well but doesn't confirm the definition is actually agreed/shared.
reads: data_asset.owning_domain
reads: data_asset.definition_version

id: pattern:data-lineage-requirements
type: Pattern
name: Data Lineage Requirements
category: category:7
ships in: pack:data-and-semantic-governance
data contract type: write-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
depends on: pattern:shared-ontology-data-definition-gate
writes: data_asset.lineage_ref

id: pattern:shared-vocabulary-enforcement
type: Pattern
name: Shared Vocabulary Enforcement
category: category:7
ships in: pack:data-and-semantic-governance
data contract type: organisational-process
pattern version: 1.0.0
data contract note: Confirms a shared data vocabulary is actually being used consistently; not a single field's value.
depends on: pattern:shared-ontology-data-definition-gate

id: pattern:data-quality-gate
type: Pattern
name: Data Quality Gate
category: category:7
ships in: pack:data-and-semantic-governance
data contract type: read-write
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
depends on: pattern:shared-ontology-data-definition-gate
depends on: pattern:data-lineage-requirements
reads: data_asset.quality_score
writes: data_asset.quality_score
writes: data_asset.last_quality_check_at

id: pattern:data-classification-for-agent-access
type: Pattern
name: Data Classification for Agent Access
category: category:7
ships in: pack:data-and-semantic-governance
data contract type: read-write
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
reads: agent.data_access_scope_ref
writes: data_asset.sensitivity_classification

id: pattern:change-impact-classification-by-autonomy-tier
type: Pattern
name: Change Impact Classification by Autonomy Tier
category: category:8
ships in: pack:change-management
data contract type: read-only
pattern version: 1.0.0
reads: agent.tier
depends on: pattern:agent-tiering-governance-tier-classification

id: pattern:underlying-model-drift-re-approval-trigger
type: Pattern
name: Underlying Model Drift Re-Approval Trigger
category: category:8
ships in: pack:change-management
data contract type: read-write
pattern version: 1.0.0
reads: agent.model_version
writes: agent.status
depends on: pattern:model-prompt-version-tracking

id: pattern:change-approval-workflow-by-risk-tier
type: Pattern
name: Change Approval Workflow by Risk Tier
category: category:8
ships in: pack:change-management
data contract type: read-write
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
depends on: pattern:change-impact-classification-by-autonomy-tier
reads: change.risk_tier
writes: change.approved_at

id: pattern:emergency-change-process
type: Pattern
name: Emergency Change Process
category: category:8
ships in: pack:change-management
data contract type: read-write
pattern version: 1.0.0
data contract note: Medium confidence: the emergency-path-specific criteria and retrospective requirement have no dedicated fields.
reads: change.risk_tier
reads: change.requested_at
writes: change.approved_at

id: pattern:post-change-validation-requirement
type: Pattern
name: Post-Change Validation Requirement
category: category:8
ships in: pack:change-management
data contract type: write-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
writes: change.validation_result
writes: change.validated_at

id: pattern:use-case-risk-triage-pre-build-classification
type: Pattern
name: Use-Case Risk Triage / Pre-Build Classification
category: category:9
ships in: pack:pre-build-readiness
data contract type: evidence-evaluation
pattern version: 1.0.0
data contract note: Runs before an agent record exists; its outcome later seeds agent.tier at registration, but there is no agent to read or write yet at the point this pattern itself runs.
feeds: pattern:build-authorization-guardrail-definition-gate

id: pattern:fundamental-rights-impact-pre-check
type: Pattern
name: Fundamental-Rights / Impact Pre-Check
category: category:9
ships in: pack:pre-build-readiness
data contract type: organisational-process
pattern version: 1.0.0
data contract note: Assesses whether a process or practice meets a bar across the board, not a single field's value.
depends on: pattern:use-case-risk-triage-pre-build-classification

id: pattern:build-authorization-guardrail-definition-gate
type: Pattern
name: Build Authorization & Guardrail Definition Gate
category: category:9
ships in: pack:pre-build-readiness
data contract type: write-only
pattern version: 1.0.0
data contract note: Medium confidence: authorises a build to proceed; maps to a decision record rather than a purpose-built guardrail field.
depends on: pattern:fundamental-rights-impact-pre-check
writes: decision.approval_ref

id: pattern:vendor-agent-discovery
type: Pattern
name: Vendor Agent Discovery
category: category:9
ships in: pack:vendor-and-embedded-agent-governance
data contract type: write-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
feeds: pattern:vendor-agent-classification
writes: vendor.ai_capabilities_ref

id: pattern:vendor-agent-classification
type: Pattern
name: Vendor Agent Classification
category: category:9
ships in: pack:vendor-and-embedded-agent-governance
data contract type: write-only
pattern version: 1.0.0
writes: agent.tier
related to: pattern:vendor-agent-discovery

id: pattern:vendor-ai-terms-data-handling-review-gate
type: Pattern
name: Vendor AI Terms & Data-Handling Review Gate
category: category:9
ships in: pack:vendor-and-embedded-agent-governance
data contract type: read-only
pattern version: 1.0.0
reads: agent.tier
depends on: pattern:vendor-agent-classification

id: pattern:vendor-feature-change-monitoring
type: Pattern
name: Vendor Feature-Change Monitoring
category: category:9
ships in: pack:vendor-and-embedded-agent-governance
data contract type: read-write
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
depends on: pattern:vendor-ai-terms-data-handling-review-gate
feeds: pattern:vendor-agent-discovery
reads: vendor.ai_capabilities_ref
writes: vendor.ai_capabilities_ref

id: pattern:agent-identity-ownership-sponsor-assignment
type: Pattern
name: Agent Identity Ownership & Sponsor Assignment
category: category:10
ships in: pack:agent-identity-and-credential-governance
data contract type: write-only
pattern version: 1.0.0
writes: agent.sponsor
distinct from: pattern:agent-registry-decision-tier-metadata-revocation

id: pattern:orphaned-agent-credential-detection-decommissioning
type: Pattern
name: Orphaned Agent Credential Detection & Decommissioning
category: category:10
ships in: pack:agent-identity-and-credential-governance
data contract type: read-only
pattern version: 1.0.0
reads: agent.sponsor
depends on: pattern:agent-identity-ownership-sponsor-assignment

id: pattern:standing-access-review-cadence
type: Pattern
name: Standing Access Review Cadence
category: category:10
ships in: pack:agent-identity-and-credential-governance
data contract type: read-write
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
reads: credential.last_reviewed_at
reads: credential.owner
writes: credential.last_reviewed_at

id: pattern:static-credential-long-lived-key-elimination-requirement
type: Pattern
name: Static Credential / Long-Lived Key Elimination Requirement
category: category:10
ships in: pack:agent-identity-and-credential-governance
data contract type: read-write
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
reads: credential.rotation_last_at
writes: credential.status

id: pattern:runtime-permission-escalation-boundary
type: Pattern
name: Runtime Permission Escalation Boundary
category: category:10
ships in: pack:agent-identity-and-credential-governance
data contract type: read-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
distinct from: pattern:agent-pairing-interaction-approval
reads: agent.tool_scope_ref

id: pattern:identity-ownership-single-source-of-truth-requirement
type: Pattern
name: Identity Ownership Single-Source-of-Truth Requirement
category: category:10
ships in: pack:agent-identity-and-credential-governance
data contract type: write-only
pattern version: 1.0.0
writes: agent.owner
feeds: pattern:agent-identity-ownership-sponsor-assignment
feeds: pattern:standing-access-review-cadence
feeds: pattern:runtime-permission-escalation-boundary

id: pattern:fleet-budget-ceiling-circuit-breaker
type: Pattern
name: Fleet Budget Ceiling and Circuit Breaker
category: category:11
ships in: pack:agent-cost-and-budget-governance
data contract type: read-write
pattern version: 1.0.0
reads: agent.cost_baseline
writes: agent.cost_ceiling
feeds: pattern:high-cost-action-pre-approval-gate
feeds: pattern:cost-forecast-reconciliation-cadence
distinct from: pattern:token-cost-consumption-observability-baseline

id: pattern:high-cost-action-pre-approval-gate
type: Pattern
name: High-Cost Action Pre-Approval Gate
category: category:11
ships in: pack:agent-cost-and-budget-governance
data contract type: read-only
pattern version: 1.0.0
reads: agent.cost_ceiling
distinct from: pattern:fleet-budget-ceiling-circuit-breaker

id: pattern:cost-ownership-and-attribution
type: Pattern
name: Cost Ownership and Attribution
category: category:11
ships in: pack:agent-cost-and-budget-governance
data contract type: read-only
pattern version: 1.0.0
reads: agent.owner

id: pattern:cost-forecast-reconciliation-cadence
type: Pattern
name: Cost Forecast Reconciliation Cadence
category: category:11
ships in: pack:agent-cost-and-budget-governance
data contract type: read-only
pattern version: 1.0.0
reads: agent.cost_ceiling
distinct from: pattern:fleet-budget-ceiling-circuit-breaker

id: pattern:agent-inventory-reconciliation-cadence
type: Pattern
name: Agent Inventory Reconciliation Cadence
category: category:12
ships in: pack:agent-sprawl-and-shadow-ai-discovery
data contract type: organisational-process
pattern version: 1.0.0
reads: agent.registry_id
related to: pattern:shadow-unauthorized-agent-discovery
data contract note: Assesses whether a process or practice meets a bar across the board, not a single field's value.

id: pattern:no-code-citizen-developer-agent-registration-gate
type: Pattern
name: No-Code / Citizen-Developer Agent Registration Gate
category: category:12
ships in: pack:agent-sprawl-and-shadow-ai-discovery
data contract type: write-only
pattern version: 1.0.0
writes: agent.registry_id
writes: agent.status
feeds: pattern:agent-registry-decision-tier-metadata-revocation
data contract note: Medium confidence: registration event fits agent creation fields; the no-code/citizen-developer distinction itself isn't captured.

id: pattern:duplicate-redundant-agent-consolidation-review
type: Pattern
name: Duplicate / Redundant Agent Consolidation Review
category: category:12
ships in: pack:agent-sprawl-and-shadow-ai-discovery
data contract type: organisational-process
pattern version: 1.0.0
data contract note: Assesses whether a process or practice meets a bar across the board, not a single field's value.

id: pattern:decommissioned-agent-residual-footprint-cleanup
type: Pattern
name: Decommissioned Agent Residual Footprint Cleanup
category: category:12
ships in: pack:agent-sprawl-and-shadow-ai-discovery
data contract type: read-write
pattern version: 1.0.0
reads: agent.status
related to: pattern:duplicate-redundant-agent-consolidation-review
writes: agent.status
writes: credential.status
data contract note: Medium confidence: narrative doesn't confirm which downstream systems are actually updated.

id: pattern:untrusted-content-trust-boundary-declaration
type: Pattern
name: Untrusted-Content Trust Boundary Declaration
category: category:13
ships in: pack:prompt-injection-and-untrusted-input-governance
data contract type: write-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
writes: agent.content_source_classification_ref

id: pattern:tool-capability-scope-minimization
type: Pattern
name: Tool / Capability Scope Minimization
category: category:13
ships in: pack:prompt-injection-and-untrusted-input-governance
data contract type: write-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
depends on: pattern:untrusted-content-trust-boundary-declaration
writes: agent.tool_scope_ref

id: pattern:high-impact-action-confirmation-gate-untrusted-derived-instructions
type: Pattern
name: High-Impact Action Confirmation Gate for Untrusted-Derived Instructions
category: category:13
ships in: pack:prompt-injection-and-untrusted-input-governance
data contract type: write-only
pattern version: 1.0.0
data contract note: Confirmation-before-execution maps to a decision record; the specific 'high-impact action type' has no dedicated field.
depends on: pattern:untrusted-content-trust-boundary-declaration
writes: decision.outcome
writes: decision.approval_ref

id: pattern:tool-call-decision-provenance-logging
type: Pattern
name: Tool-Call Decision Provenance Logging
category: category:13
ships in: pack:prompt-injection-and-untrusted-input-governance
data contract type: write-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
depends on: pattern:untrusted-content-trust-boundary-declaration
writes: decision.evidence_ref
writes: decision.input_snapshot_ref

id: pattern:baseline-prompt-behavior-deviation-monitoring
type: Pattern
name: Baseline Prompt & Behavior Deviation Monitoring
category: category:13
ships in: pack:prompt-injection-and-untrusted-input-governance
data contract type: read-write
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
reads: agent.behavioral_baseline_ref
writes: agent.last_healthy_signal_at

id: pattern:agent-authored-commit-test-coverage-gate
type: Pattern
name: Agent-Authored Commit Test Coverage Gate
category: category:14
ships in: pack:ai-coding-agent-ci-cd-governance
data contract type: read-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
reads: change.test_coverage_pct

id: pattern:human-sign-off-gate-at-merge
type: Pattern
name: Human Sign-Off Gate at Merge
category: category:14
ships in: pack:ai-coding-agent-ci-cd-governance
data contract type: read-write
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
depends on: pattern:agent-authored-commit-test-coverage-gate
reads: change.risk_tier
writes: change.approved_at
writes: change.approved_by

id: pattern:dependency-package-provenance-verification-gate
type: Pattern
name: Dependency & Package Provenance Verification Gate
category: category:14
ships in: pack:ai-coding-agent-ci-cd-governance
data contract type: read-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
depends on: pattern:human-sign-off-gate-at-merge
depends on: pattern:agent-authored-commit-test-coverage-gate
reads: change.dependency_provenance_status

id: pattern:pipeline-execution-credential-scoping-gate
type: Pattern
name: Pipeline Execution Credential Scoping Gate
category: category:14
ships in: pack:ai-coding-agent-ci-cd-governance
data contract type: write-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
depends on: pattern:dependency-package-provenance-verification-gate
writes: credential.scope_ttl

id: pattern:security-testing-gate-for-agent-authored-code
type: Pattern
name: Security Testing Gate for Agent-Authored Code
category: category:14
ships in: pack:ai-coding-agent-ci-cd-governance
data contract type: read-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
reads: change.security_test_result

id: pattern:autonomous-promotion-authorization-tier
type: Pattern
name: Autonomous Promotion Authorization Tier
category: category:14
ships in: pack:ai-coding-agent-ci-cd-governance
data contract type: read-write
pattern version: 1.0.0
data contract note: The tiered promotion-authority definition itself has no field; only the resulting sign-off is captured.
depends on: pattern:security-testing-gate-for-agent-authored-code
reads: agent.tier
reads: change.risk_tier
writes: decision.approval_ref

id: pattern:agent-initiated-rollback-remediation-boundary
type: Pattern
name: Agent-Initiated Rollback & Remediation Boundary
category: category:14
ships in: pack:ai-coding-agent-ci-cd-governance
data contract type: read-only
pattern version: 1.0.0
data contract note: Insufficient evidence in the pattern's own narrative to assign specific registry fields with confidence; treated as an evidence-evaluation pattern pending further specification, not assumed to touch the Agent record.
reads: deployment.rollback_plan_ref
reads: change.autonomous_remediation_scope

id: rel:dependsOn
type: RelationshipType
name: dependsOn
description: The source pattern requires the target pattern's outcome to already exist or have occurred before the source pattern can be meaningfully evaluated.
domain: Pattern
range: Pattern
directional: true
symmetric: false
transitive: true
inverse: rel:feeds
deprecated: false

id: rel:feeds
type: RelationshipType
name: feeds
description: The source pattern's outcome is a direct input to the target pattern. Formal inverse of dependsOn: if B dependsOn A, then A feeds B.
domain: Pattern
range: Pattern
directional: true
symmetric: false
transitive: true
inverse: rel:dependsOn
deprecated: false

id: rel:upstreamOf
type: RelationshipType
name: upstreamOf
description: Deprecated alias of feeds. Source data showed upstreamOf used to express the same fact as feeds (general sequential precedence) with no consistent semantic distinction between the two; consolidated in this revision. Retained only so URLs/consumers built against the prior release do not break.
domain: Pattern
range: Pattern
directional: true
symmetric: false
transitive: true
inverse: rel:dependsOn
deprecated: true
superseded by: rel:feeds

id: rel:encompasses
type: RelationshipType
name: encompasses
description: The source pattern is a checklist-style or aggregate pattern that contains the target pattern as one of its constituent parts.
domain: Pattern
range: Pattern
directional: true
symmetric: false
transitive: false
deprecated: false
inverse note: Conceptually the inverse of encompasses is 'is part of'; not separately populated as its own edge in this release.

id: rel:distinctFrom
type: RelationshipType
name: distinctFrom
description: The two patterns are commonly confused with each other and address a genuinely different governance question; recorded to prevent misapplication.
domain: Pattern
range: Pattern
directional: true
symmetric: true
transitive: false
inverse: rel:distinctFrom
deprecated: false
storage note: Stored once per pair; consumers should treat it as bidirectional given symmetric=true, rather than expecting both directions to be physically present.

id: rel:relatedTo
type: RelationshipType
name: relatedTo
description: A weaker, mutual association between two patterns that does not amount to a dependency, containment, or a commonly-confused pair, for example two patterns that are frequently reviewed together.
domain: Pattern
range: Pattern
directional: true
symmetric: true
transitive: false
inverse: rel:relatedTo
deprecated: false
editorial note: Not one of the five relationship types requested; retained because roughly a tenth of the source graph's edges are genuine mutual associations that do not fit dependsOn, feeds, encompasses, or distinctFrom without distorting their meaning. Flagged for confirmation, see ambiguity list.

id: vocab:agentStatus
type: ControlledVocabulary
name: Agent status
values: intake
values: active
values: suspended
values: deprecated
values: retired

id: vocab:packStatus
type: ControlledVocabulary
name: Pack status
values: published
values: planned
values: withdrawn

id: vocab:dataContractType
type: ControlledVocabulary
name: Pattern data contract type
values: read-write
values: read-only
values: write-only
values: evidence-evaluation
values: organisational-process

id: vocab:decisionActorType
type: ControlledVocabulary
name: Decision actor type
values: human
values: agent
values: system

id: vocab:deploymentStatus
type: ControlledVocabulary
name: Deployment status
values: proposed
values: pilot
values: production
values: rolled_back
values: decommissioned

id: vocab:credentialStatus
type: ControlledVocabulary
name: Credential status
values: active
values: rotated
values: orphaned
values: revoked

id: vocab:incidentSeverity
type: ControlledVocabulary
name: Incident severity
values: low
values: medium
values: high
values: critical

id: vocab:changeRiskTier
type: ControlledVocabulary
name: Change risk tier
values: low
values: medium
values: high

id: schema:Agent
type: Class
name: Agent
description: One record per governed AI agent in a buyer's own environment. The record every pattern in this library reads from or writes to when it operates at agent scope.
has field:
  name: id
  description: Stable identifier for the agent.
  data type: string
  required: true
has field:
  name: name
  description: Human-readable name of the agent.
  data type: string
  required: true
has field:
  name: owner
  description: Named individual accountable for this agent.
  data type: string
  required: true
has field:
  name: sponsor
  description: Business sponsor who signed off on this agent.
  data type: string
  required: false
has field:
  name: tier
  description: Governance tier assigned to this agent.
  data type: string
  required: true
has field:
  name: status
  description: Current lifecycle status.
  data type: string
  required: true
  allowed values: agentStatus
has field:
  name: registry_id
  description: Entry identifier in the governance-grade agent registry.
  data type: string
  required: false
has field:
  name: oversight_tier
  description: Current autonomy/oversight level.
  data type: string
  required: false
has field:
  name: escalation_state
  description: Current escalation status.
  data type: string
  required: false
has field:
  name: override_count
  description: Count of recorded human overrides or corrections.
  data type: integer
  required: false
has field:
  name: cost_baseline
  description: This agent's own historical token/cost consumption baseline.
  data type: number
  required: false
has field:
  name: cost_ceiling
  description: Enforced spend ceiling for this agent.
  data type: number
  required: false
has field:
  name: model_version
  description: Currently approved underlying model or prompt version.
  data type: string
  required: false
has field:
  name: decision_latency
  description: Behavioural baseline for time from trigger to action.
  data type: number
  required: false
has field:
  name: data_access_scope_ref
  data type: string
  description: Reference to the definition of which data categories this agent may access.
  required: false
has field:
  name: entitlements_ref
  data type: string
  description: Reference to the agent's granted entitlements or permissions record.
  required: false
has field:
  name: tool_scope_ref
  data type: string
  description: Reference to the definition of which tools/actions this agent may invoke.
  required: false
has field:
  name: content_source_classification_ref
  data type: string
  description: Reference to the trust classification of content sources this agent consumes.
  required: false
has field:
  name: behavioral_baseline_ref
  data type: string
  description: Reference to the recorded baseline behaviour this agent is monitored against for drift.
  required: false
has field:
  name: drift_definition_ref
  data type: string
  description: Reference to the definition of what counts as drift for this agent.
  required: false
has field:
  name: observability_status
  data type: string
  description: Whether this agent currently has adequate monitoring/observability coverage.
  required: false
has field:
  name: last_healthy_signal_at
  data type: datetime
  description: Timestamp of the last confirmed healthy observability signal from this agent.
  required: false
has field:
  name: last_attestation_at
  data type: datetime
  description: Timestamp this agent's compliance attestation was last completed.
  required: false

id: schema:Decision
type: Class
name: Decision
description: One record per pattern evaluation against a governed subject: what was decided, on what evidence, and when, sufficient to reconstruct and audit the decision later.
has field:
  name: id
  description: Stable identifier for this decision record.
  data type: string
  required: true
has field:
  name: pattern_id
  description: Which pattern produced this decision.
  data type: string
  required: true
  references class: schema:PatternRef
has field:
  name: pattern_version
  description: Version of the pattern's decision logic used.
  data type: string
  required: true
has field:
  name: agent_id
  description: Which agent this decision concerns, where applicable.
  data type: string
  required: false
  references class: schema:Agent
  cardinality: 0..1
has field:
  name: outcome
  description: The pattern's decision-table result for this evaluation.
  data type: string
  required: true
has field:
  name: reason
  description: Short human-readable rationale for the outcome.
  data type: string
  required: false
has field:
  name: evidence_ref
  description: Pointer to the evidence the decision was based on, for later audit.
  data type: string
  required: false
has field:
  name: input_snapshot_ref
  description: Pointer to a snapshot of the inputs evaluated, for reproducibility.
  data type: string
  required: false
has field:
  name: policy_version
  description: Version of the governing policy in force at decision time.
  data type: string
  required: false
has field:
  name: decided_at
  description: Timestamp of this decision.
  data type: datetime
  required: true
has field:
  name: decided_by
  description: Actor that made or triggered this decision.
  data type: string
  required: true
  allowed values: decisionActorType
has field:
  name: valid_from
  description: When this decision took effect.
  data type: datetime
  required: false
has field:
  name: valid_until
  description: When this decision's validity ends, if bounded.
  data type: datetime
  required: false
has field:
  name: previous_decision_id
  description: The decision this one supersedes, if any.
  data type: string
  required: false
  references class: schema:Decision
  cardinality: 0..1
has field:
  name: superseded_by
  description: The decision that later superseded this one, if any.
  data type: string
  required: false
  references class: schema:Decision
  cardinality: 0..1
has field:
  name: approval_ref
  description: Pointer to a human approval record, where the outcome required sign-off.
  data type: string
  required: false

id: schema:Deployment
type: Class
name: Deployment
description: One record per environment an agent has been deployed into (pilot, production, and so on).
has field:
  name: id
  description: Stable identifier for this deployment.
  data type: string
  required: true
has field:
  name: agent_id
  description: Agent being deployed.
  data type: string
  required: true
  references class: schema:Agent
has field:
  name: status
  description: Current deployment status.
  data type: string
  required: true
  allowed values: deploymentStatus
has field:
  name: environment
  description: Environment name, e.g. pilot, staging, production.
  data type: string
  required: true
has field:
  name: go_live_at
  description: When this deployment went or is due to go live.
  data type: datetime
  required: false
has field:
  name: rollback_plan_ref
  data type: string
  description: Reference to this deployment's documented rollback plan.
  required: false
has field:
  name: acceptance_criteria_ref
  data type: string
  description: Reference to the acceptance criteria this deployment must satisfy before go-live.
  required: false

id: schema:InfrastructureComponent
type: Class
name: InfrastructureComponent
description: An infrastructure or hosting decision an agent's deployment depends on.
has field:
  name: id
  description: Stable identifier for this component.
  data type: string
  required: true
has field:
  name: ownership_model
  description: Whether this infrastructure is owned, rented, or shared.
  data type: string
  required: true
has field:
  name: hosting_jurisdiction
  description: Jurisdiction the component is hosted in, where sovereignty matters.
  data type: string
  required: false
has field:
  name: model_routing_provider
  description: Provider the component routes model calls through, where applicable.
  data type: string
  required: false

id: schema:Credential
type: Class
name: Credential
description: An identity credential an agent holds or has held.
has field:
  name: id
  description: Stable identifier for this credential.
  data type: string
  required: true
has field:
  name: agent_id
  description: Agent this credential belongs to.
  data type: string
  required: true
  references class: schema:Agent
has field:
  name: status
  description: Current credential status.
  data type: string
  required: true
  allowed values: credentialStatus
has field:
  name: owner
  description: Named individual accountable for this credential.
  data type: string
  required: true
has field:
  name: last_reviewed_at
  description: When standing access was last reviewed.
  data type: datetime
  required: false
has field:
  name: rotation_last_at
  data type: datetime
  description: Timestamp this credential was last rotated.
  required: false
has field:
  name: scope_ttl
  data type: string
  description: Time-to-live configured for this credential's granted scope.
  required: false

id: schema:Vendor
type: Class
name: Vendor
description: A third-party vendor whose tool has introduced an AI or agentic capability into the buyer's environment.
has field:
  name: id
  description: Stable identifier for this vendor.
  data type: string
  required: true
has field:
  name: name
  description: Vendor name.
  data type: string
  required: true
has field:
  name: capability_tier
  description: Governance tier assigned to the vendor-introduced capability.
  data type: string
  required: false
has field:
  name: terms_reviewed_at
  description: When the vendor's AI terms and data-handling were last reviewed.
  data type: datetime
  required: false
has field:
  name: ai_capabilities_ref
  data type: string
  description: Reference to the documented AI/agentic capabilities disclosed by this vendor.
  required: false

id: schema:DataAsset
type: Class
name: DataAsset
description: A data entity or definition an agent reads, writes, or reasons over.
has field:
  name: id
  description: Stable identifier for this data asset.
  data type: string
  required: true
has field:
  name: name
  description: Name of the data entity or field.
  data type: string
  required: true
has field:
  name: owning_domain
  description: The domain or team responsible for this asset's definition.
  data type: string
  required: false
has field:
  name: definition_version
  description: Version of the shared definition currently in force.
  data type: string
  required: false
has field:
  name: lineage_ref
  data type: string
  description: Reference to this data asset's recorded lineage/provenance chain.
  required: false
has field:
  name: quality_score
  data type: number
  description: Most recent computed data quality score for this asset.
  required: false
has field:
  name: last_quality_check_at
  data type: datetime
  description: Timestamp of the last data quality check run against this asset.
  required: false
has field:
  name: sensitivity_classification
  data type: string
  description: Sensitivity/classification level assigned to this data asset (e.g. public, internal, restricted).
  required: false

id: schema:Incident
type: Class
name: Incident
description: A recorded agent-related incident.
has field:
  name: id
  description: Stable identifier for this incident.
  data type: string
  required: true
has field:
  name: agent_id
  description: Agent involved, where applicable.
  data type: string
  required: false
  references class: schema:Agent
  cardinality: 0..1
has field:
  name: severity
  description: Recorded severity.
  data type: string
  required: true
  allowed values: incidentSeverity
has field:
  name: opened_at
  description: When the incident was opened.
  data type: datetime
  required: true
has field:
  name: closed_at
  description: When the incident was closed, if resolved.
  data type: datetime
  required: false
has field:
  name: root_cause
  data type: string
  description: Recorded root cause of this incident.
  required: false
has field:
  name: corrective_action_owner
  data type: string
  description: Owner assigned to this incident's corrective action.
  required: false

id: schema:Change
type: Class
name: Change
description: A recorded change to an agent or to something it relies on.
has field:
  name: id
  description: Stable identifier for this change.
  data type: string
  required: true
has field:
  name: agent_id
  description: Agent affected by this change.
  data type: string
  required: true
  references class: schema:Agent
has field:
  name: risk_tier
  description: Assessed risk tier of this change.
  data type: string
  required: true
  allowed values: changeRiskTier
has field:
  name: requested_at
  description: When the change was requested.
  data type: datetime
  required: false
has field:
  name: approved_at
  description: When the change was approved, if approved.
  data type: datetime
  required: false
has field:
  name: validation_result
  data type: string
  description: Outcome of automated or manual validation run against this change.
  required: false
has field:
  name: validated_at
  data type: datetime
  description: Timestamp this change was validated.
  required: false
has field:
  name: test_coverage_pct
  data type: number
  description: Test coverage percentage recorded for this change.
  required: false
has field:
  name: dependency_provenance_status
  data type: string
  description: Verification status of this change's declared dependency provenance.
  required: false
has field:
  name: security_test_result
  data type: string
  description: Outcome of security testing run against this change.
  required: false
has field:
  name: autonomous_remediation_scope
  data type: string
  description: Scope of remediation an agent is authorised to apply autonomously for this change.
  required: false
has field:
  name: approved_by
  data type: string
  description: Named individual who approved this change.
  required: false

id: schema:Delegation
type: Class
name: Delegation
description: A recorded instance of one agent delegating work to another.
has field:
  name: id
  description: Stable identifier for this delegation.
  data type: string
  required: true
has field:
  name: from_agent_id
  description: Delegating agent.
  data type: string
  required: true
  references class: schema:Agent
has field:
  name: to_agent_id
  description: Receiving agent.
  data type: string
  required: true
  references class: schema:Agent
has field:
  name: depth
  description: Position of this hop in a delegation chain, where chains are tracked.
  data type: integer
  required: false
has field:
  name: approved
  description: Whether this specific pairing has been reviewed and approved as a unit.
  data type: boolean
  required: false