Vocabulary
Core
https://uofa.net/vocab#
190 terms. This is the namespace UofA packages
expand their property names into. Every term below is addressable as
https://uofa.net/vocab#<Term>.
Terms
acceptanceCriteria
AcceptanceCriteria
accountIdentity
achievedLevel
actionClass
actionParameters
activityType
actor
addresses
affectedNode
affirmedAt
agreementMakesNonDispositive
analyzesConfiguration
anchorLocator
anchorSha256
ApplicabilityConstraint
assessmentPhase
assessmentStatus
AssuranceClaim
assuranceLevel
attestationAuthority
attestedAt
attestedBy
authenticatedAt
AuthorizationAttestation
authorizationCheckedAt
authorizationSignature
authorizedAction
authorizedActor
AutomatedAssessment
bindingSignature
bindsClaim
bindsDataset
bindsModel
bindsRequirement
boundActor
boundKey
canonicalizationAlg
commit
Comparator
comparedAgainst
confidenceLevel
conformsToProfile
consideredAlternative
ContextOfUse
contextVersion
couName
CredibilityFactor
credibilityIndex
criteriaSet
currentModelVersion
Dataset
dataVintage
decidedAt
decision
decisionAnchor
decisionProvenance
decisionRecord
DecisionRecord
decisionScope
DecisionSignature
decisionSignedAt
deployedIn
deploymentContext
deploymentDate
deploymentId
deploymentOutcome
DeploymentRecord
deviceClass
Discrepancy
discrepancyMagnitude
discrepancyRegion
Disposition
dispositionOf
documentReference
effectiveFrom
effectiveUntil
environment
evidenceTimestamp
exercised
factorConstraintWarrants
factorStandard
factorStatus
factorType
frameworkTransfers
grantedBy
grantId
grantVersion
hasApplicabilityConstraint
hasAssessmentResult
hasAuthorizationAttestation
hasContextOfUse
hasCredibilityFactor
hasDecisionRecord
hasDecisionSignature
hasDiscrepancy
hasDisposition
hasEvidence
hasFactorOffset
hash
hasIdentityBinding
hasJustification
hasLevelAffirmation
hasOffsetRationale
hasOperatingEnvelope
hasParameter
hasSensitivityAnalysis
hasUncertaintyQuantification
hasValidationResult
hasVerificationActivity
hasWeakener
IdentityBindingAttestation
identityProviderIssuer
identityProviderSubject
InputPedigreeLink
intendedUse
isFoundationalEvidence
issuedAt
justification
knownLimitation
LevelAffirmation
measurementHash
measureType
Model
ModelConfiguration
modelRevisionDate
modelRiskLevel
modelVersion
OffsetRationale
offsettingEvidence
OperatingEnvelope
outcome
patternId
pedigreeLevel
possessionProvenAt
ProcessAttestation
processType
ProfileComplete
ProfileDisposition
ProfileMinimal
project
proofPurpose
rationale
recommendedAction
referencesIdentifier
refersToFactor
requiredLevel
requiredLevelProvenance
requiredVerificationMethod
Requirement
residualRiskJustification
ReviewActivity
reviewDate
reviewer
reviewFindings
reviewScope
reviewType
role
schemaVersion
SensitivityAnalysis
severity
signature
signatureAlg
signatureAlgorithm
signatureRole
signatureTimestamp
signatureValue
signedAt
signerIdentity
solverTruth
source
SourceAnchor
sourceReference
supports
surrogatePrediction
sustainedDefeaterJustified
thresholdDistanceModulates
tool
toolVersion
traceCompleteness
transformationDescription
uncertaintyCIWidth
UnitOfAssurance
validationCoverage
ValidationResult
validForModelVersion
VerificationActivity
verificationCoverage
version
WeakenerAnnotation
acceptance criteria
acceptanceCriteria
https://uofa.net/vocab#acceptanceCriteria
The bar a factor or claim had to clear, stated before the evidence was weighed against it. Distinct from the AcceptanceCriteria class, which is a standalone node naming the whole rubric.
value AcceptanceCriteria
Acceptance Criteria
AcceptanceCriteria
https://uofa.net/vocab#AcceptanceCriteria
The rubric an assessment is graded against, whether a published standard or one an organization devised for itself. Recorded so a reader knows what bar was applied. Distinct from the acceptanceCriteria property, which states one bar inline on a single factor or claim.
account identity
accountIdentity
https://uofa.net/vocab#accountIdentity
The provider issuer and subject observed at a single authentication or enrollment. Recorded per event: linked providers need no authoritative one chosen.
achieved level
achievedLevel
https://uofa.net/vocab#achievedLevel
The rigor this factor actually reached once the evidence was in, read against the required level to show any shortfall.
on CredibilityFactor · value xsd:integer
- datatype
xsd:integer, max 1achievedLevel must be an integer 0–5 (0 = not set).
action class
actionClass
https://uofa.net/vocab#actionClass
Which kind of action a disposition records, drawn from a fixed set so dispositions can be compared across records.
on Disposition · value xsd:string
- datatype
xsd:string, min 1, max 1, one ofrestrict-cou, acquire-validation, characterize-region, accept-residual-risk, change-couA Disposition must declare exactly one actionClass from the controlled vocabulary (restrict-cou, acquire-validation, characterize-region, accept-residual-risk, change-cou).
action parameters
actionParameters
https://uofa.net/vocab#actionParameters
Free text narrowing what a disposition applies to, where the action class alone is too coarse.
on Disposition · value xsd:string
- datatype
xsd:string, max 1actionParameters, when present, is a single free-text string scoping the action.
activity type
activityType
https://uofa.net/vocab#activityType
What kind of work an activity was, read against the verification method the requirement asked for.
actor
actor
https://uofa.net/vocab#actor
Who made the decision, identified rather than described, so the record names a responsible party.
- min 1, max 1A LevelAffirmation must name the agent that judged, as an IRI.
- min 1, max 1A decision record must name the actor whose judgment it is.
addresses
https://uofa.net/vocab#addresses
No definition, constraint, or schema description exists for this term in the repository.
affected node
affectedNode
https://uofa.net/vocab#affectedNode
The node a weakener was raised against, so a reader can go to the evidence rather than the summary.
- min 1affectedNode must be an IRI pointing to the flagged graph node.
affirmedAt
https://uofa.net/vocab#affirmedAt
- datatype
xsd:dateTime, min 1, max 1A LevelAffirmation must carry affirmedAt as an xsd:dateTime.
agreement makes non-dispositive
agreementMakesNonDispositive
https://uofa.net/vocab#agreementMakesNonDispositive
Declared in context v0.6 and not used by any package or shape.
analyzesConfiguration
https://uofa.net/vocab#analyzesConfiguration
No definition, constraint, or schema description exists for this term in the repository.
anchorLocator
https://uofa.net/vocab#anchorLocator
- min 1A source anchor must name where in the source the passage is.
anchorSha256
https://uofa.net/vocab#anchorSha256
- min 1A source anchor must pin the passage by sha256, so a later reader can tell transcription from invention.
Applicability Constraint
ApplicabilityConstraint
https://uofa.net/vocab#ApplicabilityConstraint
A stated limit on where a claim holds. With an operating envelope it is what gives a context of use a boundary.
assessment phase
assessmentPhase
https://uofa.net/vocab#assessmentPhase
Whether a factor was judged on the capability available or on the results actually obtained.
- max 1, one of
capability, results
assessmentStatus
https://uofa.net/vocab#assessmentStatus
No definition, constraint, or schema description exists for this term in the repository.
Assurance Claim
AssuranceClaim
https://uofa.net/vocab#AssuranceClaim
The proposition the evidence is offered in support of. Naming it separately is what lets a reviewer ask whether the evidence actually supports it.
assurance level
assuranceLevel
https://uofa.net/vocab#assuranceLevel
How much confidence the package as a whole claims, on a coarse scale a reader can compare across records.
- one of
Low, Medium, High
attestation authority
attestationAuthority
https://uofa.net/vocab#attestationAuthority
Fingerprint of the key that made this statement. Trust in that key is the verifier's to establish out of band; a key travelling inside the package proves only internal consistency.
- min 1, max 1A binding must name the key that made the statement, so a verifier knows whose claim it is weighing.
- min 1, max 1An authorization must name the key that made the statement.
attestedAt
https://uofa.net/vocab#attestedAt
No definition, constraint, or schema description exists for this term in the repository.
attested by
attestedBy
https://uofa.net/vocab#attestedBy
Who stands behind a process attestation.
- min 1
authenticated at
authenticatedAt
https://uofa.net/vocab#authenticatedAt
When the authentication this attestation relies on happened.
Authorization Attestation
AuthorizationAttestation
https://uofa.net/vocab#AuthorizationAttestation
A signed statement that a producer enforced a recorded policy and found an actor held a named permission when it accepted a signature. Not a judgment that the policy was adequate.
authorization checked at
authorizationCheckedAt
https://uofa.net/vocab#authorizationCheckedAt
When the producer rechecked the grant while accepting the signature.
- min 1, max 1An authorization must state when the producer rechecked the grant, which is the moment its claim is about.
authorization signature
authorizationSignature
https://uofa.net/vocab#authorizationSignature
The authority's signature over the authorization scope.
- min 1, max 1An unsigned authorization is not an attestation -- it is an unsourced assertion anyone could have written into the file.
authorized action
authorizedAction
https://uofa.net/vocab#authorizedAction
The action the permission covered.
- min 1, max 1An authorization must name the action the permission covered.
authorized actor
authorizedActor
https://uofa.net/vocab#authorizedActor
The actor the producer found authorized. Must be the same party the identity binding speaks about.
- min 1, max 1An authorization must name the actor it authorizes.
AutomatedAssessment
https://uofa.net/vocab#AutomatedAssessment
No definition, constraint, or schema description exists for this term in the repository.
binding signature
bindingSignature
https://uofa.net/vocab#bindingSignature
The authority's signature over the identity scope. A separate scope from the decision signature, so neither can stand in for the other.
- min 1, max 1An unsigned binding is not an attestation -- it is an unsourced assertion anyone could have written into the file.
binds claim
bindsClaim
https://uofa.net/vocab#bindsClaim
Links the package to the proposition its evidence is offered in support of.
on UnitOfAssurance · value AssuranceClaim
binds dataset
bindsDataset
https://uofa.net/vocab#bindsDataset
Links the package to data the model was run against or compared with.
- min 1
binds model
bindsModel
https://uofa.net/vocab#bindsModel
Links the package to the model whose credibility is being assessed.
- min 1
binds requirement
bindsRequirement
https://uofa.net/vocab#bindsRequirement
Links the package to the requirement its model is being trusted to help satisfy.
- min 1
- min 1Minimal: must bind at least one Requirement (IRI).
bound actor
boundActor
https://uofa.net/vocab#boundActor
The actor identifier this binding speaks about, matched to the decision record's actor by exact string.
- min 1, max 1A binding must name the actor it speaks about, spelled exactly as the decision record spells it. One that names nobody is a statement about nobody.
bound key
boundKey
https://uofa.net/vocab#boundKey
The signing-key fingerprint this binding speaks about, in the same form signerIdentity carries.
- min 1, max 1A binding must name the key it speaks about, in the same sha256-over-DER form signerIdentity carries.
canonicalization algorithm
canonicalizationAlg
https://uofa.net/vocab#canonicalizationAlg
Which canonical form the hash was computed over, without which the hash cannot be reproduced.
commit
commit
https://uofa.net/vocab#commit
The source revision the tooling was at, tying a run to exact code rather than a version number.
Comparator
Comparator
https://uofa.net/vocab#Comparator
The measurement or reference a model prediction was checked against.
compared against
comparedAgainst
https://uofa.net/vocab#comparedAgainst
Links a validation result to the comparator it was measured against. Its absence is what makes a stated comparison uncheckable.
on ValidationResult · value Comparator
confidence level
confidenceLevel
https://uofa.net/vocab#confidenceLevel
How much confidence is claimed in the finding this is attached to.
on Disposition
- max 1confidenceLevel, when present, is a single value (e.g. High/Medium/Low or a decimal).
conforms to profile
conformsToProfile
https://uofa.net/vocab#conformsToProfile
Which field set the package claims to meet, so validation knows what to require of it.
- min 1, one of
ProfileMinimal, ProfileComplete, ProfileDispositionconformsToProfile must be ProfileMinimal, ProfileComplete, or ProfileDisposition.
considered alternative
consideredAlternative
https://uofa.net/vocab#consideredAlternative
An alternative conclusion the assessment weighed and set aside. Reserved for a future weakener pattern and not yet expected in packages.
Context of Use
ContextOfUse
https://uofa.net/vocab#ContextOfUse
The specific use a model is being trusted for, and the decision that rides on it. Credibility is assessed against this rather than against the model in general.
context version
contextVersion
https://uofa.net/vocab#contextVersion
Which frozen context edition the signed payload was written against. Carried INSIDE the signed bytes so verification never fetches anything.
- min 1, max 1A binding must carry the context edition its terms are read against, inside the signed bytes, so verification never fetches anything.
- min 1, max 1An authorization must carry the context edition its terms are read against, inside the signed bytes.
context of use name
couName
https://uofa.net/vocab#couName
A short readable name for the context of use, used where a full node would be unwieldy.
on UnitOfAssurance · value xsd:string
- datatype
xsd:string, max 1Complete: couName is a human-readable COU label for diff output.
Credibility Factor
CredibilityFactor
https://uofa.net/vocab#CredibilityFactor
One dimension of credibility assessed for a context of use. Records the rigor required against the rigor achieved, and states plainly when a dimension was not assessed.
credibility index
credibilityIndex
https://uofa.net/vocab#credibilityIndex
A single summary figure for the package, useful for sorting records and no substitute for reading one.
- datatype
xsd:decimal or xsd:double
criteria set
criteriaSet
https://uofa.net/vocab#criteriaSet
The rubric this assessment was graded against, whether a published standard or one the organization set itself.
- Complete: reference criteria set used (e.g., VVUQ-90, NASA-7009).
current model version
currentModelVersion
https://uofa.net/vocab#currentModelVersion
The model version this assessment describes, so evidence gathered against an older build is visible as such.
Dataset
Dataset
https://uofa.net/vocab#Dataset
A body of data the model was run against or compared with.
data vintage
dataVintage
https://uofa.net/vocab#dataVintage
When the data was produced, so a reader can tell how current the evidence behind a claim is.
on Dataset · value xsd:dateTime
- datatype
xsd:dateTime, max 1dataVintage is the ISO-8601 timestamp of the dataset's vintage.
decided at
decidedAt
https://uofa.net/vocab#decidedAt
When the judgement was reached, which fixes what evidence could have informed it.
- datatype
xsd:dateTime, min 1, max 1A decision record must carry decidedAt as an xsd:dateTime.
decision
decision
https://uofa.net/vocab#decision
The package-level verdict, carried alongside the fuller decision record rather than replacing it.
- max 1, one of
Accepted, Not acceptedComplete: decision must be 'Accepted' or 'Not accepted'.
decisionProvenance
https://uofa.net/vocab#decisionProvenance
- min 1, one of
asserted - min 1, one of
extracted - min 1, max 1, one of
asserted, extracteddecisionProvenance must be 'asserted' (its actor participates in this package's production) or 'extracted' (its actor is the source's).
decision record
decisionRecord
https://uofa.net/vocab#decisionRecord
The decision this attestation covers, named exactly.
- min 1, max 1An authorization must name the decision it covers. One that covers 'a decision' covers none.
Decision Record
DecisionRecord
https://uofa.net/vocab#DecisionRecord
The judgement reached on a context of use, naming who reached it and why. A package states its decision here rather than leaving it to be inferred from the evidence.
decisionScope
https://uofa.net/vocab#decisionScope
- max 1, one of
acceptance-of-model, concurrence-with-prior-decision, approval-to-proceeddecisionScope must come from the closed set: acceptance-of-model, concurrence-with-prior-decision, approval-to-proceed.
DecisionSignature
https://uofa.net/vocab#DecisionSignature
No definition, constraint, or schema description exists for this term in the repository.
decision signed at
decisionSignedAt
https://uofa.net/vocab#decisionSignedAt
When the accepted decision signature was made.
- min 1, max 1An authorization must state when the signature it covers was accepted, or it cannot be placed inside the grant interval.
deploymentContext
https://uofa.net/vocab#deploymentContext
No definition, constraint, or schema description exists for this term in the repository.
deploymentDate
https://uofa.net/vocab#deploymentDate
No definition, constraint, or schema description exists for this term in the repository.
deployment id
deploymentId
https://uofa.net/vocab#deploymentId
Which deployment made the statement. One instance may answer to several hostnames, so this is configured, never read from the request.
- min 1, max 1A binding must name the deployment that made it. One instance may answer to several hostnames, so this is configured, never read from the request.
- min 1, max 1An authorization must name the deployment that made it.
deployment outcome
deploymentOutcome
https://uofa.net/vocab#deploymentOutcome
How a deployment turned out, recorded so a later assessment can learn from it.
- one of
successful, partial, unsuccessful
Deployment Record
DeploymentRecord
https://uofa.net/vocab#DeploymentRecord
A record of the model being put into use somewhere, and how that went.
device class
deviceClass
https://uofa.net/vocab#deviceClass
The regulatory risk class of the device the model supports, where the governing regime defines such classes. Carried by the context of use or by the package as a whole, so no single domain is declared.
- datatype
xsd:string, max 1Complete: deviceClass must be a single string, if present. - max 1, one of
Class I, Class II, Class III, N/AdeviceClass must be Class I, Class II, Class III (FDA classification), or N/A when the context of use is not a regulated device.
Discrepancy
Discrepancy
https://uofa.net/vocab#Discrepancy
A measured gap between what a surrogate predicted and the solver truth it was checked against. Recorded as a fact, so it carries no disposition and no action class.
discrepancy magnitude
discrepancyMagnitude
https://uofa.net/vocab#discrepancyMagnitude
How far the surrogate prediction sits from the solver truth it was checked against.
on Discrepancy · value xsd:double
- datatype
xsd:double, min 1, max 1A Discrepancy must carry exactly one discrepancyMagnitude (number); the harness emits |surrogatePrediction − solverTruth|.
discrepancy region
discrepancyRegion
https://uofa.net/vocab#discrepancyRegion
Where in the input space a discrepancy was observed, so a gap can be located rather than only noted.
on Discrepancy · value xsd:string
- datatype
xsd:string, max 1discrepancyRegion, when present, is a single free-text region label (derived from envelope containment).
Disposition
Disposition
https://uofa.net/vocab#Disposition
A typed action taken or proposed in response to a credibility assessment. Linked from a decision record alongside the free-text decision, never replacing it.
disposition of
dispositionOf
https://uofa.net/vocab#dispositionOf
Links a Disposition to the WeakenerAnnotation it answers. An annotation no Disposition points at is undispositioned, whatever it recommends.
on Disposition · value WeakenerAnnotation
- dispositionOf must be an IRI naming the WeakenerAnnotation the Disposition answers.
document reference
documentReference
https://uofa.net/vocab#documentReference
Points at the document a statement refers to, so the reference can be followed. The records that carry it are defined by packs rather than by core, so no domain is declared here.
- min 1ContinualImprovementRecord requires documentReference linking the improved AIMS element.
effective from
effectiveFrom
https://uofa.net/vocab#effectiveFrom
When the grant became effective.
- min 1, max 1An authorization must state when the grant became effective; a grant that existed is not a grant that was in force when the signature was accepted.
effective until
effectiveUntil
https://uofa.net/vocab#effectiveUntil
When the grant ended, where known. ABSENCE MEANS NO END WAS RECORDED, never that the grant is still in force -- current status is separate evidence.
environment
https://uofa.net/vocab#environment
No definition, constraint, or schema description exists for this term in the repository.
evidence timestamp
evidenceTimestamp
https://uofa.net/vocab#evidenceTimestamp
When an evidence artifact was produced, compared against the signing time to catch evidence dated after the record.
value xsd:dateTime
- datatype
xsd:dateTime, max 1evidenceTimestamp is when an evidence artifact was produced (for W-CON-03).
exercised
https://uofa.net/vocab#exercised
No definition, constraint, or schema description exists for this term in the repository.
factor constraint warrants
factorConstraintWarrants
https://uofa.net/vocab#factorConstraintWarrants
Declared in context v0.6 and not used by any package or shape.
factor standard
factorStandard
https://uofa.net/vocab#factorStandard
Names the standard whose factor taxonomy this assessment follows. Recording it as data is what lets one vocabulary serve several standards.
on CredibilityFactor · value xsd:string
- datatype
xsd:string, max 1
factor status
factorStatus
https://uofa.net/vocab#factorStatus
Whether this factor was assessed, and if not, why not. A factor left silent and a factor deliberately scoped out are different claims.
- min 1, max 1, one of
assessed, not-assessed, scoped-out, not-applicableEvery credibility factor must declare its assessment status.
factor type
factorType
https://uofa.net/vocab#factorType
Which credibility dimension this factor covers, named from the taxonomy the assessment follows.
on CredibilityFactor · value xsd:string
- datatype
xsd:string, min 1, max 1CredibilityFactor must have a factorType string.
framework transfers
frameworkTransfers
https://uofa.net/vocab#frameworkTransfers
Declared in context v0.6 and not used by any package or shape.
grant id
grantId
https://uofa.net/vocab#grantId
Immutable identifier of the grant the producer checked.
- min 1, max 1An authorization must cite the grant it relied on, not merely assert that one existed.
grant version
grantVersion
https://uofa.net/vocab#grantVersion
Version of the grant at the moment the signature was accepted, not at the moment it was prepared.
has applicability constraint
hasApplicabilityConstraint
https://uofa.net/vocab#hasApplicabilityConstraint
Links a context of use to a stated limit on where its claim holds.
hasAssessmentResult
https://uofa.net/vocab#hasAssessmentResult
No definition, constraint, or schema description exists for this term in the repository.
has authorization attestation
hasAuthorizationAttestation
https://uofa.net/vocab#hasAuthorizationAttestation
An action-region block, as hasIdentityBinding is.
on UnitOfAssurance · value AuthorizationAttestation
- max 1An authorization block must be a well-formed authorization attestation.
has context of use
hasContextOfUse
https://uofa.net/vocab#hasContextOfUse
Links the package to the single context of use it covers.
on UnitOfAssurance · value ContextOfUse
- min 1Complete: must declare a Context of Use (V&V 40 COU).
- min 1V&V 40: must declare a Context of Use (COU) — the specific question the model is being used to inform.
has credibility factor
hasCredibilityFactor
https://uofa.net/vocab#hasCredibilityFactor
Links the package to one dimension of its credibility assessment.
on UnitOfAssurance · value CredibilityFactor
- min 1Complete: must include at least one CredibilityFactor (V&V 40 Table 5-1).
has decision record
hasDecisionRecord
https://uofa.net/vocab#hasDecisionRecord
Links the package to the judgement reached on it.
on UnitOfAssurance · value DecisionRecord
- min 1
- min 1Minimal: must include at least one DecisionRecord (IRI).
has discrepancy
hasDiscrepancy
https://uofa.net/vocab#hasDiscrepancy
Links a record to a measured gap between a surrogate prediction and the solver truth.
has disposition
hasDisposition
https://uofa.net/vocab#hasDisposition
Links a decision record to a typed action taken in response to it.
- min 1Disposition: must declare at least one hasDisposition (DecisionRecord → Disposition).
has evidence
hasEvidence
https://uofa.net/vocab#hasEvidence
Links a record to a supporting artifact held outside the package.
has factor offset
hasFactorOffset
https://uofa.net/vocab#hasFactorOffset
Links a decision to a factor shortfall it accepted, so the acceptance is visible rather than implicit.
hash
hash
https://uofa.net/vocab#hash
A digest over the canonical form of the package, letting a reader detect any change since it was signed.
- min 1, pattern
^(sha256|sha384|sha512):[a-f0-9]{64,128}$Complete: hash must be algorithm:hexdigest format (e.g., sha256:<64 hex chars>). - min 1, pattern
^(sha256|sha384|sha512):[a-f0-9]{64,128}$Minimal: must include a content hash in algorithm:hexdigest format (e.g., sha256:<64 hex chars>).
has identity binding
hasIdentityBinding
https://uofa.net/vocab#hasIdentityBinding
An action-region block: outside the issuer seal, so one arriving after sealing does not break it.
on UnitOfAssurance · value IdentityBindingAttestation
- max 1An identity binding block must be a well-formed identity binding attestation.
hasJustification
https://uofa.net/vocab#hasJustification
No definition, constraint, or schema description exists for this term in the repository.
has offset rationale
hasOffsetRationale
https://uofa.net/vocab#hasOffsetRationale
Links a decision record to a stated reason for accepting a factor that fell short.
on DecisionRecord · value OffsetRationale
- hasOffsetRationale must reference an OffsetRationale node (for W-AR-02 predicate).
has operating envelope
hasOperatingEnvelope
https://uofa.net/vocab#hasOperatingEnvelope
Links a context of use to the input range the model is claimed to hold over. Without it the claim has no stated boundary.
on ContextOfUse
hasParameter
https://uofa.net/vocab#hasParameter
No definition, constraint, or schema description exists for this term in the repository.
has sensitivity analysis
hasSensitivityAnalysis
https://uofa.net/vocab#hasSensitivityAnalysis
Whether the package documents a sensitivity analysis. The flag records presence, not quality.
on UnitOfAssurance · value xsd:boolean
- datatype
xsd:boolean, max 1hasSensitivityAnalysis is a boolean indicating whether a documented sensitivity analysis is part of the assurance package (mirrors hasUncertaintyQuantification). For W-AL-02.
has uncertainty quantification
hasUncertaintyQuantification
https://uofa.net/vocab#hasUncertaintyQuantification
Whether an uncertainty quantification is documented. Carried by the package or by a single validation result, so no single domain is declared. The flag records presence, not quality.
value xsd:boolean
- datatype
xsd:boolean, max 1Complete: hasUncertaintyQuantification must be a boolean.
has validation result
hasValidationResult
https://uofa.net/vocab#hasValidationResult
Links the package to a comparison offered as evidence for its claim. The target should be a ValidationResult or a subclass of one; a pack that attaches its own class here is expected to declare that subclass relationship.
- min 1
- min 1Minimal: must include at least one ValidationResult (IRI).
has verification activity
hasVerificationActivity
https://uofa.net/vocab#hasVerificationActivity
Links a record to work done to check the model was built and solved correctly.
has weakener
hasWeakener
https://uofa.net/vocab#hasWeakener
Links a package to a condition under which its stated evidence does not support the claim it is offered for.
Identity Binding Attestation
IdentityBindingAttestation
https://uofa.net/vocab#IdentityBindingAttestation
A signed statement that a named actor proved possession of a named signing key, through a named identity provider, at a stated time.
identity provider issuer
identityProviderIssuer
https://uofa.net/vocab#identityProviderIssuer
Canonical issuer URI of the identity provider observed during the authentication this attestation relies on.
- min 1, max 1A binding must name the identity provider issuer it relied on. 'An account authenticated' with no issuer is not checkable by anyone.
identity provider subject
identityProviderSubject
https://uofa.net/vocab#identityProviderSubject
The provider subject observed, or a documented representation of it that stays comparable within a declared scope.
- min 1, max 1A binding must name the subject the provider returned, or a documented representation of it that stays comparable within a declared scope.
Input Pedigree Link
InputPedigreeLink
https://uofa.net/vocab#InputPedigreeLink
Traces an input back to where it came from, with a rating of how well established that source is.
intended use
intendedUse
https://uofa.net/vocab#intendedUse
What the model is to be used for here, stated plainly enough to judge whether the evidence covers it. Carried by the context of use or by the package as a whole, so no single domain is declared.
is foundational evidence
isFoundationalEvidence
https://uofa.net/vocab#isFoundationalEvidence
Marks a node as the root of a provenance chain, so a chain stopping there is not read as broken.
value xsd:boolean
- datatype
xsd:boolean, max 1isFoundationalEvidence = true marks a provenance-chain root (for W-PROV-01).
issued at
issuedAt
https://uofa.net/vocab#issuedAt
When this attestation was made.
- min 1A binding must state when it was made.
- min 1An authorization must state when it was made.
justification
justification
https://uofa.net/vocab#justification
The argument for accepting a shortfall, written out so a reader can judge whether it holds.
- datatype
xsd:string, min 1, max 1 - min 1, max 1OffsetRationale must include a justification text.
known limitation
knownLimitation
https://uofa.net/vocab#knownLimitation
A limitation the assessment acknowledges in its own evidence. Reserved for a future weakener pattern and not yet expected in packages.
LevelAffirmation
https://uofa.net/vocab#LevelAffirmation
No definition, constraint, or schema description exists for this term in the repository.
measurementHash
https://uofa.net/vocab#measurementHash
- min 1A decision signature binds the RECOMPUTED measurement hash, which is what chains the judgment to the evidence it judged.
measure type
measureType
https://uofa.net/vocab#measureType
Whether a measurement describes a single point or a summary over a region.
on Discrepancy · value xsd:string
- datatype
xsd:string, max 1, one ofpoint, aggregatemeasureType, when present, must be 'point' or 'aggregate'.
Model
Model
https://uofa.net/vocab#Model
The computational model whose credibility the package assesses.
Model Configuration
ModelConfiguration
https://uofa.net/vocab#ModelConfiguration
A particular setup of the model that produced some evidence, carrying the model version it exercised.
model revision date
modelRevisionDate
https://uofa.net/vocab#modelRevisionDate
When the current model revision was made, so evidence older than the model it describes can be spotted.
on UnitOfAssurance · value xsd:dateTime
- datatype
xsd:dateTime, max 1modelRevisionDate is the timestamp of the current model revision (for W-EP-03 staleness comparison).
model risk level
modelRiskLevel
https://uofa.net/vocab#modelRiskLevel
How much rides on the model being right, combining its influence over the decision with the consequence of that decision going wrong.
on UnitOfAssurance · value xsd:integer
- datatype
xsd:integer, min 1, max 1Complete: modelRiskLevel is required (integer 1–5, per V&V 40 risk matrix).
model version
modelVersion
https://uofa.net/vocab#modelVersion
Which model revision a configuration exercised, read against the version the package claims to describe so drift shows up.
- max 1modelVersion identifies the model revision exercised by this configuration.
Offset Rationale
OffsetRationale
https://uofa.net/vocab#OffsetRationale
A stated reason for accepting a credibility factor that fell short of its required level, pointing at the factor and at whatever compensates for the gap.
offsetting evidence
offsettingEvidence
https://uofa.net/vocab#offsettingEvidence
Evidence offered as compensating for a factor that fell short of its required level.
Operating Envelope
OperatingEnvelope
https://uofa.net/vocab#OperatingEnvelope
The input range a model is claimed to hold over, given as bounds rather than prose.
outcome
outcome
https://uofa.net/vocab#outcome
The result reached, kept separate from the reasoning that produced it. Carried by a decision record or by a validation result, so no single domain is declared.
pattern id
patternId
https://uofa.net/vocab#patternId
Identifies which catalogued weakener pattern fired, so the same gap carries the same name across packages.
- min 1, max 1, pattern
^(W-[A-Z]+-(\d{2,}|[A-Z][A-Z0-9-]*)|COMPOUND-([A-Z][A-Z0-9]*-)?\d{2})$patternId must match catalog format W-<FAMILY>-<NN or WORD-ID>, COMPOUND-NN, or COMPOUND-<FAMILY>-NN (e.g., W-EP-01, W-CON-03, W-PROV-01, W-NASA-02, W-SURR-03, W-AIMS-AUDIT-STALE, COMPOUND-01, COMPOUND-EV-01). Open to any pack-declared family — the C2 shape must accept every patternId the active packs emit (C2↔C3 consistency).
pedigree level
pedigreeLevel
https://uofa.net/vocab#pedigreeLevel
How well established an input source is, on a fixed scale recorded alongside the link back to it.
on InputPedigreeLink · value xsd:integer
- datatype
xsd:integer
possession proven at
possessionProvenAt
https://uofa.net/vocab#possessionProvenAt
When the domain-separated enrollment challenge was verified.
- min 1, max 1A binding must state when possession was proven; a binding with no time cannot be placed against a revocation.
Process Attestation
ProcessAttestation
https://uofa.net/vocab#ProcessAttestation
A statement that a defined process was followed, naming who stands behind it.
process type
processType
https://uofa.net/vocab#processType
Which process an attestation covers.
- min 1, one of
configuration-management, sqa, change-control, documentation
Complete Profile
ProfileComplete
https://uofa.net/vocab#ProfileComplete
The fuller field set, adding model bindings and per-factor assessments to what the minimal profile requires.
Disposition Profile
ProfileDisposition
https://uofa.net/vocab#ProfileDisposition
The complete field set plus a required disposition, for records that must state what action follows the assessment.
Minimal Profile
ProfileMinimal
https://uofa.net/vocab#ProfileMinimal
The lighter of the two field sets, enough for an audit trail or a pipeline capture without a full credibility argument.
project
project
https://uofa.net/vocab#project
The scope a permission was held in. A permission with no scope is not a permission.
- min 1, max 1An authorization must name the project the permission was held in. A permission with no scope is not a permission.
proof purpose
proofPurpose
https://uofa.net/vocab#proofPurpose
Which purpose the possession proof served, so a proof for one purpose is never read as a proof for another.
- min 1, max 1A binding must state which purpose the possession proof served, so a proof made for enrollment is never read as a proof of signing.
rationale
rationale
https://uofa.net/vocab#rationale
The reasoning behind a judgement, written out so a reader can weigh it rather than take the outcome on trust. Carried by a decision record or by a credibility factor, so no single domain is declared.
recommended action
recommendedAction
https://uofa.net/vocab#recommendedAction
An action class the external agent suggests, from the five Disposition action classes. A recommendation, never a Disposition: nothing reads it as one, and an annotation carrying it and no Disposition is undispositioned.
value xsd:string
- datatype
xsd:string, max 1, one ofrestrict-cou, acquire-validation, characterize-region, accept-residual-risk, change-courecommendedAction, when present, must be one of the five Disposition action classes (restrict-cou, acquire-validation, characterize-region, accept-residual-risk, change-cou).
references identifier
referencesIdentifier
https://uofa.net/vocab#referencesIdentifier
Points at an identifier defined elsewhere. One that resolves nowhere is what makes a chain untraceable.
refers to factor
refersToFactor
https://uofa.net/vocab#refersToFactor
Links an offset rationale to the specific factor it is offered for.
on OffsetRationale · value CredibilityFactor
- min 1OffsetRationale must refer to the CredibilityFactor it offsets.
required level
requiredLevel
https://uofa.net/vocab#requiredLevel
The rigor this factor has to reach for the assessment to stand, set before the evidence is gathered. The standard that fixes the scale is recorded separately on the factor.
on CredibilityFactor · value xsd:integer
- datatype
xsd:integer, max 1requiredLevel must be an integer 0–5 (0 = not set).
requiredLevelProvenance
https://uofa.net/vocab#requiredLevelProvenance
- min 1, one of
affirmed, corrected, waived - max 1, one of
extracted, defaulted, affirmed, corrected, waived, source-absent, not-recoverablerequiredLevelProvenance must be one of extracted, defaulted, affirmed, corrected, waived, source-absent, not-recoverable. `confirmed` is not a member: anchoring locates a level, it does not judge it. - max 1, one of
extracted, defaulted, affirmed, corrected, waived, source-absentrequiredLevelProvenance must be one of extracted, defaulted, affirmed, corrected, waived, source-absent. `confirmed` is not a member: anchoring locates a level, it does not judge it.
required verification method
requiredVerificationMethod
https://uofa.net/vocab#requiredVerificationMethod
The method a requirement asks for, read against what the generating activity actually did.
Requirement
Requirement
https://uofa.net/vocab#Requirement
The engineering requirement the model is being trusted to help satisfy.
residual risk justification
residualRiskJustification
https://uofa.net/vocab#residualRiskJustification
The argument for accepting the risk left after mitigation. Reserved for a future weakener pattern and not yet expected in packages.
- max 1
Review Activity
ReviewActivity
https://uofa.net/vocab#ReviewActivity
A review carried out on the model or its evidence, recording who reviewed and of what kind.
reviewDate
https://uofa.net/vocab#reviewDate
No definition, constraint, or schema description exists for this term in the repository.
reviewer
reviewer
https://uofa.net/vocab#reviewer
Who carried out a review, named so the review has an accountable author.
- min 1ReviewActivity must identify a reviewer.
reviewFindings
https://uofa.net/vocab#reviewFindings
No definition, constraint, or schema description exists for this term in the repository.
reviewScope
https://uofa.net/vocab#reviewScope
No definition, constraint, or schema description exists for this term in the repository.
review type
reviewType
https://uofa.net/vocab#reviewType
What kind of review was carried out, such as internal or independent.
- one of
independent, internal, peer
role
role
https://uofa.net/vocab#role
The capacity in which the actor decided, so a reader knows whose judgement this was.
schema version
schemaVersion
https://uofa.net/vocab#schemaVersion
Which attestation schema the signed payload follows, likewise inside the signed bytes.
- min 1, max 1A binding must carry the attestation schema it follows, likewise inside the signed bytes.
- min 1, max 1An authorization must carry the attestation schema it follows, likewise inside the signed bytes.
Sensitivity Analysis
SensitivityAnalysis
https://uofa.net/vocab#SensitivityAnalysis
Work done to find which inputs the model answer actually depends on.
severity
severity
https://uofa.net/vocab#severity
How far a weakener undermines the claim it was raised against. Set by the pattern rather than by the author of the record.
- min 1, max 1, one of
Critical, High, Medium, Lowseverity must be Critical, High, Medium, or Low.
signature
signature
https://uofa.net/vocab#signature
A cryptographic signature over the package hash, binding the record to whoever signed it.
- min 1, pattern
^(ed25519|ecdsa-p256):[a-f0-9]+$Complete: signature must be algorithm:hexdigest format. - min 1, pattern
^(ed25519|ecdsa-p256):[a-f0-9]+$Minimal: must include a digital signature in algorithm:hexdigest format.
signature algorithm
signatureAlg
https://uofa.net/vocab#signatureAlg
Which scheme produced the signature, so a verifier knows how to check it.
signatureAlgorithm
https://uofa.net/vocab#signatureAlgorithm
No definition, constraint, or schema description exists for this term in the repository.
signatureRole
https://uofa.net/vocab#signatureRole
- min 1, max 1, one of
issuer, reviewerA signature must declare its role from the closed set: issuer (infrastructure: custody, integrity, well-formedness) or reviewer (person-class: a named person stands behind a judgment).
signature timestamp
signatureTimestamp
https://uofa.net/vocab#signatureTimestamp
When the package was signed. Evidence dated after this point could not have informed it.
on UnitOfAssurance · value xsd:dateTime
- datatype
xsd:dateTime, max 1signatureTimestamp is the UofA signing timestamp (for W-CON-03 future-date comparison).
signatureValue
https://uofa.net/vocab#signatureValue
No definition, constraint, or schema description exists for this term in the repository.
signedAt
https://uofa.net/vocab#signedAt
No definition, constraint, or schema description exists for this term in the repository.
signerIdentity
https://uofa.net/vocab#signerIdentity
- min 1A decision signature must name who signed.
solver truth
solverTruth
https://uofa.net/vocab#solverTruth
The value the full solver produced, taken as the reference a surrogate is judged against.
on Discrepancy · value xsd:double
- datatype
xsd:double, min 1, max 1A Discrepancy must carry exactly one solverTruth (number).
source
source
https://uofa.net/vocab#source
Where a WeakenerAnnotation came from. 'external': authored by a software agent outside UofA and carried in the package; it must then be attributed (prov:wasAttributedTo) to that agent. Absent for annotations the rule engine infers.
value xsd:string
- datatype
xsd:string, max 1, one ofexternalsource, when present on a WeakenerAnnotation, must be 'external'.
SourceAnchor
https://uofa.net/vocab#SourceAnchor
No definition, constraint, or schema description exists for this term in the repository.
source reference
sourceReference
https://uofa.net/vocab#sourceReference
Points at where an input actually came from, so its pedigree can be traced rather than asserted. The provenance records that carry it are defined by packs rather than by core, so no domain is declared here.
- min 1InputPedigreeLink must reference the original data source.
supports
supports
https://uofa.net/vocab#supports
Links evidence to the claim it is offered in support of.
surrogate prediction
surrogatePrediction
https://uofa.net/vocab#surrogatePrediction
The value the surrogate produced, compared against the solver truth to size the gap.
on Discrepancy · value xsd:double
- datatype
xsd:double, min 1, max 1A Discrepancy must carry exactly one surrogatePrediction (number).
sustained defeater justified
sustainedDefeaterJustified
https://uofa.net/vocab#sustainedDefeaterJustified
Declared in context v0.6 and not used by any package or shape.
threshold distance modulates
thresholdDistanceModulates
https://uofa.net/vocab#thresholdDistanceModulates
Declared in context v0.6 and not used by any package or shape.
tool version
toolVersion
https://uofa.net/vocab#toolVersion
Which version of the tooling produced the record, so the same inputs can be replayed.
trace completeness
traceCompleteness
https://uofa.net/vocab#traceCompleteness
How much of the evidence chain is actually linked up, as a proportion.
- datatype
xsd:decimal or xsd:double
transformationDescription
https://uofa.net/vocab#transformationDescription
No definition, constraint, or schema description exists for this term in the repository.
uncertainty interval width
uncertaintyCIWidth
https://uofa.net/vocab#uncertaintyCIWidth
The width of the reported confidence interval, giving a reader the spread behind a headline number.
- datatype
xsd:decimal or xsd:double
Unit of Assurance
UnitOfAssurance
https://uofa.net/vocab#UnitOfAssurance
The smallest independently verifiable package of credibility evidence. One package covers one context of use, and its signature lets a reviewer check the decision without access to the original tooling.
validation coverage
validationCoverage
https://uofa.net/vocab#validationCoverage
How much of what needed validating was actually validated, as a proportion.
- datatype
xsd:decimal or xsd:double
Validation Result
ValidationResult
https://uofa.net/vocab#ValidationResult
A recorded comparison between what the model predicted and what was measured, offered as evidence for the claim the package makes.
validForModelVersion
https://uofa.net/vocab#validForModelVersion
No definition, constraint, or schema description exists for this term in the repository.
Verification Activity
VerificationActivity
https://uofa.net/vocab#VerificationActivity
Work done to check the model was built and solved correctly, as distinct from checking it against measurement.
verification coverage
verificationCoverage
https://uofa.net/vocab#verificationCoverage
How much of what needed verifying was actually verified, as a proportion.
- datatype
xsd:decimal or xsd:double
version
version
https://uofa.net/vocab#version
A version string for whatever it is attached to. Used where no more specific version property applies.
- min 1, max 1The attributed software agent must carry a version.
Weakener Annotation
WeakenerAnnotation
https://uofa.net/vocab#WeakenerAnnotation
A condition under which the stated evidence does not support the claim it is offered for. It describes the record as published, not a defect in the modeling work.
Provenance
Generated from the JSON-LD context files
(v0.1, v0.2, v0.3, v0.4, v0.5, v0.6, v0.7, v0.8, v0.9, v0.10), the SHACL shapes under packs/*/shapes/,
and the JSON Schema. Term coverage: 155 labelled,
155 with a description, 101 carrying SHACL
constraints, 81 used by the shipped example packages,
72 declaring the class they belong to.
A property with no declared class is one the repository
has no single answer for: either nothing uses it yet, or it is carried by
several classes at once and rdfs:domain would assert that every
carrier is the same kind of thing.