Declare concepts and review boundaries for the silent artifacts (T02)

Twelve of the thirteen artifacts that declared nothing now declare what they define, together with the map-assigned concepts the Organization Model was missing and the Landscape seed concepts the extractor cannot see because they are listed rather than defined in prose. The ownership index grows from 164 entries to 750, undeclared prose definitions fall from 637 to 57, and there are no ownership conflicts. The 57 that remain are overlaps this round assigned to another owner: imports, each recorded in a boundary review. The kernel map declares nothing, deliberately, because it assigns concepts to owners rather than defining them. It is now the only silent artifact and the suite asserts that, so an artifact added without declarations fails. itc-org:Authority is declared, with Actor, Ownership, Membership, Role, Responsibility and Accountability, which SecurityCanon and the identity model already treat as organization-owned. The regression test that previously asserted the blind spot now asserts that the kernel map's assignment and the declaration agree. Profile is deliberately left undeclared. The kernel map assigns it to Core, the identity model owns it under accepted CUST-ADR-006, and Observability defines a runtime performance profile. Three senses need a decision, not a declaration, so it is recorded as open rather than forced. Eleven boundary reviews are added beside the artifacts they describe, in the shape the identity model has used since INFO-WP-0021. The largest finding is that Core and the Information Space model restate eight provenance concepts in nearly identical words; Core owns them and Information Space imports. Label, Drift, Summary and Attribute are resolved by disambiguation rather than transfer. make check passes with 50 tests, clean validation, no stale generated assets. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 3588@bnt-lap001 Assistant-Session: 24b80f66-e5a7-4e61-99fe-2d422e6d17da
2026-09-20 23:19:22 +02:00 · 2026-09-20 23:19:22 +02:00 · f7b17b83f2
commit f7b17b83f2
parent 164993d4e2
46 changed files with 5665 additions and 39 deletions
--- a/infospace/agent/briefs/kernel-itc-core.md
+++ b/infospace/agent/briefs/kernel-itc-core.md
@ -22,7 +22,40 @@ No imports or anchors recorded.

 ## Owned Concepts

+- `Activity`
+- `AgentBrief`
+- `AgentReference`
+- `Alias`
+- `Ambiguity`
+- `Assimilation`
+- `CanonArtifact`
+- `CanonInterfaceCard`
+- `Canonical Owner`
+- `ChangeRecord`
+- `Concept`
+- `Conflict`
+- `ConformanceLevel`
+- `DecisionRecord`
+- `Drift`
+- `ExternalReference`
+- `Gap`
+- `Import`
+- `Influence`
 - `InfoTechCanon Core`
+- `Label`
+- `Mapping`
+- `Namespace`
+- `OpenQuestion`
+- `Overlap`
+- `Pattern`
+- `ProvenanceRecord`
+- `RelationshipDefinition`
+- `Source`
+- `Standard`
+- `ValidationResult`
+- `ValidationRule`
+- `Version`
+- `VersionRecord`

 ## Related Distinctions

--- a/infospace/agent/briefs/model-access-control.md
+++ b/infospace/agent/briefs/model-access-control.md
@ -27,7 +27,53 @@ Imports and anchors:

 ## Owned Concepts

+- `AccessCertification`
+- `AccessControlEntity`
+- `AccessFinding`
+- `AccessRemediation`
+- `AccessReview`
+- `AccessRole`
+- `AccessSession`
+- `AgentAccess`
+- `AuthenticatedSubject`
+- `AuthenticationStrengthReference`
+- `AuthorizationDecision`
+- `AuthorizationRequest`
+- `BreakGlassAccess`
+- `Condition`
+- `CredentialReference`
+- `DecisionReason`
+- `DelegatedAccess`
+- `Denial`
+- `Entitlement`
+- `EvaluationContext`
+- `ExcessAccess`
+- `Grant`
+- `IdentityReference`
 - `InfoTechCanon Access Control Model`
+- `JustInTimeAccess`
+- `Operation`
+- `OrphanedAccess`
+- `Permission`
+- `PolicyAdministrationPoint`
+- `PolicyBinding`
+- `PolicyDecisionPoint`
+- `PolicyEnforcementPoint`
+- `PolicyInformationPoint`
+- `PolicyRetrievalPoint`
+- `Principal`
+- `Privilege`
+- `ProtectedResource`
+- `RelationshipTuple`
+- `Resource`
+- `ResourceAction`
+- `ResourceScope`
+- `RoleBinding`
+- `ServiceAccountAccess`
+- `StaleAccess`
+- `Subject`
+- `TemporaryAccess`
+- `TokenReference`

 ## Related Distinctions

--- a/infospace/agent/briefs/model-data.md
+++ b/infospace/agent/briefs/model-data.md
@ -25,7 +25,58 @@ Imports and anchors:

 ## Owned Concepts

+- `Attribute`
+- `AttributeValueType`
+- `BreakingChange`
+- `BusinessTerm`
+- `CodeList`
+- `CompatibilityRule`
+- `Constraint`
+- `ConsumerExpectation`
+- `DataAccessPattern`
+- `DataAvailability`
+- `DataCategory`
+- `DataClassification`
+- `DataContract`
+- `DataDefinition`
+- `DataDistribution`
+- `DataDomain`
+- `DataElement`
+- `DataElementConcept`
+- `DataEntity`
+- `DataFlow`
+- `DataFreshness`
+- `DataLineage`
+- `DataObject`
+- `DataProduct`
+- `DataQualityCheck`
+- `DataQualityDimension`
+- `DataQualityIssue`
+- `DataQualityResult`
+- `DataQualityRule`
+- `DataResidency`
+- `DataService`
+- `DataStoreReference`
+- `DataSubjectCategory`
+- `DataType`
+- `DataUsageConstraint`
+- `Dataset`
+- `DatasetSeries`
+- `Derivation`
+- `Field`
+- `FitnessForUse`
+- `GlossaryTerm`
 - `InfoTechCanon Data Model`
+- `MasterDataReference`
+- `ProcessingPurpose`
+- `ProducerExpectation`
+- `Record`
+- `ReferenceData`
+- `Representation`
+- `RetentionRuleReference`
+- `SchemaEvolutionPolicy`
+- `Sensitivity`
+- `Transformation`

 ## Related Distinctions

--- a/infospace/agent/briefs/model-devsecops.md
+++ b/infospace/agent/briefs/model-devsecops.md
@ -25,7 +25,69 @@ Imports and anchors:

 ## Owned Concepts

+- `AgentExecutionEvidence`
+- `AgentGeneratedPatch`
+- `AgentReview`
+- `Artifact`
+- `ArtifactDigest`
+- `ArtifactVersion`
+- `Attestation`
+- `Branch`
+- `ChangeFailure`
+- `CodeReview`
+- `CodingAgentChange`
+- `Commit`
+- `ContainerImage`
+- `DeliveryMetric`
+- `DeploymentExecution`
+- `DeploymentHealthSignal`
+- `DeploymentManifest`
+- `DeploymentPlan`
+- `DeploymentRecord`
+- `DeploymentVerification`
+- `DevSecOpsEntity`
+- `EnvironmentPromotion`
+- `FeedbackLoop`
+- `GateDecision`
+- `HumanSupervisionReference`
+- `IaCModule`
 - `InfoTechCanon DevSecOps Model`
+- `Package`
+- `Pipeline`
+- `PipelineDefinition`
+- `PipelineIdentity`
+- `PipelineJob`
+- `PipelineResult`
+- `PipelineRun`
+- `PipelineStage`
+- `PipelineStep`
+- `PolicyGate`
+- `Promotion`
+- `Provenance`
+- `PullRequest`
+- `QualityGate`
+- `RecoveryAction`
+- `Release`
+- `ReleaseApprovalReference`
+- `ReleaseCandidate`
+- `ReleaseNote`
+- `ReleaseVersion`
+- `Repository`
+- `Rollback`
+- `RolloutStrategy`
+- `Runner`
+- `ScanResult`
+- `ScanRun`
+- `Signature`
+- `Software Bill of Materials`
+- `SourceChange`
+- `SourceTag`
+- `SupplyChainEvidence`
+- `TestResult`
+- `TestRun`
+- `TransparencyLogEntry`
+- `VEXReference`
+- `VerificationEvidence`

 ## Related Distinctions

--- a/infospace/agent/briefs/model-governance.md
+++ b/infospace/agent/briefs/model-governance.md
@ -24,7 +24,50 @@ Imports and anchors:

 ## Owned Concepts

+- `Approval`
+- `Assertion`
+- `Assessment`
+- `AssuranceCase`
+- `AssuranceConclusion`
+- `Audit`
+- `CompensatingControl`
+- `ComplianceRequirement`
+- `Control`
+- `ControlActivity`
+- `ControlImplementation`
+- `ControlObjective`
+- `ControlResult`
+- `ControlTest`
+- `Decision`
+- `DecisionRight`
+- `Escalation`
+- `EvidenceBasis`
+- `Exception`
+- `Finding`
+- `GovernanceCycle`
+- `GovernanceEntity`
+- `GovernanceForum`
+- `GovernanceProcess`
+- `GovernanceScope`
+- `GovernanceSystem`
+- `Guideline`
+- `Impact`
 - `InfoTechCanon Governance Model`
+- `Likelihood`
+- `Nonconformity`
+- `Obligation`
+- `Policy`
+- `Principle`
+- `RegulatoryReference`
+- `Remediation`
+- `Requirement`
+- `Review`
+- `Risk`
+- `RiskAcceptance`
+- `RiskSource`
+- `RiskTreatment`
+- `Rule`
+- `Waiver`

 ## Related Distinctions

--- a/infospace/agent/briefs/model-information-space.md
+++ b/infospace/agent/briefs/model-information-space.md
@ -25,7 +25,66 @@ Imports and anchors:

 ## Owned Concepts

+- `Anchor`
+- `AssimilationReport`
+- `Backlink`
+- `Block`
+- `BrokenLink`
+- `Chunk`
+- `Citation`
+- `Collection`
+- `ConceptIndex`
+- `ConceptPage`
+- `ConflictingDefinition`
+- `Corpus`
+- `CrossReference`
+- `DependencyReference`
+- `Document`
+- `DuplicateContent`
+- `EmbeddingRecord`
+- `Excerpt`
+- `FrontMatter`
+- `Generation`
+- `GraphView`
+- `Heading`
+- `Index`
 - `InfoTechCanon Information Space Model`
+- `InformationSpace`
+- `Infospace`
+- `KnowledgeArtifact`
+- `KnowledgeBase`
+- `Link`
+- `LowRetrievalQuality`
+- `MapView`
+- `MappingDocument`
+- `MappingReference`
+- `MarkdownDocument`
+- `MetadataRecord`
+- `MissingMetadata`
+- `NavigationView`
+- `OrphanArtifact`
+- `PatternDocument`
+- `ProfileDocument`
+- `RelationshipIndex`
+- `RepositorySpace`
+- `RetrievalContext`
+- `RetrievalEvaluation`
+- `RetrievalQuery`
+- `RetrievalResult`
+- `RetrievalUnit`
+- `ReviewRecord`
+- `Revision`
+- `SearchIndex`
+- `Section`
+- `Shard`
+- `SourceReference`
+- `StaleContent`
+- `StandardDocument`
+- `Status`
+- `Summary`
+- `TopicIndex`
+- `UsePath`
+- `VectorIndex`

 ## Related Distinctions

--- a/infospace/agent/briefs/model-landscape.md
+++ b/infospace/agent/briefs/model-landscape.md
@ -24,7 +24,19 @@ Imports and anchors:

 ## Owned Concepts

+- `ApplicationService`
+- `BusinessService`
+- `Environment`
 - `InfoTechCanon Landscape Model`
+- `LandscapeClaim`
+- `LandscapeEntity`
+- `LandscapeEvidence`
+- `LandscapeRelationship`
+- `LandscapeSource`
+- `LandscapeState`
+- `RuntimeResource`
+- `TechnicalService`
+- `Workload`

 ## Related Distinctions

--- a/infospace/agent/briefs/model-network.md
+++ b/infospace/agent/briefs/model-network.md
@ -25,7 +25,82 @@ Imports and anchors:

 ## Owned Concepts

+- `ACL`
+- `AddressFamily`
+- `AllowedFlow`
+- `AppliedNetworkState`
+- `AssessedNetworkState`
+- `AttackSurfaceReference`
+- `Circuit`
+- `ConnectivityService`
+- `DNSRecord`
+- `DNSZone`
+- `DeclaredNetworkState`
+- `DeniedFlow`
+- `EgressEndpoint`
+- `Endpoint`
+- `Firewall`
+- `FirewallRule`
+- `Gateway`
+- `HistoricalNetworkState`
+- `Hostname`
+- `IPAddress`
+- `IPAllocation`
 - `InfoTechCanon Network Model`
+- `IngressEndpoint`
+- `IntendedNetworkState`
+- `Interface`
+- `KubernetesNetworkPolicy`
+- `LoadBalancer`
+- `ManagementEndpoint`
+- `Microsegment`
+- `NAT`
+- `NetworkACL`
+- `NetworkConfiguration`
+- `NetworkDevice`
+- `NetworkDomain`
+- `NetworkEntity`
+- `NetworkFabric`
+- `NetworkFlow`
+- `NetworkIntent`
+- `NetworkNode`
+- `NetworkPolicy`
+- `NetworkRegion`
+- `NetworkSegment`
+- `NetworkSite`
+- `NetworkTenant`
+- `NetworkZone`
+- `NextHop`
+- `ObservedFlow`
+- `ObservedNetworkState`
+- `OverlayNetwork`
+- `Path`
+- `Peering`
+- `Port`
+- `Prefix`
+- `PrivateEndpoint`
+- `Proxy`
+- `PublicEndpoint`
+- `ReachabilityClaim`
+- `ReachabilityTest`
+- `ReconciliationResult`
+- `Route`
+- `RouteTable`
+- `Router`
+- `SecurityGroup`
+- `SecurityZone`
+- `ServiceEndpoint`
+- `ServiceMeshPolicy`
+- `ServiceName`
+- `Subnet`
+- `Switch`
+- `TerminationPoint`
+- `TrafficPolicy`
+- `TrustZoneReference`
+- `UnderlayNetwork`
+- `VLAN`
+- `VRF`
+- `WorkloadEndpoint`

 ## Related Distinctions

--- a/infospace/agent/briefs/model-observability.md
+++ b/infospace/agent/briefs/model-observability.md
@ -25,7 +25,71 @@ Imports and anchors:

 ## Owned Concepts

+- `Alert`
+- `AlertCorrelation`
+- `AlertRoute`
+- `AlertRule`
+- `AlertSuppression`
+- `Annotation`
+- `AvailabilityWindow`
+- `Baggage`
+- `BurnRate`
+- `Correlation`
+- `Counter`
+- `Dashboard`
+- `ErrorBudget`
+- `EscalationReference`
+- `Event`
+- `EventConsumer`
+- `EventCorrelationKey`
+- `EventEnvelope`
+- `EventSource`
+- `EventType`
+- `Exemplar`
+- `Gauge`
+- `HealthState`
+- `Histogram`
 - `InfoTechCanon Observability Model`
+- `Log`
+- `LogContext`
+- `LogLevel`
+- `LogRecord`
+- `LogStream`
+- `Metric`
+- `MetricInstrument`
+- `MetricPoint`
+- `Notification`
+- `ObservabilityEntity`
+- `ObservabilityEvidence`
+- `ObservedIncident`
+- `ObservedResource`
+- `OperationalView`
+- `PerformanceProfile`
+- `PostIncidentObservation`
+- `ProfilingSample`
+- `Query`
+- `QueryResult`
+- `ResourceAttribute`
+- `ResourceProfile`
+- `RootCauseHypothesis`
+- `Runbook`
+- `SLAReference`
+- `Service Level Indicator`
+- `Service Level Objective`
+- `Signal`
+- `SignalSource`
+- `Snapshot`
+- `Span`
+- `SpanEvent`
+- `SpanLink`
+- `Telemetry`
+- `TelemetryPipeline`
+- `TelemetrySource`
+- `TimeSeries`
+- `Timeline`
+- `Trace`
+- `TraceContext`
+- `TraceSample`

 ## Related Distinctions

--- a/infospace/agent/briefs/model-organization.md
+++ b/infospace/agent/briefs/model-organization.md
@ -25,9 +25,23 @@ Imports and anchors:

 ## Owned Concepts

+- `Accountability`
+- `Actor`
+- `Agent`
+- `Authority`
 - `Community`
 - `Household`
 - `InfoTechCanon Organization Model`
+- `Membership`
+- `Organization`
+- `OrganizationalUnit`
+- `Ownership`
+- `Person`
+- `Position`
+- `Responsibility`
+- `Role`
+- `Stewardship`
+- `Team`

 ## Related Distinctions

--- a/infospace/agent/briefs/model-security.md
+++ b/infospace/agent/briefs/model-security.md
@ -25,7 +25,58 @@ Imports and anchors:

 ## Owned Concepts

+- `AttackImpact`
+- `AttackPath`
+- `AttackPattern`
+- `AttackPrecondition`
+- `AttackStep`
+- `AttackTechnique`
+- `BlastRadius`
+- `ChokePoint`
+- `CompensatingMeasure`
+- `Containment`
+- `DataSecurityFinding`
+- `Detection`
+- `DetectionCoverage`
+- `DetectionRule`
+- `Eradication`
+- `Exploit`
+- `ExploitLikelihood`
+- `Exploitability`
+- `Exposure`
+- `ExposureFinding`
+- `HardeningMeasure`
+- `IdentityFinding`
 - `InfoTechCanon Security Model`
+- `Investigation`
+- `LessonLearned`
+- `Misconfiguration`
+- `MisconfigurationFinding`
+- `Mitigation`
+- `PenTestFinding`
+- `ProtectedAssetReference`
+- `Recovery`
+- `SecurityAssessment`
+- `SecurityBoundary`
+- `SecurityDomain`
+- `SecurityEntity`
+- `SecurityEvidence`
+- `SecurityFinding`
+- `SecurityIncident`
+- `SecurityMeasure`
+- `SecurityPosture`
+- `SecurityPostureScore`
+- `SecurityReview`
+- `SecuritySignal`
+- `Severity`
+- `SupplyChainFinding`
+- `Tactic`
+- `Threat`
+- `ThreatActor`
+- `ThreatEvent`
+- `Vulnerability`
+- `VulnerabilityFinding`
+- `Weakness`

 ## Related Distinctions

--- a/infospace/agent/briefs/model-task.md
+++ b/infospace/agent/briefs/model-task.md
@ -24,7 +24,59 @@ Imports and anchors:

 ## Owned Concepts

+- `AcceptanceCriteria`
+- `Action`
+- `Actionability`
+- `ApprovalTask`
+- `AssignmentReference`
+- `Backlog`
+- `Blocker`
+- `Bug`
+- `ChangeTask`
+- `Commitment`
+- `CompletionEvidence`
+- `Complexity`
+- `Deadline`
+- `DecisionTask`
+- `DefinitionOfDone`
+- `DefinitionOfReady`
+- `Deliverable`
+- `Dependency`
+- `DueDate`
+- `EffortEstimate`
+- `Epic`
+- `Experiment`
+- `Exploration`
+- `Feature`
+- `Importance`
+- `IncidentTask`
 - `InfoTechCanon Task Model`
+- `Issue`
+- `Milestone`
+- `Move`
+- `NextAction`
+- `Option`
+- `Outcome`
+- `Priority`
+- `ProblemTask`
+- `Reachability`
+- `Readiness`
+- `RemediationTask`
+- `Request`
+- `ReviewTask`
+- `Step`
+- `Story`
+- `Task`
+- `TaskEntity`
+- `Transition`
+- `Urgency`
+- `Value`
+- `WIPLimit`
+- `WaitingFor`
+- `WorkItem`
+- `WorkPackage`
+- `Workflow`
+- `WorkflowState`

 ## Related Distinctions

--- a/infospace/agent/briefs/standard-tagging.md
+++ b/infospace/agent/briefs/standard-tagging.md
@ -25,7 +25,31 @@ Imports and anchors:

 ## Owned Concepts

+- `ControlledTag`
+- `DeprecatedTag`
+- `EmergentTag`
 - `InfoTechCanon Tagging Standard`
+- `OverTaggedEntity`
+- `Tag`
+- `TagAlias`
+- `TagAssignment`
+- `TagCategory`
+- `TagConflict`
+- `TagDefinition`
+- `TagDrift`
+- `TagKey`
+- `TagMapping`
+- `TagNamespace`
+- `TagProfile`
+- `TagQuery`
+- `TagRule`
+- `TagScheme`
+- `TagSelector`
+- `TagSet`
+- `TagValue`
+- `TagView`
+- `TaggingEntity`
+- `UntaggedEntity`

 ## Related Distinctions

--- a/infospace/agent/retrieval-index.json
+++ b/infospace/agent/retrieval-index.json
@ -1121,7 +1121,40 @@
      "imports": [],
      "kind": "kernel",
      "owned_concepts": [
-        "InfoTechCanon Core"
+        "Activity",
+        "AgentBrief",
+        "AgentReference",
+        "Alias",
+        "Ambiguity",
+        "Assimilation",
+        "CanonArtifact",
+        "CanonInterfaceCard",
+        "Canonical Owner",
+        "ChangeRecord",
+        "Concept",
+        "Conflict",
+        "ConformanceLevel",
+        "DecisionRecord",
+        "Drift",
+        "ExternalReference",
+        "Gap",
+        "Import",
+        "Influence",
+        "InfoTechCanon Core",
+        "Label",
+        "Mapping",
+        "Namespace",
+        "OpenQuestion",
+        "Overlap",
+        "Pattern",
+        "ProvenanceRecord",
+        "RelationshipDefinition",
+        "Source",
+        "Standard",
+        "ValidationResult",
+        "ValidationRule",
+        "Version",
+        "VersionRecord"
      ],
      "relationships": [],
      "source_path": "seeds/InfoTechCanonCore_RC1_seed.md",
@ -1298,7 +1331,53 @@
      ],
      "kind": "model",
      "owned_concepts": [
-        "InfoTechCanon Access Control Model"
+        "AccessCertification",
+        "AccessControlEntity",
+        "AccessFinding",
+        "AccessRemediation",
+        "AccessReview",
+        "AccessRole",
+        "AccessSession",
+        "AgentAccess",
+        "AuthenticatedSubject",
+        "AuthenticationStrengthReference",
+        "AuthorizationDecision",
+        "AuthorizationRequest",
+        "BreakGlassAccess",
+        "Condition",
+        "CredentialReference",
+        "DecisionReason",
+        "DelegatedAccess",
+        "Denial",
+        "Entitlement",
+        "EvaluationContext",
+        "ExcessAccess",
+        "Grant",
+        "IdentityReference",
+        "InfoTechCanon Access Control Model",
+        "JustInTimeAccess",
+        "Operation",
+        "OrphanedAccess",
+        "Permission",
+        "PolicyAdministrationPoint",
+        "PolicyBinding",
+        "PolicyDecisionPoint",
+        "PolicyEnforcementPoint",
+        "PolicyInformationPoint",
+        "PolicyRetrievalPoint",
+        "Principal",
+        "Privilege",
+        "ProtectedResource",
+        "RelationshipTuple",
+        "Resource",
+        "ResourceAction",
+        "ResourceScope",
+        "RoleBinding",
+        "ServiceAccountAccess",
+        "StaleAccess",
+        "Subject",
+        "TemporaryAccess",
+        "TokenReference"
      ],
      "relationships": [
        {
@ -1413,7 +1492,58 @@
      ],
      "kind": "model",
      "owned_concepts": [
-        "InfoTechCanon Data Model"
+        "Attribute",
+        "AttributeValueType",
+        "BreakingChange",
+        "BusinessTerm",
+        "CodeList",
+        "CompatibilityRule",
+        "Constraint",
+        "ConsumerExpectation",
+        "DataAccessPattern",
+        "DataAvailability",
+        "DataCategory",
+        "DataClassification",
+        "DataContract",
+        "DataDefinition",
+        "DataDistribution",
+        "DataDomain",
+        "DataElement",
+        "DataElementConcept",
+        "DataEntity",
+        "DataFlow",
+        "DataFreshness",
+        "DataLineage",
+        "DataObject",
+        "DataProduct",
+        "DataQualityCheck",
+        "DataQualityDimension",
+        "DataQualityIssue",
+        "DataQualityResult",
+        "DataQualityRule",
+        "DataResidency",
+        "DataService",
+        "DataStoreReference",
+        "DataSubjectCategory",
+        "DataType",
+        "DataUsageConstraint",
+        "Dataset",
+        "DatasetSeries",
+        "Derivation",
+        "Field",
+        "FitnessForUse",
+        "GlossaryTerm",
+        "InfoTechCanon Data Model",
+        "MasterDataReference",
+        "ProcessingPurpose",
+        "ProducerExpectation",
+        "Record",
+        "ReferenceData",
+        "Representation",
+        "RetentionRuleReference",
+        "SchemaEvolutionPolicy",
+        "Sensitivity",
+        "Transformation"
      ],
      "relationships": [
        {
@ -1448,7 +1578,69 @@
      ],
      "kind": "model",
      "owned_concepts": [
-        "InfoTechCanon DevSecOps Model"
+        "AgentExecutionEvidence",
+        "AgentGeneratedPatch",
+        "AgentReview",
+        "Artifact",
+        "ArtifactDigest",
+        "ArtifactVersion",
+        "Attestation",
+        "Branch",
+        "ChangeFailure",
+        "CodeReview",
+        "CodingAgentChange",
+        "Commit",
+        "ContainerImage",
+        "DeliveryMetric",
+        "DeploymentExecution",
+        "DeploymentHealthSignal",
+        "DeploymentManifest",
+        "DeploymentPlan",
+        "DeploymentRecord",
+        "DeploymentVerification",
+        "DevSecOpsEntity",
+        "EnvironmentPromotion",
+        "FeedbackLoop",
+        "GateDecision",
+        "HumanSupervisionReference",
+        "IaCModule",
+        "InfoTechCanon DevSecOps Model",
+        "Package",
+        "Pipeline",
+        "PipelineDefinition",
+        "PipelineIdentity",
+        "PipelineJob",
+        "PipelineResult",
+        "PipelineRun",
+        "PipelineStage",
+        "PipelineStep",
+        "PolicyGate",
+        "Promotion",
+        "Provenance",
+        "PullRequest",
+        "QualityGate",
+        "RecoveryAction",
+        "Release",
+        "ReleaseApprovalReference",
+        "ReleaseCandidate",
+        "ReleaseNote",
+        "ReleaseVersion",
+        "Repository",
+        "Rollback",
+        "RolloutStrategy",
+        "Runner",
+        "ScanResult",
+        "ScanRun",
+        "Signature",
+        "Software Bill of Materials",
+        "SourceChange",
+        "SourceTag",
+        "SupplyChainEvidence",
+        "TestResult",
+        "TestRun",
+        "TransparencyLogEntry",
+        "VEXReference",
+        "VerificationEvidence"
      ],
      "relationships": [
        {
@ -1503,7 +1695,50 @@
      ],
      "kind": "model",
      "owned_concepts": [
-        "InfoTechCanon Governance Model"
+        "Approval",
+        "Assertion",
+        "Assessment",
+        "AssuranceCase",
+        "AssuranceConclusion",
+        "Audit",
+        "CompensatingControl",
+        "ComplianceRequirement",
+        "Control",
+        "ControlActivity",
+        "ControlImplementation",
+        "ControlObjective",
+        "ControlResult",
+        "ControlTest",
+        "Decision",
+        "DecisionRight",
+        "Escalation",
+        "EvidenceBasis",
+        "Exception",
+        "Finding",
+        "GovernanceCycle",
+        "GovernanceEntity",
+        "GovernanceForum",
+        "GovernanceProcess",
+        "GovernanceScope",
+        "GovernanceSystem",
+        "Guideline",
+        "Impact",
+        "InfoTechCanon Governance Model",
+        "Likelihood",
+        "Nonconformity",
+        "Obligation",
+        "Policy",
+        "Principle",
+        "RegulatoryReference",
+        "Remediation",
+        "Requirement",
+        "Review",
+        "Risk",
+        "RiskAcceptance",
+        "RiskSource",
+        "RiskTreatment",
+        "Rule",
+        "Waiver"
      ],
      "relationships": [
        {
@ -1593,7 +1828,66 @@
      ],
      "kind": "model",
      "owned_concepts": [
-        "InfoTechCanon Information Space Model"
+        "Anchor",
+        "AssimilationReport",
+        "Backlink",
+        "Block",
+        "BrokenLink",
+        "Chunk",
+        "Citation",
+        "Collection",
+        "ConceptIndex",
+        "ConceptPage",
+        "ConflictingDefinition",
+        "Corpus",
+        "CrossReference",
+        "DependencyReference",
+        "Document",
+        "DuplicateContent",
+        "EmbeddingRecord",
+        "Excerpt",
+        "FrontMatter",
+        "Generation",
+        "GraphView",
+        "Heading",
+        "Index",
+        "InfoTechCanon Information Space Model",
+        "InformationSpace",
+        "Infospace",
+        "KnowledgeArtifact",
+        "KnowledgeBase",
+        "Link",
+        "LowRetrievalQuality",
+        "MapView",
+        "MappingDocument",
+        "MappingReference",
+        "MarkdownDocument",
+        "MetadataRecord",
+        "MissingMetadata",
+        "NavigationView",
+        "OrphanArtifact",
+        "PatternDocument",
+        "ProfileDocument",
+        "RelationshipIndex",
+        "RepositorySpace",
+        "RetrievalContext",
+        "RetrievalEvaluation",
+        "RetrievalQuery",
+        "RetrievalResult",
+        "RetrievalUnit",
+        "ReviewRecord",
+        "Revision",
+        "SearchIndex",
+        "Section",
+        "Shard",
+        "SourceReference",
+        "StaleContent",
+        "StandardDocument",
+        "Status",
+        "Summary",
+        "TopicIndex",
+        "UsePath",
+        "VectorIndex"
      ],
      "relationships": [
        {
@ -1623,7 +1917,19 @@
      ],
      "kind": "model",
      "owned_concepts": [
-        "InfoTechCanon Landscape Model"
+        "ApplicationService",
+        "BusinessService",
+        "Environment",
+        "InfoTechCanon Landscape Model",
+        "LandscapeClaim",
+        "LandscapeEntity",
+        "LandscapeEvidence",
+        "LandscapeRelationship",
+        "LandscapeSource",
+        "LandscapeState",
+        "RuntimeResource",
+        "TechnicalService",
+        "Workload"
      ],
      "relationships": [
        {
@ -1650,7 +1956,82 @@
      ],
      "kind": "model",
      "owned_concepts": [
-        "InfoTechCanon Network Model"
+        "ACL",
+        "AddressFamily",
+        "AllowedFlow",
+        "AppliedNetworkState",
+        "AssessedNetworkState",
+        "AttackSurfaceReference",
+        "Circuit",
+        "ConnectivityService",
+        "DNSRecord",
+        "DNSZone",
+        "DeclaredNetworkState",
+        "DeniedFlow",
+        "EgressEndpoint",
+        "Endpoint",
+        "Firewall",
+        "FirewallRule",
+        "Gateway",
+        "HistoricalNetworkState",
+        "Hostname",
+        "IPAddress",
+        "IPAllocation",
+        "InfoTechCanon Network Model",
+        "IngressEndpoint",
+        "IntendedNetworkState",
+        "Interface",
+        "KubernetesNetworkPolicy",
+        "LoadBalancer",
+        "ManagementEndpoint",
+        "Microsegment",
+        "NAT",
+        "NetworkACL",
+        "NetworkConfiguration",
+        "NetworkDevice",
+        "NetworkDomain",
+        "NetworkEntity",
+        "NetworkFabric",
+        "NetworkFlow",
+        "NetworkIntent",
+        "NetworkNode",
+        "NetworkPolicy",
+        "NetworkRegion",
+        "NetworkSegment",
+        "NetworkSite",
+        "NetworkTenant",
+        "NetworkZone",
+        "NextHop",
+        "ObservedFlow",
+        "ObservedNetworkState",
+        "OverlayNetwork",
+        "Path",
+        "Peering",
+        "Port",
+        "Prefix",
+        "PrivateEndpoint",
+        "Proxy",
+        "PublicEndpoint",
+        "ReachabilityClaim",
+        "ReachabilityTest",
+        "ReconciliationResult",
+        "Route",
+        "RouteTable",
+        "Router",
+        "SecurityGroup",
+        "SecurityZone",
+        "ServiceEndpoint",
+        "ServiceMeshPolicy",
+        "ServiceName",
+        "Subnet",
+        "Switch",
+        "TerminationPoint",
+        "TrafficPolicy",
+        "TrustZoneReference",
+        "UnderlayNetwork",
+        "VLAN",
+        "VRF",
+        "WorkloadEndpoint"
      ],
      "relationships": [
        {
@ -1681,7 +2062,71 @@
      ],
      "kind": "model",
      "owned_concepts": [
-        "InfoTechCanon Observability Model"
+        "Alert",
+        "AlertCorrelation",
+        "AlertRoute",
+        "AlertRule",
+        "AlertSuppression",
+        "Annotation",
+        "AvailabilityWindow",
+        "Baggage",
+        "BurnRate",
+        "Correlation",
+        "Counter",
+        "Dashboard",
+        "ErrorBudget",
+        "EscalationReference",
+        "Event",
+        "EventConsumer",
+        "EventCorrelationKey",
+        "EventEnvelope",
+        "EventSource",
+        "EventType",
+        "Exemplar",
+        "Gauge",
+        "HealthState",
+        "Histogram",
+        "InfoTechCanon Observability Model",
+        "Log",
+        "LogContext",
+        "LogLevel",
+        "LogRecord",
+        "LogStream",
+        "Metric",
+        "MetricInstrument",
+        "MetricPoint",
+        "Notification",
+        "ObservabilityEntity",
+        "ObservabilityEvidence",
+        "ObservedIncident",
+        "ObservedResource",
+        "OperationalView",
+        "PerformanceProfile",
+        "PostIncidentObservation",
+        "ProfilingSample",
+        "Query",
+        "QueryResult",
+        "ResourceAttribute",
+        "ResourceProfile",
+        "RootCauseHypothesis",
+        "Runbook",
+        "SLAReference",
+        "Service Level Indicator",
+        "Service Level Objective",
+        "Signal",
+        "SignalSource",
+        "Snapshot",
+        "Span",
+        "SpanEvent",
+        "SpanLink",
+        "Telemetry",
+        "TelemetryPipeline",
+        "TelemetrySource",
+        "TimeSeries",
+        "Timeline",
+        "Trace",
+        "TraceContext",
+        "TraceSample"
      ],
      "relationships": [
        {
@ -1712,9 +2157,23 @@
      ],
      "kind": "model",
      "owned_concepts": [
+        "Accountability",
+        "Actor",
+        "Agent",
+        "Authority",
        "Community",
        "Household",
-        "InfoTechCanon Organization Model"
+        "InfoTechCanon Organization Model",
+        "Membership",
+        "Organization",
+        "OrganizationalUnit",
+        "Ownership",
+        "Person",
+        "Position",
+        "Responsibility",
+        "Role",
+        "Stewardship",
+        "Team"
      ],
      "relationships": [
        {
@ -1793,7 +2252,58 @@
      ],
      "kind": "model",
      "owned_concepts": [
-        "InfoTechCanon Security Model"
+        "AttackImpact",
+        "AttackPath",
+        "AttackPattern",
+        "AttackPrecondition",
+        "AttackStep",
+        "AttackTechnique",
+        "BlastRadius",
+        "ChokePoint",
+        "CompensatingMeasure",
+        "Containment",
+        "DataSecurityFinding",
+        "Detection",
+        "DetectionCoverage",
+        "DetectionRule",
+        "Eradication",
+        "Exploit",
+        "ExploitLikelihood",
+        "Exploitability",
+        "Exposure",
+        "ExposureFinding",
+        "HardeningMeasure",
+        "IdentityFinding",
+        "InfoTechCanon Security Model",
+        "Investigation",
+        "LessonLearned",
+        "Misconfiguration",
+        "MisconfigurationFinding",
+        "Mitigation",
+        "PenTestFinding",
+        "ProtectedAssetReference",
+        "Recovery",
+        "SecurityAssessment",
+        "SecurityBoundary",
+        "SecurityDomain",
+        "SecurityEntity",
+        "SecurityEvidence",
+        "SecurityFinding",
+        "SecurityIncident",
+        "SecurityMeasure",
+        "SecurityPosture",
+        "SecurityPostureScore",
+        "SecurityReview",
+        "SecuritySignal",
+        "Severity",
+        "SupplyChainFinding",
+        "Tactic",
+        "Threat",
+        "ThreatActor",
+        "ThreatEvent",
+        "Vulnerability",
+        "VulnerabilityFinding",
+        "Weakness"
      ],
      "relationships": [
        {
@ -1823,7 +2333,59 @@
      ],
      "kind": "model",
      "owned_concepts": [
-        "InfoTechCanon Task Model"
+        "AcceptanceCriteria",
+        "Action",
+        "Actionability",
+        "ApprovalTask",
+        "AssignmentReference",
+        "Backlog",
+        "Blocker",
+        "Bug",
+        "ChangeTask",
+        "Commitment",
+        "CompletionEvidence",
+        "Complexity",
+        "Deadline",
+        "DecisionTask",
+        "DefinitionOfDone",
+        "DefinitionOfReady",
+        "Deliverable",
+        "Dependency",
+        "DueDate",
+        "EffortEstimate",
+        "Epic",
+        "Experiment",
+        "Exploration",
+        "Feature",
+        "Importance",
+        "IncidentTask",
+        "InfoTechCanon Task Model",
+        "Issue",
+        "Milestone",
+        "Move",
+        "NextAction",
+        "Option",
+        "Outcome",
+        "Priority",
+        "ProblemTask",
+        "Reachability",
+        "Readiness",
+        "RemediationTask",
+        "Request",
+        "ReviewTask",
+        "Step",
+        "Story",
+        "Task",
+        "TaskEntity",
+        "Transition",
+        "Urgency",
+        "Value",
+        "WIPLimit",
+        "WaitingFor",
+        "WorkItem",
+        "WorkPackage",
+        "Workflow",
+        "WorkflowState"
      ],
      "relationships": [
        {
@ -3005,7 +3567,31 @@
      ],
      "kind": "standard",
      "owned_concepts": [
-        "InfoTechCanon Tagging Standard"
+        "ControlledTag",
+        "DeprecatedTag",
+        "EmergentTag",
+        "InfoTechCanon Tagging Standard",
+        "OverTaggedEntity",
+        "Tag",
+        "TagAlias",
+        "TagAssignment",
+        "TagCategory",
+        "TagConflict",
+        "TagDefinition",
+        "TagDrift",
+        "TagKey",
+        "TagMapping",
+        "TagNamespace",
+        "TagProfile",
+        "TagQuery",
+        "TagRule",
+        "TagScheme",
+        "TagSelector",
+        "TagSet",
+        "TagValue",
+        "TagView",
+        "TaggingEntity",
+        "UntaggedEntity"
      ],
      "relationships": [
        {
--- a/infospace/agent/retrieval-index.md
+++ b/infospace/agent/retrieval-index.md
@ -335,7 +335,7 @@ Items: **81**
 - Source path: `seeds/InfoTechCanonCore_RC1_seed.md`
 - Summary: Kernel artifact that defines canon structure or integration: InfoTechCanon Core.
 - Imports and anchors: none
- Owned concepts: `InfoTechCanon Core`
+- Owned concepts: `Activity`, `AgentBrief`, `AgentReference`, `Alias`, `Ambiguity`, `Assimilation`, `CanonArtifact`, `CanonInterfaceCard`, `Canonical Owner`, `ChangeRecord`, `Concept`, `Conflict`, `ConformanceLevel`, `DecisionRecord`, `Drift`, `ExternalReference`, `Gap`, `Import`, `Influence`, `InfoTechCanon Core`, `Label`, `Mapping`, `Namespace`, `OpenQuestion`, `Overlap`, `Pattern`, `ProvenanceRecord`, `RelationshipDefinition`, `Source`, `Standard`, `ValidationResult`, `ValidationRule`, `Version`, `VersionRecord`

 ### InfoTechCanon Kernel Map

@ -385,7 +385,7 @@ Items: **81**
 - Source path: `seeds/InfoTechCanonAccessControlModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Access Control Model.
 - Imports and anchors: `kernel/itc-core`, `model/evidence`, `model/governance`, `model/identity`, `model/organization`
- Owned concepts: `InfoTechCanon Access Control Model`
+- Owned concepts: `AccessCertification`, `AccessControlEntity`, `AccessFinding`, `AccessRemediation`, `AccessReview`, `AccessRole`, `AccessSession`, `AgentAccess`, `AuthenticatedSubject`, `AuthenticationStrengthReference`, `AuthorizationDecision`, `AuthorizationRequest`, `BreakGlassAccess`, `Condition`, `CredentialReference`, `DecisionReason`, `DelegatedAccess`, `Denial`, `Entitlement`, `EvaluationContext`, `ExcessAccess`, `Grant`, `IdentityReference`, `InfoTechCanon Access Control Model`, `JustInTimeAccess`, `Operation`, `OrphanedAccess`, `Permission`, `PolicyAdministrationPoint`, `PolicyBinding`, `PolicyDecisionPoint`, `PolicyEnforcementPoint`, `PolicyInformationPoint`, `PolicyRetrievalPoint`, `Principal`, `Privilege`, `ProtectedResource`, `RelationshipTuple`, `Resource`, `ResourceAction`, `ResourceScope`, `RoleBinding`, `ServiceAccountAccess`, `StaleAccess`, `Subject`, `TemporaryAccess`, `TokenReference`

 ### InfoTechCanon Capability Model

@ -405,7 +405,7 @@ Items: **81**
 - Source path: `seeds/InfoTechCanonDataModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Data Model.
 - Imports and anchors: `kernel/itc-core`, `model/evidence`, `model/governance`
- Owned concepts: `InfoTechCanon Data Model`
+- Owned concepts: `Attribute`, `AttributeValueType`, `BreakingChange`, `BusinessTerm`, `CodeList`, `CompatibilityRule`, `Constraint`, `ConsumerExpectation`, `DataAccessPattern`, `DataAvailability`, `DataCategory`, `DataClassification`, `DataContract`, `DataDefinition`, `DataDistribution`, `DataDomain`, `DataElement`, `DataElementConcept`, `DataEntity`, `DataFlow`, `DataFreshness`, `DataLineage`, `DataObject`, `DataProduct`, `DataQualityCheck`, `DataQualityDimension`, `DataQualityIssue`, `DataQualityResult`, `DataQualityRule`, `DataResidency`, `DataService`, `DataStoreReference`, `DataSubjectCategory`, `DataType`, `DataUsageConstraint`, `Dataset`, `DatasetSeries`, `Derivation`, `Field`, `FitnessForUse`, `GlossaryTerm`, `InfoTechCanon Data Model`, `MasterDataReference`, `ProcessingPurpose`, `ProducerExpectation`, `Record`, `ReferenceData`, `Representation`, `RetentionRuleReference`, `SchemaEvolutionPolicy`, `Sensitivity`, `Transformation`

 ### InfoTechCanon DevSecOps Model

@ -415,7 +415,7 @@ Items: **81**
 - Source path: `seeds/InfoTechCanonDevSecOpsModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon DevSecOps Model.
 - Imports and anchors: `kernel/itc-core`, `model/evidence`, `model/security`
- Owned concepts: `InfoTechCanon DevSecOps Model`
+- Owned concepts: `AgentExecutionEvidence`, `AgentGeneratedPatch`, `AgentReview`, `Artifact`, `ArtifactDigest`, `ArtifactVersion`, `Attestation`, `Branch`, `ChangeFailure`, `CodeReview`, `CodingAgentChange`, `Commit`, `ContainerImage`, `DeliveryMetric`, `DeploymentExecution`, `DeploymentHealthSignal`, `DeploymentManifest`, `DeploymentPlan`, `DeploymentRecord`, `DeploymentVerification`, `DevSecOpsEntity`, `EnvironmentPromotion`, `FeedbackLoop`, `GateDecision`, `HumanSupervisionReference`, `IaCModule`, `InfoTechCanon DevSecOps Model`, `Package`, `Pipeline`, `PipelineDefinition`, `PipelineIdentity`, `PipelineJob`, `PipelineResult`, `PipelineRun`, `PipelineStage`, `PipelineStep`, `PolicyGate`, `Promotion`, `Provenance`, `PullRequest`, `QualityGate`, `RecoveryAction`, `Release`, `ReleaseApprovalReference`, `ReleaseCandidate`, `ReleaseNote`, `ReleaseVersion`, `Repository`, `Rollback`, `RolloutStrategy`, `Runner`, `ScanResult`, `ScanRun`, `Signature`, `Software Bill of Materials`, `SourceChange`, `SourceTag`, `SupplyChainEvidence`, `TestResult`, `TestRun`, `TransparencyLogEntry`, `VEXReference`, `VerificationEvidence`

 ### InfoTechCanon Evidence Model

@ -435,7 +435,7 @@ Items: **81**
 - Source path: `seeds/InfoTechCanonGovernanceModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Governance Model.
 - Imports and anchors: `kernel/itc-core`, `model/evidence`
- Owned concepts: `InfoTechCanon Governance Model`
+- Owned concepts: `Approval`, `Assertion`, `Assessment`, `AssuranceCase`, `AssuranceConclusion`, `Audit`, `CompensatingControl`, `ComplianceRequirement`, `Control`, `ControlActivity`, `ControlImplementation`, `ControlObjective`, `ControlResult`, `ControlTest`, `Decision`, `DecisionRight`, `Escalation`, `EvidenceBasis`, `Exception`, `Finding`, `GovernanceCycle`, `GovernanceEntity`, `GovernanceForum`, `GovernanceProcess`, `GovernanceScope`, `GovernanceSystem`, `Guideline`, `Impact`, `InfoTechCanon Governance Model`, `Likelihood`, `Nonconformity`, `Obligation`, `Policy`, `Principle`, `RegulatoryReference`, `Remediation`, `Requirement`, `Review`, `Risk`, `RiskAcceptance`, `RiskSource`, `RiskTreatment`, `Rule`, `Waiver`

 ### InfoTechCanon Identity Model

@ -455,7 +455,7 @@ Items: **81**
 - Source path: `seeds/InfoTechCanonInformationSpaceModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Information Space Model.
 - Imports and anchors: `kernel/itc-core`, `model/evidence`, `model/identity`
- Owned concepts: `InfoTechCanon Information Space Model`
+- Owned concepts: `Anchor`, `AssimilationReport`, `Backlink`, `Block`, `BrokenLink`, `Chunk`, `Citation`, `Collection`, `ConceptIndex`, `ConceptPage`, `ConflictingDefinition`, `Corpus`, `CrossReference`, `DependencyReference`, `Document`, `DuplicateContent`, `EmbeddingRecord`, `Excerpt`, `FrontMatter`, `Generation`, `GraphView`, `Heading`, `Index`, `InfoTechCanon Information Space Model`, `InformationSpace`, `Infospace`, `KnowledgeArtifact`, `KnowledgeBase`, `Link`, `LowRetrievalQuality`, `MapView`, `MappingDocument`, `MappingReference`, `MarkdownDocument`, `MetadataRecord`, `MissingMetadata`, `NavigationView`, `OrphanArtifact`, `PatternDocument`, `ProfileDocument`, `RelationshipIndex`, `RepositorySpace`, `RetrievalContext`, `RetrievalEvaluation`, `RetrievalQuery`, `RetrievalResult`, `RetrievalUnit`, `ReviewRecord`, `Revision`, `SearchIndex`, `Section`, `Shard`, `SourceReference`, `StaleContent`, `StandardDocument`, `Status`, `Summary`, `TopicIndex`, `UsePath`, `VectorIndex`

 ### InfoTechCanon Landscape Model

@ -465,7 +465,7 @@ Items: **81**
 - Source path: `seeds/InfoTechCanonLandscapeModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Landscape Model.
 - Imports and anchors: `kernel/itc-core`, `model/evidence`
- Owned concepts: `InfoTechCanon Landscape Model`
+- Owned concepts: `ApplicationService`, `BusinessService`, `Environment`, `InfoTechCanon Landscape Model`, `LandscapeClaim`, `LandscapeEntity`, `LandscapeEvidence`, `LandscapeRelationship`, `LandscapeSource`, `LandscapeState`, `RuntimeResource`, `TechnicalService`, `Workload`

 ### InfoTechCanon Network Model

@ -475,7 +475,7 @@ Items: **81**
 - Source path: `seeds/InfoTechCanonNetworkModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Network Model.
 - Imports and anchors: `kernel/itc-core`, `model/evidence`, `model/security`
- Owned concepts: `InfoTechCanon Network Model`
+- Owned concepts: `ACL`, `AddressFamily`, `AllowedFlow`, `AppliedNetworkState`, `AssessedNetworkState`, `AttackSurfaceReference`, `Circuit`, `ConnectivityService`, `DNSRecord`, `DNSZone`, `DeclaredNetworkState`, `DeniedFlow`, `EgressEndpoint`, `Endpoint`, `Firewall`, `FirewallRule`, `Gateway`, `HistoricalNetworkState`, `Hostname`, `IPAddress`, `IPAllocation`, `InfoTechCanon Network Model`, `IngressEndpoint`, `IntendedNetworkState`, `Interface`, `KubernetesNetworkPolicy`, `LoadBalancer`, `ManagementEndpoint`, `Microsegment`, `NAT`, `NetworkACL`, `NetworkConfiguration`, `NetworkDevice`, `NetworkDomain`, `NetworkEntity`, `NetworkFabric`, `NetworkFlow`, `NetworkIntent`, `NetworkNode`, `NetworkPolicy`, `NetworkRegion`, `NetworkSegment`, `NetworkSite`, `NetworkTenant`, `NetworkZone`, `NextHop`, `ObservedFlow`, `ObservedNetworkState`, `OverlayNetwork`, `Path`, `Peering`, `Port`, `Prefix`, `PrivateEndpoint`, `Proxy`, `PublicEndpoint`, `ReachabilityClaim`, `ReachabilityTest`, `ReconciliationResult`, `Route`, `RouteTable`, `Router`, `SecurityGroup`, `SecurityZone`, `ServiceEndpoint`, `ServiceMeshPolicy`, `ServiceName`, `Subnet`, `Switch`, `TerminationPoint`, `TrafficPolicy`, `TrustZoneReference`, `UnderlayNetwork`, `VLAN`, `VRF`, `WorkloadEndpoint`

 ### InfoTechCanon Observability Model

@ -485,7 +485,7 @@ Items: **81**
 - Source path: `seeds/InfoTechCanonObservabilityModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Observability Model.
 - Imports and anchors: `kernel/itc-core`, `model/evidence`, `model/task`
- Owned concepts: `InfoTechCanon Observability Model`
+- Owned concepts: `Alert`, `AlertCorrelation`, `AlertRoute`, `AlertRule`, `AlertSuppression`, `Annotation`, `AvailabilityWindow`, `Baggage`, `BurnRate`, `Correlation`, `Counter`, `Dashboard`, `ErrorBudget`, `EscalationReference`, `Event`, `EventConsumer`, `EventCorrelationKey`, `EventEnvelope`, `EventSource`, `EventType`, `Exemplar`, `Gauge`, `HealthState`, `Histogram`, `InfoTechCanon Observability Model`, `Log`, `LogContext`, `LogLevel`, `LogRecord`, `LogStream`, `Metric`, `MetricInstrument`, `MetricPoint`, `Notification`, `ObservabilityEntity`, `ObservabilityEvidence`, `ObservedIncident`, `ObservedResource`, `OperationalView`, `PerformanceProfile`, `PostIncidentObservation`, `ProfilingSample`, `Query`, `QueryResult`, `ResourceAttribute`, `ResourceProfile`, `RootCauseHypothesis`, `Runbook`, `SLAReference`, `Service Level Indicator`, `Service Level Objective`, `Signal`, `SignalSource`, `Snapshot`, `Span`, `SpanEvent`, `SpanLink`, `Telemetry`, `TelemetryPipeline`, `TelemetrySource`, `TimeSeries`, `Timeline`, `Trace`, `TraceContext`, `TraceSample`

 ### InfoTechCanon Organization Model

@ -495,7 +495,7 @@ Items: **81**
 - Source path: `seeds/InfoTechCanonOrganizationModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Organization Model.
 - Imports and anchors: `kernel/itc-core`, `model/evidence`, `model/identity`
- Owned concepts: `Community`, `Household`, `InfoTechCanon Organization Model`
+- Owned concepts: `Accountability`, `Actor`, `Agent`, `Authority`, `Community`, `Household`, `InfoTechCanon Organization Model`, `Membership`, `Organization`, `OrganizationalUnit`, `Ownership`, `Person`, `Position`, `Responsibility`, `Role`, `Stewardship`, `Team`

 ### InfoTechCanon Purpose And Demand Model Extension

@ -515,7 +515,7 @@ Items: **81**
 - Source path: `seeds/InfoTechCanonSecurityModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Security Model.
 - Imports and anchors: `kernel/itc-core`, `model/access-control`, `model/evidence`
- Owned concepts: `InfoTechCanon Security Model`
+- Owned concepts: `AttackImpact`, `AttackPath`, `AttackPattern`, `AttackPrecondition`, `AttackStep`, `AttackTechnique`, `BlastRadius`, `ChokePoint`, `CompensatingMeasure`, `Containment`, `DataSecurityFinding`, `Detection`, `DetectionCoverage`, `DetectionRule`, `Eradication`, `Exploit`, `ExploitLikelihood`, `Exploitability`, `Exposure`, `ExposureFinding`, `HardeningMeasure`, `IdentityFinding`, `InfoTechCanon Security Model`, `Investigation`, `LessonLearned`, `Misconfiguration`, `MisconfigurationFinding`, `Mitigation`, `PenTestFinding`, `ProtectedAssetReference`, `Recovery`, `SecurityAssessment`, `SecurityBoundary`, `SecurityDomain`, `SecurityEntity`, `SecurityEvidence`, `SecurityFinding`, `SecurityIncident`, `SecurityMeasure`, `SecurityPosture`, `SecurityPostureScore`, `SecurityReview`, `SecuritySignal`, `Severity`, `SupplyChainFinding`, `Tactic`, `Threat`, `ThreatActor`, `ThreatEvent`, `Vulnerability`, `VulnerabilityFinding`, `Weakness`

 ### InfoTechCanon Task Model

@ -525,7 +525,7 @@ Items: **81**
 - Source path: `seeds/InfoTechCanonTaskModel_RC1_seed.md`
 - Summary: Domain model used by canon profiles and standards: InfoTechCanon Task Model.
 - Imports and anchors: `kernel/itc-core`, `model/evidence`
- Owned concepts: `InfoTechCanon Task Model`
+- Owned concepts: `AcceptanceCriteria`, `Action`, `Actionability`, `ApprovalTask`, `AssignmentReference`, `Backlog`, `Blocker`, `Bug`, `ChangeTask`, `Commitment`, `CompletionEvidence`, `Complexity`, `Deadline`, `DecisionTask`, `DefinitionOfDone`, `DefinitionOfReady`, `Deliverable`, `Dependency`, `DueDate`, `EffortEstimate`, `Epic`, `Experiment`, `Exploration`, `Feature`, `Importance`, `IncidentTask`, `InfoTechCanon Task Model`, `Issue`, `Milestone`, `Move`, `NextAction`, `Option`, `Outcome`, `Priority`, `ProblemTask`, `Reachability`, `Readiness`, `RemediationTask`, `Request`, `ReviewTask`, `Step`, `Story`, `Task`, `TaskEntity`, `Transition`, `Urgency`, `Value`, `WIPLimit`, `WaitingFor`, `WorkItem`, `WorkPackage`, `Workflow`, `WorkflowState`

 ### Intent Scope Purposes Pattern

@ -825,4 +825,4 @@ Items: **81**
 - Source path: `seeds/InfoTechCanonTaggingStandard_RC1_seed.md`
 - Summary: Cross-cutting canon standard: InfoTechCanon Tagging Standard.
 - Imports and anchors: `kernel/itc-core`, `model/evidence`, `model/task`
- Owned concepts: `InfoTechCanon Tagging Standard`
+- Owned concepts: `ControlledTag`, `DeprecatedTag`, `EmergentTag`, `InfoTechCanon Tagging Standard`, `OverTaggedEntity`, `Tag`, `TagAlias`, `TagAssignment`, `TagCategory`, `TagConflict`, `TagDefinition`, `TagDrift`, `TagKey`, `TagMapping`, `TagNamespace`, `TagProfile`, `TagQuery`, `TagRule`, `TagScheme`, `TagSelector`, `TagSet`, `TagValue`, `TagView`, `TaggingEntity`, `UntaggedEntity`
--- a/infospace/agent/retrieval-index.yaml
+++ b/infospace/agent/retrieval-index.yaml
@ -689,7 +689,40 @@ items:
  summary: 'Kernel artifact that defines canon structure or integration: InfoTechCanon
    Core.'
  owned_concepts:
+  - Activity
+  - AgentBrief
+  - AgentReference
+  - Alias
+  - Ambiguity
+  - Assimilation
+  - CanonArtifact
+  - CanonInterfaceCard
+  - Canonical Owner
+  - ChangeRecord
+  - Concept
+  - Conflict
+  - ConformanceLevel
+  - DecisionRecord
+  - Drift
+  - ExternalReference
+  - Gap
+  - Import
+  - Influence
  - InfoTechCanon Core
+  - Label
+  - Mapping
+  - Namespace
+  - OpenQuestion
+  - Overlap
+  - Pattern
+  - ProvenanceRecord
+  - RelationshipDefinition
+  - Source
+  - Standard
+  - ValidationResult
+  - ValidationRule
+  - Version
+  - VersionRecord
  imports: []
  relationships: []
  warnings: []
@ -798,7 +831,53 @@ items:
  summary: 'Domain model used by canon profiles and standards: InfoTechCanon Access
    Control Model.'
  owned_concepts:
+  - AccessCertification
+  - AccessControlEntity
+  - AccessFinding
+  - AccessRemediation
+  - AccessReview
+  - AccessRole
+  - AccessSession
+  - AgentAccess
+  - AuthenticatedSubject
+  - AuthenticationStrengthReference
+  - AuthorizationDecision
+  - AuthorizationRequest
+  - BreakGlassAccess
+  - Condition
+  - CredentialReference
+  - DecisionReason
+  - DelegatedAccess
+  - Denial
+  - Entitlement
+  - EvaluationContext
+  - ExcessAccess
+  - Grant
+  - IdentityReference
  - InfoTechCanon Access Control Model
+  - JustInTimeAccess
+  - Operation
+  - OrphanedAccess
+  - Permission
+  - PolicyAdministrationPoint
+  - PolicyBinding
+  - PolicyDecisionPoint
+  - PolicyEnforcementPoint
+  - PolicyInformationPoint
+  - PolicyRetrievalPoint
+  - Principal
+  - Privilege
+  - ProtectedResource
+  - RelationshipTuple
+  - Resource
+  - ResourceAction
+  - ResourceScope
+  - RoleBinding
+  - ServiceAccountAccess
+  - StaleAccess
+  - Subject
+  - TemporaryAccess
+  - TokenReference
  imports:
  - kernel/itc-core
  - model/evidence
@ -877,7 +956,58 @@ items:
  summary: 'Domain model used by canon profiles and standards: InfoTechCanon Data
    Model.'
  owned_concepts:
+  - Attribute
+  - AttributeValueType
+  - BreakingChange
+  - BusinessTerm
+  - CodeList
+  - CompatibilityRule
+  - Constraint
+  - ConsumerExpectation
+  - DataAccessPattern
+  - DataAvailability
+  - DataCategory
+  - DataClassification
+  - DataContract
+  - DataDefinition
+  - DataDistribution
+  - DataDomain
+  - DataElement
+  - DataElementConcept
+  - DataEntity
+  - DataFlow
+  - DataFreshness
+  - DataLineage
+  - DataObject
+  - DataProduct
+  - DataQualityCheck
+  - DataQualityDimension
+  - DataQualityIssue
+  - DataQualityResult
+  - DataQualityRule
+  - DataResidency
+  - DataService
+  - DataStoreReference
+  - DataSubjectCategory
+  - DataType
+  - DataUsageConstraint
+  - Dataset
+  - DatasetSeries
+  - Derivation
+  - Field
+  - FitnessForUse
+  - GlossaryTerm
  - InfoTechCanon Data Model
+  - MasterDataReference
+  - ProcessingPurpose
+  - ProducerExpectation
+  - Record
+  - ReferenceData
+  - Representation
+  - RetentionRuleReference
+  - SchemaEvolutionPolicy
+  - Sensitivity
+  - Transformation
  imports:
  - kernel/itc-core
  - model/evidence
@ -900,7 +1030,69 @@ items:
  summary: 'Domain model used by canon profiles and standards: InfoTechCanon DevSecOps
    Model.'
  owned_concepts:
+  - AgentExecutionEvidence
+  - AgentGeneratedPatch
+  - AgentReview
+  - Artifact
+  - ArtifactDigest
+  - ArtifactVersion
+  - Attestation
+  - Branch
+  - ChangeFailure
+  - CodeReview
+  - CodingAgentChange
+  - Commit
+  - ContainerImage
+  - DeliveryMetric
+  - DeploymentExecution
+  - DeploymentHealthSignal
+  - DeploymentManifest
+  - DeploymentPlan
+  - DeploymentRecord
+  - DeploymentVerification
+  - DevSecOpsEntity
+  - EnvironmentPromotion
+  - FeedbackLoop
+  - GateDecision
+  - HumanSupervisionReference
+  - IaCModule
  - InfoTechCanon DevSecOps Model
+  - Package
+  - Pipeline
+  - PipelineDefinition
+  - PipelineIdentity
+  - PipelineJob
+  - PipelineResult
+  - PipelineRun
+  - PipelineStage
+  - PipelineStep
+  - PolicyGate
+  - Promotion
+  - Provenance
+  - PullRequest
+  - QualityGate
+  - RecoveryAction
+  - Release
+  - ReleaseApprovalReference
+  - ReleaseCandidate
+  - ReleaseNote
+  - ReleaseVersion
+  - Repository
+  - Rollback
+  - RolloutStrategy
+  - Runner
+  - ScanResult
+  - ScanRun
+  - Signature
+  - Software Bill of Materials
+  - SourceChange
+  - SourceTag
+  - SupplyChainEvidence
+  - TestResult
+  - TestRun
+  - TransparencyLogEntry
+  - VEXReference
+  - VerificationEvidence
  imports:
  - kernel/itc-core
  - model/evidence
@ -940,7 +1132,50 @@ items:
  summary: 'Domain model used by canon profiles and standards: InfoTechCanon Governance
    Model.'
  owned_concepts:
+  - Approval
+  - Assertion
+  - Assessment
+  - AssuranceCase
+  - AssuranceConclusion
+  - Audit
+  - CompensatingControl
+  - ComplianceRequirement
+  - Control
+  - ControlActivity
+  - ControlImplementation
+  - ControlObjective
+  - ControlResult
+  - ControlTest
+  - Decision
+  - DecisionRight
+  - Escalation
+  - EvidenceBasis
+  - Exception
+  - Finding
+  - GovernanceCycle
+  - GovernanceEntity
+  - GovernanceForum
+  - GovernanceProcess
+  - GovernanceScope
+  - GovernanceSystem
+  - Guideline
+  - Impact
  - InfoTechCanon Governance Model
+  - Likelihood
+  - Nonconformity
+  - Obligation
+  - Policy
+  - Principle
+  - RegulatoryReference
+  - Remediation
+  - Requirement
+  - Review
+  - Risk
+  - RiskAcceptance
+  - RiskSource
+  - RiskTreatment
+  - Rule
+  - Waiver
  imports:
  - kernel/itc-core
  - model/evidence
@ -1007,7 +1242,66 @@ items:
  summary: 'Domain model used by canon profiles and standards: InfoTechCanon Information
    Space Model.'
  owned_concepts:
+  - Anchor
+  - AssimilationReport
+  - Backlink
+  - Block
+  - BrokenLink
+  - Chunk
+  - Citation
+  - Collection
+  - ConceptIndex
+  - ConceptPage
+  - ConflictingDefinition
+  - Corpus
+  - CrossReference
+  - DependencyReference
+  - Document
+  - DuplicateContent
+  - EmbeddingRecord
+  - Excerpt
+  - FrontMatter
+  - Generation
+  - GraphView
+  - Heading
+  - Index
  - InfoTechCanon Information Space Model
+  - InformationSpace
+  - Infospace
+  - KnowledgeArtifact
+  - KnowledgeBase
+  - Link
+  - LowRetrievalQuality
+  - MapView
+  - MappingDocument
+  - MappingReference
+  - MarkdownDocument
+  - MetadataRecord
+  - MissingMetadata
+  - NavigationView
+  - OrphanArtifact
+  - PatternDocument
+  - ProfileDocument
+  - RelationshipIndex
+  - RepositorySpace
+  - RetrievalContext
+  - RetrievalEvaluation
+  - RetrievalQuery
+  - RetrievalResult
+  - RetrievalUnit
+  - ReviewRecord
+  - Revision
+  - SearchIndex
+  - Section
+  - Shard
+  - SourceReference
+  - StaleContent
+  - StandardDocument
+  - Status
+  - Summary
+  - TopicIndex
+  - UsePath
+  - VectorIndex
  imports:
  - kernel/itc-core
  - model/evidence
@ -1028,7 +1322,19 @@ items:
  summary: 'Domain model used by canon profiles and standards: InfoTechCanon Landscape
    Model.'
  owned_concepts:
+  - ApplicationService
+  - BusinessService
+  - Environment
  - InfoTechCanon Landscape Model
+  - LandscapeClaim
+  - LandscapeEntity
+  - LandscapeEvidence
+  - LandscapeRelationship
+  - LandscapeSource
+  - LandscapeState
+  - RuntimeResource
+  - TechnicalService
+  - Workload
  imports:
  - kernel/itc-core
  - model/evidence
@ -1046,7 +1352,82 @@ items:
  summary: 'Domain model used by canon profiles and standards: InfoTechCanon Network
    Model.'
  owned_concepts:
+  - ACL
+  - AddressFamily
+  - AllowedFlow
+  - AppliedNetworkState
+  - AssessedNetworkState
+  - AttackSurfaceReference
+  - Circuit
+  - ConnectivityService
+  - DNSRecord
+  - DNSZone
+  - DeclaredNetworkState
+  - DeniedFlow
+  - EgressEndpoint
+  - Endpoint
+  - Firewall
+  - FirewallRule
+  - Gateway
+  - HistoricalNetworkState
+  - Hostname
+  - IPAddress
+  - IPAllocation
  - InfoTechCanon Network Model
+  - IngressEndpoint
+  - IntendedNetworkState
+  - Interface
+  - KubernetesNetworkPolicy
+  - LoadBalancer
+  - ManagementEndpoint
+  - Microsegment
+  - NAT
+  - NetworkACL
+  - NetworkConfiguration
+  - NetworkDevice
+  - NetworkDomain
+  - NetworkEntity
+  - NetworkFabric
+  - NetworkFlow
+  - NetworkIntent
+  - NetworkNode
+  - NetworkPolicy
+  - NetworkRegion
+  - NetworkSegment
+  - NetworkSite
+  - NetworkTenant
+  - NetworkZone
+  - NextHop
+  - ObservedFlow
+  - ObservedNetworkState
+  - OverlayNetwork
+  - Path
+  - Peering
+  - Port
+  - Prefix
+  - PrivateEndpoint
+  - Proxy
+  - PublicEndpoint
+  - ReachabilityClaim
+  - ReachabilityTest
+  - ReconciliationResult
+  - Route
+  - RouteTable
+  - Router
+  - SecurityGroup
+  - SecurityZone
+  - ServiceEndpoint
+  - ServiceMeshPolicy
+  - ServiceName
+  - Subnet
+  - Switch
+  - TerminationPoint
+  - TrafficPolicy
+  - TrustZoneReference
+  - UnderlayNetwork
+  - VLAN
+  - VRF
+  - WorkloadEndpoint
  imports:
  - kernel/itc-core
  - model/evidence
@ -1067,7 +1448,71 @@ items:
  summary: 'Domain model used by canon profiles and standards: InfoTechCanon Observability
    Model.'
  owned_concepts:
+  - Alert
+  - AlertCorrelation
+  - AlertRoute
+  - AlertRule
+  - AlertSuppression
+  - Annotation
+  - AvailabilityWindow
+  - Baggage
+  - BurnRate
+  - Correlation
+  - Counter
+  - Dashboard
+  - ErrorBudget
+  - EscalationReference
+  - Event
+  - EventConsumer
+  - EventCorrelationKey
+  - EventEnvelope
+  - EventSource
+  - EventType
+  - Exemplar
+  - Gauge
+  - HealthState
+  - Histogram
  - InfoTechCanon Observability Model
+  - Log
+  - LogContext
+  - LogLevel
+  - LogRecord
+  - LogStream
+  - Metric
+  - MetricInstrument
+  - MetricPoint
+  - Notification
+  - ObservabilityEntity
+  - ObservabilityEvidence
+  - ObservedIncident
+  - ObservedResource
+  - OperationalView
+  - PerformanceProfile
+  - PostIncidentObservation
+  - ProfilingSample
+  - Query
+  - QueryResult
+  - ResourceAttribute
+  - ResourceProfile
+  - RootCauseHypothesis
+  - Runbook
+  - SLAReference
+  - Service Level Indicator
+  - Service Level Objective
+  - Signal
+  - SignalSource
+  - Snapshot
+  - Span
+  - SpanEvent
+  - SpanLink
+  - Telemetry
+  - TelemetryPipeline
+  - TelemetrySource
+  - TimeSeries
+  - Timeline
+  - Trace
+  - TraceContext
+  - TraceSample
  imports:
  - kernel/itc-core
  - model/evidence
@ -1088,9 +1533,23 @@ items:
  summary: 'Domain model used by canon profiles and standards: InfoTechCanon Organization
    Model.'
  owned_concepts:
+  - Accountability
+  - Actor
+  - Agent
+  - Authority
  - Community
  - Household
  - InfoTechCanon Organization Model
+  - Membership
+  - Organization
+  - OrganizationalUnit
+  - Ownership
+  - Person
+  - Position
+  - Responsibility
+  - Role
+  - Stewardship
+  - Team
  imports:
  - kernel/itc-core
  - model/evidence
@ -1145,7 +1604,58 @@ items:
  summary: 'Domain model used by canon profiles and standards: InfoTechCanon Security
    Model.'
  owned_concepts:
+  - AttackImpact
+  - AttackPath
+  - AttackPattern
+  - AttackPrecondition
+  - AttackStep
+  - AttackTechnique
+  - BlastRadius
+  - ChokePoint
+  - CompensatingMeasure
+  - Containment
+  - DataSecurityFinding
+  - Detection
+  - DetectionCoverage
+  - DetectionRule
+  - Eradication
+  - Exploit
+  - ExploitLikelihood
+  - Exploitability
+  - Exposure
+  - ExposureFinding
+  - HardeningMeasure
+  - IdentityFinding
  - InfoTechCanon Security Model
+  - Investigation
+  - LessonLearned
+  - Misconfiguration
+  - MisconfigurationFinding
+  - Mitigation
+  - PenTestFinding
+  - ProtectedAssetReference
+  - Recovery
+  - SecurityAssessment
+  - SecurityBoundary
+  - SecurityDomain
+  - SecurityEntity
+  - SecurityEvidence
+  - SecurityFinding
+  - SecurityIncident
+  - SecurityMeasure
+  - SecurityPosture
+  - SecurityPostureScore
+  - SecurityReview
+  - SecuritySignal
+  - Severity
+  - SupplyChainFinding
+  - Tactic
+  - Threat
+  - ThreatActor
+  - ThreatEvent
+  - Vulnerability
+  - VulnerabilityFinding
+  - Weakness
  imports:
  - kernel/itc-core
  - model/access-control
@ -1166,7 +1676,59 @@ items:
  summary: 'Domain model used by canon profiles and standards: InfoTechCanon Task
    Model.'
  owned_concepts:
+  - AcceptanceCriteria
+  - Action
+  - Actionability
+  - ApprovalTask
+  - AssignmentReference
+  - Backlog
+  - Blocker
+  - Bug
+  - ChangeTask
+  - Commitment
+  - CompletionEvidence
+  - Complexity
+  - Deadline
+  - DecisionTask
+  - DefinitionOfDone
+  - DefinitionOfReady
+  - Deliverable
+  - Dependency
+  - DueDate
+  - EffortEstimate
+  - Epic
+  - Experiment
+  - Exploration
+  - Feature
+  - Importance
+  - IncidentTask
  - InfoTechCanon Task Model
+  - Issue
+  - Milestone
+  - Move
+  - NextAction
+  - Option
+  - Outcome
+  - Priority
+  - ProblemTask
+  - Reachability
+  - Readiness
+  - RemediationTask
+  - Request
+  - ReviewTask
+  - Step
+  - Story
+  - Task
+  - TaskEntity
+  - Transition
+  - Urgency
+  - Value
+  - WIPLimit
+  - WaitingFor
+  - WorkItem
+  - WorkPackage
+  - Workflow
+  - WorkflowState
  imports:
  - kernel/itc-core
  - model/evidence
@ -1917,7 +2479,31 @@ items:
  source_path: seeds/InfoTechCanonTaggingStandard_RC1_seed.md
  summary: 'Cross-cutting canon standard: InfoTechCanon Tagging Standard.'
  owned_concepts:
+  - ControlledTag
+  - DeprecatedTag
+  - EmergentTag
  - InfoTechCanon Tagging Standard
+  - OverTaggedEntity
+  - Tag
+  - TagAlias
+  - TagAssignment
+  - TagCategory
+  - TagConflict
+  - TagDefinition
+  - TagDrift
+  - TagKey
+  - TagMapping
+  - TagNamespace
+  - TagProfile
+  - TagQuery
+  - TagRule
+  - TagScheme
+  - TagSelector
+  - TagSet
+  - TagValue
+  - TagView
+  - TaggingEntity
+  - UntaggedEntity
  imports:
  - kernel/itc-core
  - model/evidence
--- a/infospace/indexes/artifact-tree.yaml
+++ b/infospace/indexes/artifact-tree.yaml
@ -1,5 +1,5 @@
 root: infospace
-file_count: 280
+file_count: 291
 files:
 - path: README.md
  directory: .
@ -589,6 +589,9 @@ files:
 - path: kernel/InfoTechCanonKernelMap.md
  directory: kernel
  name: InfoTechCanonKernelMap.md
+- path: kernel/boundary-review.md
+  directory: kernel
+  name: boundary-review.md
 - path: mappings/README.md
  directory: mappings
  name: README.md
@ -601,6 +604,9 @@ files:
 - path: models/access-control/InfoTechCanonAccessControlModel.md
  directory: models/access-control
  name: InfoTechCanonAccessControlModel.md
+- path: models/access-control/boundary-review.md
+  directory: models/access-control
+  name: boundary-review.md
 - path: models/capability/InfoTechCanonCapabilityModel.md
  directory: models/capability
  name: InfoTechCanonCapabilityModel.md
@ -616,9 +622,15 @@ files:
 - path: models/data/attribute-value-types.yaml
  directory: models/data
  name: attribute-value-types.yaml
+- path: models/data/boundary-review.md
+  directory: models/data
+  name: boundary-review.md
 - path: models/devsecops/InfoTechCanonDevSecOpsModel.md
  directory: models/devsecops
  name: InfoTechCanonDevSecOpsModel.md
+- path: models/devsecops/boundary-review.md
+  directory: models/devsecops
+  name: boundary-review.md
 - path: models/evidence/InfoTechCanonEvidenceModel.md
  directory: models/evidence
  name: InfoTechCanonEvidenceModel.md
@ -628,6 +640,9 @@ files:
 - path: models/governance/InfoTechCanonPurposeDemandExtension.md
  directory: models/governance
  name: InfoTechCanonPurposeDemandExtension.md
+- path: models/governance/boundary-review.md
+  directory: models/governance
+  name: boundary-review.md
 - path: models/governance/evidence-basis.yaml
  directory: models/governance
  name: evidence-basis.yaml
@ -640,24 +655,39 @@ files:
 - path: models/information-space/InfoTechCanonInformationSpaceModel.md
  directory: models/information-space
  name: InfoTechCanonInformationSpaceModel.md
+- path: models/information-space/boundary-review.md
+  directory: models/information-space
+  name: boundary-review.md
 - path: models/landscape/InfoTechCanonLandscapeModel.md
  directory: models/landscape
  name: InfoTechCanonLandscapeModel.md
 - path: models/network/InfoTechCanonNetworkModel.md
  directory: models/network
  name: InfoTechCanonNetworkModel.md
+- path: models/network/boundary-review.md
+  directory: models/network
+  name: boundary-review.md
 - path: models/observability/InfoTechCanonObservabilityModel.md
  directory: models/observability
  name: InfoTechCanonObservabilityModel.md
+- path: models/observability/boundary-review.md
+  directory: models/observability
+  name: boundary-review.md
 - path: models/organization/InfoTechCanonOrganizationModel.md
  directory: models/organization
  name: InfoTechCanonOrganizationModel.md
 - path: models/security/InfoTechCanonSecurityModel.md
  directory: models/security
  name: InfoTechCanonSecurityModel.md
+- path: models/security/boundary-review.md
+  directory: models/security
+  name: boundary-review.md
 - path: models/task/InfoTechCanonTaskModel.md
  directory: models/task
  name: InfoTechCanonTaskModel.md
+- path: models/task/boundary-review.md
+  directory: models/task
+  name: boundary-review.md
 - path: patterns/AgenticDrivesFunctional.md
  directory: patterns
  name: AgenticDrivesFunctional.md
@ -808,6 +838,9 @@ files:
 - path: standards/tagging/InfoTechCanonTaggingStandard.md
  directory: standards/tagging
  name: InfoTechCanonTaggingStandard.md
+- path: standards/tagging/boundary-review.md
+  directory: standards/tagging
+  name: boundary-review.md
 - path: validation/README.md
  directory: validation
  name: README.md
--- a/infospace/indexes/concept-ownership.yaml
+++ b/infospace/indexes/concept-ownership.yaml
--- a/infospace/kernel/InfoTechCanonCore.md
+++ b/infospace/kernel/InfoTechCanonCore.md
@ -1,3 +1,40 @@
+---
+owned_concepts:
+  - Activity
+  - AgentBrief
+  - AgentReference
+  - Alias
+  - Ambiguity
+  - Assimilation
+  - CanonArtifact
+  - CanonInterfaceCard
+  - Canonical Owner
+  - ChangeRecord
+  - Concept
+  - Conflict
+  - ConformanceLevel
+  - DecisionRecord
+  - Drift
+  - ExternalReference
+  - Gap
+  - Import
+  - Influence
+  - Label
+  - Mapping
+  - Namespace
+  - OpenQuestion
+  - Overlap
+  - Pattern
+  - ProvenanceRecord
+  - RelationshipDefinition
+  - Source
+  - Standard
+  - ValidationResult
+  - ValidationRule
+  - Version
+  - VersionRecord
+---
+
 # InfoTechCanon Core

 **Short Name:** `ITC-CORE`
--- a/infospace/kernel/boundary-review.md
+++ b/infospace/kernel/boundary-review.md
@ -0,0 +1,30 @@
+# InfoTechCanon Core concept boundary review — 2026-09-20
+
+Authority: INFO-WP-0027-T02, the declaration round that gave this artifact an
+`owned_concepts` list. Resolutions cite the kernel map concept-owner table where
+it assigns an owner, and are decided in this review where it does not. No concept
+is renamed, moved or removed.
+
+| Concept | Owner | Resolution | Decided by |
+| --- | --- | --- | --- |
+| `Activity` | kernel/itc-core | Core and Information Space state this definition in nearly the same words. Core owns the provenance mechanism; Information Space imports it. | this review |
+| `AgentBrief` | kernel/itc-core | Assigned by the kernel map concept-owner table. | kernel map |
+| `AgentReference` | kernel/itc-core | Same definition restated. Core owns it as part of the provenance family the kernel map assigns to Core; Information Space imports. | this review |
+| `Alias` | kernel/itc-core | Core defines the general alternative identifier or label; Information Space restates it and imports. | this review |
+| `DecisionRecord` | kernel/itc-core | Core owns the record type; the Information Space enumeration of context, options, rationale and consequences is guidance on the same concept, not a second definition. | this review |
+| `Dependency` | model/task | Assigned by the kernel map concept-owner table. | kernel map |
+| `Drift` | kernel/itc-core | Core owns Drift as divergence of artifact usage from definition. The Network sense, divergence between intended, declared, applied and observed state, is configuration drift and is a distinct qualified concept. Disambiguation rather than transfer. | this review |
+| `ExternalReference` | kernel/itc-core | Core owns the outward pointer; Information Space scopes it to sources outside the information space and imports. | this review |
+| `Identifier` | model/identity | Assigned by the kernel map concept-owner table. | kernel map |
+| `Influence` | kernel/itc-core | Identical definitions. Core owns it with the provenance family; Information Space imports. | this review |
+| `Label` | kernel/itc-core | Three uses, one owner. Core owns Label as a human-readable name. The Tagging sense, a display-oriented representation of a Tag, is a qualified use of the same word and keeps its section; Information Space imports. No rename. | this review |
+| `Namespace` | kernel/itc-core | Core owns the naming scope; Information Space adds the collision-prevention purpose and imports. Identity Realm and Tagging namespaces specialize it rather than redefining it. | this review |
+| `Profile` | undecided | Unresolved and deliberately undeclared by Core. Three senses exist: the canon profile artifact (Core prose), the identity Profile owned under accepted CUST-ADR-006, and the Observability runtime performance profile already disambiguated in the identity boundary review. The kernel map assigns Profile to Core, which contradicts the accepted identity ownership. Resolving it needs a decision, not a declaration. | kernel map |
+| `ProvenanceRecord` | kernel/itc-core | Assigned by the kernel map concept-owner table. | kernel map |
+| `Source` | kernel/itc-core | Identical definitions. Core owns it; Information Space imports. | this review |
+| `Standard` | kernel/itc-core | Assigned by the kernel map concept-owner table. | kernel map |
+| `VersionRecord` | kernel/itc-core | Assigned by the kernel map concept-owner table. | kernel map |
+
+Concepts this artifact declares are listed in its frontmatter. An overlap recorded
+here means another artifact defines the same name; where the owner is another
+artifact, this one imports the definition rather than restating it.
--- a/infospace/models/access-control/InfoTechCanonAccessControlModel.md
+++ b/infospace/models/access-control/InfoTechCanonAccessControlModel.md
@ -1,3 +1,53 @@
+---
+owned_concepts:
+  - AccessCertification
+  - AccessControlEntity
+  - AccessFinding
+  - AccessRemediation
+  - AccessReview
+  - AccessRole
+  - AccessSession
+  - AgentAccess
+  - AuthenticatedSubject
+  - AuthenticationStrengthReference
+  - AuthorizationDecision
+  - AuthorizationRequest
+  - BreakGlassAccess
+  - Condition
+  - CredentialReference
+  - DecisionReason
+  - DelegatedAccess
+  - Denial
+  - Entitlement
+  - EvaluationContext
+  - ExcessAccess
+  - Grant
+  - IdentityReference
+  - JustInTimeAccess
+  - Operation
+  - OrphanedAccess
+  - Permission
+  - PolicyAdministrationPoint
+  - PolicyBinding
+  - PolicyDecisionPoint
+  - PolicyEnforcementPoint
+  - PolicyInformationPoint
+  - PolicyRetrievalPoint
+  - Principal
+  - Privilege
+  - ProtectedResource
+  - RelationshipTuple
+  - Resource
+  - ResourceAction
+  - ResourceScope
+  - RoleBinding
+  - ServiceAccountAccess
+  - StaleAccess
+  - Subject
+  - TemporaryAccess
+  - TokenReference
+---
+
 # InfoTechCanon Access Control Model

 **Short Name:** `ITC-ACCESS`
--- a/infospace/models/access-control/boundary-review.md
+++ b/infospace/models/access-control/boundary-review.md
@ -0,0 +1,16 @@
+# InfoTechCanon Access Control Model concept boundary review — 2026-09-20
+
+Authority: INFO-WP-0027-T02, the declaration round that gave this artifact an
+`owned_concepts` list. Resolutions cite the kernel map concept-owner table where
+it assigns an owner, and are decided in this review where it does not. No concept
+is renamed, moved or removed.
+
+| Concept | Owner | Resolution | Decided by |
+| --- | --- | --- | --- |
+| `Action` | model/task | Assigned by the kernel map concept-owner table. | kernel map |
+| `Attribute` | model/data | Data owns Attribute. Access Control uses it for attribute-based decisions and imports; its AttributeValueType catalog already depends on the data definition. | this review |
+| `Subject` | model/access-control | ITC-ACCESS owns Subject as the access-control view of an actor. CARING analyses subjects and imports; SecurityCanon imports it under SECURITY-DEC-2026-003 and uses AuthorityContext for its own dimension. | this review |
+
+Concepts this artifact declares are listed in its frontmatter. An overlap recorded
+here means another artifact defines the same name; where the owner is another
+artifact, this one imports the definition rather than restating it.
--- a/infospace/models/data/InfoTechCanonDataModel.md
+++ b/infospace/models/data/InfoTechCanonDataModel.md
@ -1,3 +1,58 @@
+---
+owned_concepts:
+  - Attribute
+  - AttributeValueType
+  - BreakingChange
+  - BusinessTerm
+  - CodeList
+  - CompatibilityRule
+  - Constraint
+  - ConsumerExpectation
+  - DataAccessPattern
+  - DataAvailability
+  - DataCategory
+  - DataClassification
+  - DataContract
+  - DataDefinition
+  - DataDistribution
+  - DataDomain
+  - DataElement
+  - DataElementConcept
+  - DataEntity
+  - DataFlow
+  - DataFreshness
+  - DataLineage
+  - DataObject
+  - DataProduct
+  - DataQualityCheck
+  - DataQualityDimension
+  - DataQualityIssue
+  - DataQualityResult
+  - DataQualityRule
+  - DataResidency
+  - DataService
+  - DataStoreReference
+  - DataSubjectCategory
+  - DataType
+  - DataUsageConstraint
+  - Dataset
+  - DatasetSeries
+  - Derivation
+  - Field
+  - FitnessForUse
+  - GlossaryTerm
+  - MasterDataReference
+  - ProcessingPurpose
+  - ProducerExpectation
+  - Record
+  - ReferenceData
+  - Representation
+  - RetentionRuleReference
+  - SchemaEvolutionPolicy
+  - Sensitivity
+  - Transformation
+---
+
 # InfoTechCanon Data Model

 **Short Name:** `ITC-DATA`
--- a/infospace/models/data/boundary-review.md
+++ b/infospace/models/data/boundary-review.md
@ -0,0 +1,15 @@
+# InfoTechCanon Data Model concept boundary review — 2026-09-20
+
+Authority: INFO-WP-0027-T02, the declaration round that gave this artifact an
+`owned_concepts` list. Resolutions cite the kernel map concept-owner table where
+it assigns an owner, and are decided in this review where it does not. No concept
+is renamed, moved or removed.
+
+| Concept | Owner | Resolution | Decided by |
+| --- | --- | --- | --- |
+| `Attribute` | model/data | Data owns Attribute. Access Control uses it for attribute-based decisions and imports; its AttributeValueType catalog already depends on the data definition. | this review |
+| `ProvenanceRecord` | kernel/itc-core | Assigned by the kernel map concept-owner table. | kernel map |
+
+Concepts this artifact declares are listed in its frontmatter. An overlap recorded
+here means another artifact defines the same name; where the owner is another
+artifact, this one imports the definition rather than restating it.
--- a/infospace/models/devsecops/InfoTechCanonDevSecOpsModel.md
+++ b/infospace/models/devsecops/InfoTechCanonDevSecOpsModel.md
@ -1,3 +1,69 @@
+---
+owned_concepts:
+  - AgentExecutionEvidence
+  - AgentGeneratedPatch
+  - AgentReview
+  - Artifact
+  - ArtifactDigest
+  - ArtifactVersion
+  - Attestation
+  - Branch
+  - ChangeFailure
+  - CodeReview
+  - CodingAgentChange
+  - Commit
+  - ContainerImage
+  - DeliveryMetric
+  - DeploymentExecution
+  - DeploymentHealthSignal
+  - DeploymentManifest
+  - DeploymentPlan
+  - DeploymentRecord
+  - DeploymentVerification
+  - DevSecOpsEntity
+  - EnvironmentPromotion
+  - FeedbackLoop
+  - GateDecision
+  - HumanSupervisionReference
+  - IaCModule
+  - Package
+  - Pipeline
+  - PipelineDefinition
+  - PipelineIdentity
+  - PipelineJob
+  - PipelineResult
+  - PipelineRun
+  - PipelineStage
+  - PipelineStep
+  - PolicyGate
+  - Promotion
+  - Provenance
+  - PullRequest
+  - QualityGate
+  - RecoveryAction
+  - Release
+  - ReleaseApprovalReference
+  - ReleaseCandidate
+  - ReleaseNote
+  - ReleaseVersion
+  - Repository
+  - Rollback
+  - RolloutStrategy
+  - Runner
+  - ScanResult
+  - ScanRun
+  - Signature
+  - Software Bill of Materials
+  - SourceChange
+  - SourceTag
+  - SupplyChainEvidence
+  - TestResult
+  - TestRun
+  - TransparencyLogEntry
+  - VEXReference
+  - VerificationEvidence
+---
+
 # InfoTechCanon DevSecOps Model

 **Short Name:** `ITC-DEVSECOPS`
--- a/infospace/models/devsecops/boundary-review.md
+++ b/infospace/models/devsecops/boundary-review.md
@ -0,0 +1,14 @@
+# InfoTechCanon DevSecOps Model concept boundary review — 2026-09-20
+
+Authority: INFO-WP-0027-T02, the declaration round that gave this artifact an
+`owned_concepts` list. Resolutions cite the kernel map concept-owner table where
+it assigns an owner, and are decided in this review where it does not. No concept
+is renamed, moved or removed.
+
+| Concept | Owner | Resolution | Decided by |
+| --- | --- | --- | --- |
+| `Attestation` | model/devsecops | Assigned by the kernel map concept-owner table. | kernel map |
+
+Concepts this artifact declares are listed in its frontmatter. An overlap recorded
+here means another artifact defines the same name; where the owner is another
+artifact, this one imports the definition rather than restating it.
--- a/infospace/models/governance/InfoTechCanonGovernanceModel.md
+++ b/infospace/models/governance/InfoTechCanonGovernanceModel.md
@ -1,3 +1,50 @@
+---
+owned_concepts:
+  - Approval
+  - Assertion
+  - Assessment
+  - AssuranceCase
+  - AssuranceConclusion
+  - Audit
+  - CompensatingControl
+  - ComplianceRequirement
+  - Control
+  - ControlActivity
+  - ControlImplementation
+  - ControlObjective
+  - ControlResult
+  - ControlTest
+  - Decision
+  - DecisionRight
+  - Escalation
+  - EvidenceBasis
+  - Exception
+  - Finding
+  - GovernanceCycle
+  - GovernanceEntity
+  - GovernanceForum
+  - GovernanceProcess
+  - GovernanceScope
+  - GovernanceSystem
+  - Guideline
+  - Impact
+  - Likelihood
+  - Nonconformity
+  - Obligation
+  - Policy
+  - Principle
+  - RegulatoryReference
+  - Remediation
+  - Requirement
+  - Review
+  - Risk
+  - RiskAcceptance
+  - RiskSource
+  - RiskTreatment
+  - Rule
+  - Waiver
+---
+
 # InfoTechCanon Governance Model

 **Short Name:** `ITC-GOV`
--- a/infospace/models/governance/boundary-review.md
+++ b/infospace/models/governance/boundary-review.md
@ -0,0 +1,15 @@
+# InfoTechCanon Governance Model concept boundary review — 2026-09-20
+
+Authority: INFO-WP-0027-T02, the declaration round that gave this artifact an
+`owned_concepts` list. Resolutions cite the kernel map concept-owner table where
+it assigns an owner, and are decided in this review where it does not. No concept
+is renamed, moved or removed.
+
+| Concept | Owner | Resolution | Decided by |
+| --- | --- | --- | --- |
+| `Attestation` | model/devsecops | Assigned by the kernel map concept-owner table. | kernel map |
+| `Standard` | kernel/itc-core | Assigned by the kernel map concept-owner table. | kernel map |
+
+Concepts this artifact declares are listed in its frontmatter. An overlap recorded
+here means another artifact defines the same name; where the owner is another
+artifact, this one imports the definition rather than restating it.
--- a/infospace/models/information-space/InfoTechCanonInformationSpaceModel.md
+++ b/infospace/models/information-space/InfoTechCanonInformationSpaceModel.md
@ -1,3 +1,66 @@
+---
+owned_concepts:
+  - Anchor
+  - AssimilationReport
+  - Backlink
+  - Block
+  - BrokenLink
+  - Chunk
+  - Citation
+  - Collection
+  - ConceptIndex
+  - ConceptPage
+  - ConflictingDefinition
+  - Corpus
+  - CrossReference
+  - DependencyReference
+  - Document
+  - DuplicateContent
+  - EmbeddingRecord
+  - Excerpt
+  - FrontMatter
+  - Generation
+  - GraphView
+  - Heading
+  - Index
+  - InformationSpace
+  - Infospace
+  - KnowledgeArtifact
+  - KnowledgeBase
+  - Link
+  - LowRetrievalQuality
+  - MapView
+  - MappingDocument
+  - MappingReference
+  - MarkdownDocument
+  - MetadataRecord
+  - MissingMetadata
+  - NavigationView
+  - OrphanArtifact
+  - PatternDocument
+  - ProfileDocument
+  - RelationshipIndex
+  - RepositorySpace
+  - RetrievalContext
+  - RetrievalEvaluation
+  - RetrievalQuery
+  - RetrievalResult
+  - RetrievalUnit
+  - ReviewRecord
+  - Revision
+  - SearchIndex
+  - Section
+  - Shard
+  - SourceReference
+  - StaleContent
+  - StandardDocument
+  - Status
+  - Summary
+  - TopicIndex
+  - UsePath
+  - VectorIndex
+---
+
 # InfoTechCanon Information Space Model

 **Short Name:** `ITC-INFOSPACE`
--- a/infospace/models/information-space/boundary-review.md
+++ b/infospace/models/information-space/boundary-review.md
@ -0,0 +1,27 @@
+# InfoTechCanon Information Space Model concept boundary review — 2026-09-20
+
+Authority: INFO-WP-0027-T02, the declaration round that gave this artifact an
+`owned_concepts` list. Resolutions cite the kernel map concept-owner table where
+it assigns an owner, and are decided in this review where it does not. No concept
+is renamed, moved or removed.
+
+| Concept | Owner | Resolution | Decided by |
+| --- | --- | --- | --- |
+| `Activity` | kernel/itc-core | Core and Information Space state this definition in nearly the same words. Core owns the provenance mechanism; Information Space imports it. | this review |
+| `AgentBrief` | kernel/itc-core | Assigned by the kernel map concept-owner table. | kernel map |
+| `AgentReference` | kernel/itc-core | Same definition restated. Core owns it as part of the provenance family the kernel map assigns to Core; Information Space imports. | this review |
+| `Alias` | kernel/itc-core | Core defines the general alternative identifier or label; Information Space restates it and imports. | this review |
+| `DecisionRecord` | kernel/itc-core | Core owns the record type; the Information Space enumeration of context, options, rationale and consequences is guidance on the same concept, not a second definition. | this review |
+| `ExternalReference` | kernel/itc-core | Core owns the outward pointer; Information Space scopes it to sources outside the information space and imports. | this review |
+| `Influence` | kernel/itc-core | Identical definitions. Core owns it with the provenance family; Information Space imports. | this review |
+| `Label` | kernel/itc-core | Three uses, one owner. Core owns Label as a human-readable name. The Tagging sense, a display-oriented representation of a Tag, is a qualified use of the same word and keeps its section; Information Space imports. No rename. | this review |
+| `Link` | model/information-space | Assigned by the kernel map concept-owner table. | kernel map |
+| `Namespace` | kernel/itc-core | Core owns the naming scope; Information Space adds the collision-prevention purpose and imports. Identity Realm and Tagging namespaces specialize it rather than redefining it. | this review |
+| `ProvenanceRecord` | kernel/itc-core | Assigned by the kernel map concept-owner table. | kernel map |
+| `Source` | kernel/itc-core | Identical definitions. Core owns it; Information Space imports. | this review |
+| `Summary` | model/information-space | Information Space owns Summary as a derived knowledge artifact. The Observability sense is a metric aggregation and is a distinct qualified concept; disambiguation rather than transfer. | this review |
+| `VersionRecord` | kernel/itc-core | Assigned by the kernel map concept-owner table. | kernel map |
+
+Concepts this artifact declares are listed in its frontmatter. An overlap recorded
+here means another artifact defines the same name; where the owner is another
+artifact, this one imports the definition rather than restating it.
--- a/infospace/models/landscape/InfoTechCanonLandscapeModel.md
+++ b/infospace/models/landscape/InfoTechCanonLandscapeModel.md
@ -1,3 +1,19 @@
+---
+owned_concepts:
+  - BusinessService
+  - ApplicationService
+  - TechnicalService
+  - RuntimeResource
+  - Environment
+  - Workload
+  - LandscapeClaim
+  - LandscapeEntity
+  - LandscapeEvidence
+  - LandscapeRelationship
+  - LandscapeSource
+  - LandscapeState
+---
+
 # InfoTechCanon Landscape Model

 **Short Name:** `ITC-LAND`
--- a/infospace/models/network/InfoTechCanonNetworkModel.md
+++ b/infospace/models/network/InfoTechCanonNetworkModel.md
@ -1,3 +1,82 @@
+---
+owned_concepts:
+  - ACL
+  - AddressFamily
+  - AllowedFlow
+  - AppliedNetworkState
+  - AssessedNetworkState
+  - AttackSurfaceReference
+  - Circuit
+  - ConnectivityService
+  - DNSRecord
+  - DNSZone
+  - DeclaredNetworkState
+  - DeniedFlow
+  - EgressEndpoint
+  - Endpoint
+  - Firewall
+  - FirewallRule
+  - Gateway
+  - HistoricalNetworkState
+  - Hostname
+  - IPAddress
+  - IPAllocation
+  - IngressEndpoint
+  - IntendedNetworkState
+  - Interface
+  - KubernetesNetworkPolicy
+  - LoadBalancer
+  - ManagementEndpoint
+  - Microsegment
+  - NAT
+  - NetworkACL
+  - NetworkConfiguration
+  - NetworkDevice
+  - NetworkDomain
+  - NetworkEntity
+  - NetworkFabric
+  - NetworkFlow
+  - NetworkIntent
+  - NetworkNode
+  - NetworkPolicy
+  - NetworkRegion
+  - NetworkSegment
+  - NetworkSite
+  - NetworkTenant
+  - NetworkZone
+  - NextHop
+  - ObservedFlow
+  - ObservedNetworkState
+  - OverlayNetwork
+  - Path
+  - Peering
+  - Port
+  - Prefix
+  - PrivateEndpoint
+  - Proxy
+  - PublicEndpoint
+  - ReachabilityClaim
+  - ReachabilityTest
+  - ReconciliationResult
+  - Route
+  - RouteTable
+  - Router
+  - SecurityGroup
+  - SecurityZone
+  - ServiceEndpoint
+  - ServiceMeshPolicy
+  - ServiceName
+  - Subnet
+  - Switch
+  - TerminationPoint
+  - TrafficPolicy
+  - TrustZoneReference
+  - UnderlayNetwork
+  - VLAN
+  - VRF
+  - WorkloadEndpoint
+---
+
 # InfoTechCanon Network Model

 **Short Name:** `ITC-NET`
--- a/infospace/models/network/boundary-review.md
+++ b/infospace/models/network/boundary-review.md
@ -0,0 +1,16 @@
+# InfoTechCanon Network Model concept boundary review — 2026-09-20
+
+Authority: INFO-WP-0027-T02, the declaration round that gave this artifact an
+`owned_concepts` list. Resolutions cite the kernel map concept-owner table where
+it assigns an owner, and are decided in this review where it does not. No concept
+is renamed, moved or removed.
+
+| Concept | Owner | Resolution | Decided by |
+| --- | --- | --- | --- |
+| `Drift` | kernel/itc-core | Core owns Drift as divergence of artifact usage from definition. The Network sense, divergence between intended, declared, applied and observed state, is configuration drift and is a distinct qualified concept. Disambiguation rather than transfer. | this review |
+| `Exposure` | model/security | Security owns Exposure; it is one of the model purpose entities alongside threat, weakness and vulnerability. Network describes reachability that produces exposure and imports. | this review |
+| `Link` | model/information-space | Assigned by the kernel map concept-owner table. | kernel map |
+
+Concepts this artifact declares are listed in its frontmatter. An overlap recorded
+here means another artifact defines the same name; where the owner is another
+artifact, this one imports the definition rather than restating it.
--- a/infospace/models/observability/InfoTechCanonObservabilityModel.md
+++ b/infospace/models/observability/InfoTechCanonObservabilityModel.md
@ -1,3 +1,71 @@
+---
+owned_concepts:
+  - Alert
+  - AlertCorrelation
+  - AlertRoute
+  - AlertRule
+  - AlertSuppression
+  - Annotation
+  - AvailabilityWindow
+  - Baggage
+  - BurnRate
+  - Correlation
+  - Counter
+  - Dashboard
+  - ErrorBudget
+  - EscalationReference
+  - Event
+  - EventConsumer
+  - EventCorrelationKey
+  - EventEnvelope
+  - EventSource
+  - EventType
+  - Exemplar
+  - Gauge
+  - HealthState
+  - Histogram
+  - Log
+  - LogContext
+  - LogLevel
+  - LogRecord
+  - LogStream
+  - Metric
+  - MetricInstrument
+  - MetricPoint
+  - Notification
+  - ObservabilityEntity
+  - ObservabilityEvidence
+  - ObservedIncident
+  - ObservedResource
+  - OperationalView
+  - PerformanceProfile
+  - PostIncidentObservation
+  - ProfilingSample
+  - Query
+  - QueryResult
+  - ResourceAttribute
+  - ResourceProfile
+  - RootCauseHypothesis
+  - Runbook
+  - SLAReference
+  - Service Level Indicator
+  - Service Level Objective
+  - Signal
+  - SignalSource
+  - Snapshot
+  - Span
+  - SpanEvent
+  - SpanLink
+  - Telemetry
+  - TelemetryPipeline
+  - TelemetrySource
+  - TimeSeries
+  - Timeline
+  - Trace
+  - TraceContext
+  - TraceSample
+---
+
 # InfoTechCanon Observability Model

 **Short Name:** `ITC-OBS`
--- a/infospace/models/observability/boundary-review.md
+++ b/infospace/models/observability/boundary-review.md
@ -0,0 +1,17 @@
+# InfoTechCanon Observability Model concept boundary review — 2026-09-20
+
+Authority: INFO-WP-0027-T02, the declaration round that gave this artifact an
+`owned_concepts` list. Resolutions cite the kernel map concept-owner table where
+it assigns an owner, and are decided in this review where it does not. No concept
+is renamed, moved or removed.
+
+| Concept | Owner | Resolution | Decided by |
+| --- | --- | --- | --- |
+| `Alert` | model/observability | Assigned by the kernel map concept-owner table. | kernel map |
+| `Investigation` | model/security | Security owns Investigation as part of response. The Observability sense is analysis activity over telemetry and imports. | this review |
+| `Profile` | undecided | Unresolved and deliberately undeclared by Core. Three senses exist: the canon profile artifact (Core prose), the identity Profile owned under accepted CUST-ADR-006, and the Observability runtime performance profile already disambiguated in the identity boundary review. The kernel map assigns Profile to Core, which contradicts the accepted identity ownership. Resolving it needs a decision, not a declaration. | kernel map |
+| `Summary` | model/information-space | Information Space owns Summary as a derived knowledge artifact. The Observability sense is a metric aggregation and is a distinct qualified concept; disambiguation rather than transfer. | this review |
+
+Concepts this artifact declares are listed in its frontmatter. An overlap recorded
+here means another artifact defines the same name; where the owner is another
+artifact, this one imports the definition rather than restating it.
--- a/infospace/models/organization/InfoTechCanonOrganizationModel.md
+++ b/infospace/models/organization/InfoTechCanonOrganizationModel.md
@ -7,6 +7,20 @@ version: RC1-seed
 # Incremental machine-readable ownership for the social extension; existing
 # organization concepts retain their definitions and ownership declarations below.
 owned_concepts:
+  - Accountability
+  - Actor
+  - Agent
+  - Authority
+  - Membership
+  - Organization
+  - OrganizationalUnit
+  - Ownership
+  - Person
+  - Position
+  - Responsibility
+  - Role
+  - Stewardship
+  - Team
  - Community
  - Household
 social_collectives_extension:
--- a/infospace/models/security/InfoTechCanonSecurityModel.md
+++ b/infospace/models/security/InfoTechCanonSecurityModel.md
@ -1,3 +1,58 @@
+---
+owned_concepts:
+  - AttackImpact
+  - AttackPath
+  - AttackPattern
+  - AttackPrecondition
+  - AttackStep
+  - AttackTechnique
+  - BlastRadius
+  - ChokePoint
+  - CompensatingMeasure
+  - Containment
+  - DataSecurityFinding
+  - Detection
+  - DetectionCoverage
+  - DetectionRule
+  - Eradication
+  - Exploit
+  - ExploitLikelihood
+  - Exploitability
+  - Exposure
+  - ExposureFinding
+  - HardeningMeasure
+  - IdentityFinding
+  - Investigation
+  - LessonLearned
+  - Misconfiguration
+  - MisconfigurationFinding
+  - Mitigation
+  - PenTestFinding
+  - ProtectedAssetReference
+  - Recovery
+  - SecurityAssessment
+  - SecurityBoundary
+  - SecurityDomain
+  - SecurityEntity
+  - SecurityEvidence
+  - SecurityFinding
+  - SecurityIncident
+  - SecurityMeasure
+  - SecurityPosture
+  - SecurityPostureScore
+  - SecurityReview
+  - SecuritySignal
+  - Severity
+  - SupplyChainFinding
+  - Tactic
+  - Threat
+  - ThreatActor
+  - ThreatEvent
+  - Vulnerability
+  - VulnerabilityFinding
+  - Weakness
+---
+
 # InfoTechCanon Security Model

 **Short Name:** `ITC-SEC`
--- a/infospace/models/security/boundary-review.md
+++ b/infospace/models/security/boundary-review.md
@ -0,0 +1,16 @@
+# InfoTechCanon Security Model concept boundary review — 2026-09-20
+
+Authority: INFO-WP-0027-T02, the declaration round that gave this artifact an
+`owned_concepts` list. Resolutions cite the kernel map concept-owner table where
+it assigns an owner, and are decided in this review where it does not. No concept
+is renamed, moved or removed.
+
+| Concept | Owner | Resolution | Decided by |
+| --- | --- | --- | --- |
+| `Alert` | model/observability | Assigned by the kernel map concept-owner table. | kernel map |
+| `Exposure` | model/security | Security owns Exposure; it is one of the model purpose entities alongside threat, weakness and vulnerability. Network describes reachability that produces exposure and imports. | this review |
+| `Investigation` | model/security | Security owns Investigation as part of response. The Observability sense is analysis activity over telemetry and imports. | this review |
+
+Concepts this artifact declares are listed in its frontmatter. An overlap recorded
+here means another artifact defines the same name; where the owner is another
+artifact, this one imports the definition rather than restating it.
--- a/infospace/models/task/InfoTechCanonTaskModel.md
+++ b/infospace/models/task/InfoTechCanonTaskModel.md
@ -1,3 +1,59 @@
+---
+owned_concepts:
+  - AcceptanceCriteria
+  - Action
+  - Actionability
+  - ApprovalTask
+  - AssignmentReference
+  - Backlog
+  - Blocker
+  - Bug
+  - ChangeTask
+  - Commitment
+  - CompletionEvidence
+  - Complexity
+  - Deadline
+  - DecisionTask
+  - DefinitionOfDone
+  - DefinitionOfReady
+  - Deliverable
+  - Dependency
+  - DueDate
+  - EffortEstimate
+  - Epic
+  - Experiment
+  - Exploration
+  - Feature
+  - Importance
+  - IncidentTask
+  - Issue
+  - Milestone
+  - Move
+  - NextAction
+  - Option
+  - Outcome
+  - Priority
+  - ProblemTask
+  - Reachability
+  - Readiness
+  - RemediationTask
+  - Request
+  - ReviewTask
+  - Step
+  - Story
+  - Task
+  - TaskEntity
+  - Transition
+  - Urgency
+  - Value
+  - WIPLimit
+  - WaitingFor
+  - WorkItem
+  - WorkPackage
+  - Workflow
+  - WorkflowState
+---
+
 # InfoTechCanon Task Model

 **Short Name:** `ITC-TASK`
--- a/infospace/models/task/boundary-review.md
+++ b/infospace/models/task/boundary-review.md
@ -0,0 +1,15 @@
+# InfoTechCanon Task Model concept boundary review — 2026-09-20
+
+Authority: INFO-WP-0027-T02, the declaration round that gave this artifact an
+`owned_concepts` list. Resolutions cite the kernel map concept-owner table where
+it assigns an owner, and are decided in this review where it does not. No concept
+is renamed, moved or removed.
+
+| Concept | Owner | Resolution | Decided by |
+| --- | --- | --- | --- |
+| `Action` | model/task | Assigned by the kernel map concept-owner table. | kernel map |
+| `Dependency` | model/task | Assigned by the kernel map concept-owner table. | kernel map |
+
+Concepts this artifact declares are listed in its frontmatter. An overlap recorded
+here means another artifact defines the same name; where the owner is another
+artifact, this one imports the definition rather than restating it.
--- a/infospace/standards/tagging/InfoTechCanonTaggingStandard.md
+++ b/infospace/standards/tagging/InfoTechCanonTaggingStandard.md
@ -1,3 +1,31 @@
+---
+owned_concepts:
+  - ControlledTag
+  - DeprecatedTag
+  - EmergentTag
+  - OverTaggedEntity
+  - Tag
+  - TagAlias
+  - TagAssignment
+  - TagCategory
+  - TagConflict
+  - TagDefinition
+  - TagDrift
+  - TagKey
+  - TagMapping
+  - TagNamespace
+  - TagProfile
+  - TagQuery
+  - TagRule
+  - TagScheme
+  - TagSelector
+  - TagSet
+  - TagValue
+  - TagView
+  - TaggingEntity
+  - UntaggedEntity
+---
+
 # InfoTechCanon Tagging Standard

 **Short Name:** `ITC-TAG`
--- a/infospace/standards/tagging/boundary-review.md
+++ b/infospace/standards/tagging/boundary-review.md
@ -0,0 +1,14 @@
+# InfoTechCanon Tagging Standard concept boundary review — 2026-09-20
+
+Authority: INFO-WP-0027-T02, the declaration round that gave this artifact an
+`owned_concepts` list. Resolutions cite the kernel map concept-owner table where
+it assigns an owner, and are decided in this review where it does not. No concept
+is renamed, moved or removed.
+
+| Concept | Owner | Resolution | Decided by |
+| --- | --- | --- | --- |
+| `Label` | kernel/itc-core | Three uses, one owner. Core owns Label as a human-readable name. The Tagging sense, a display-oriented representation of a Tag, is a qualified use of the same word and keeps its section; Information Space imports. No rename. | this review |
+
+Concepts this artifact declares are listed in its frontmatter. An overlap recorded
+here means another artifact defines the same name; where the owner is another
+artifact, this one imports the definition rather than restating it.
--- a/infospace/views/by-concept.md
+++ b/infospace/views/by-concept.md
@ -2,7 +2,7 @@

 # By Concept

-Concept count: **164**
+Concept count: **750**

 | Concept | Owner | Source |
 | --- | --- | --- |
@ -39,11 +39,90 @@ Concept count: **164**
 | Qonto Assistant Emission Cadence Worked Example | `example/emission-cadence/qonto-assistant` | `artifact_title` |
 | InfoTechCanon federation interface | `interface-card/canon-federation` | `artifact_title` |
 | InfoTechCanon Core | `kernel/itc-core` | `artifact_title` |
+| Activity | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| AgentBrief | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| AgentReference | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Alias | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Ambiguity | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Assimilation | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| CanonArtifact | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| CanonInterfaceCard | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Canonical Owner | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| ChangeRecord | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Concept | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Conflict | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| ConformanceLevel | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| DecisionRecord | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Drift | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| ExternalReference | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Gap | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Import | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Influence | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Label | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Mapping | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Namespace | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| OpenQuestion | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Overlap | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Pattern | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| ProvenanceRecord | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| RelationshipDefinition | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Source | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Standard | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| ValidationResult | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| ValidationRule | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| Version | `kernel/itc-core` | `frontmatter.owned_concepts` |
+| VersionRecord | `kernel/itc-core` | `frontmatter.owned_concepts` |
 | InfoTechCanon Kernel Map | `kernel/itc-kernel-map` | `artifact_title` |
 | ITC-CAP concept mappings to anchoring canon models | `mapping/capability-anchors` | `artifact_title` |
 | Emission cadence handover mappings | `mapping/emission-cadence-handover` | `artifact_title` |
 | Purpose Demand Governance Extension Candidates | `mapping/purpose-demand-governance-candidates` | `artifact_title` |
 | InfoTechCanon Access Control Model | `model/access-control` | `artifact_title` |
+| AccessCertification | `model/access-control` | `frontmatter.owned_concepts` |
+| AccessControlEntity | `model/access-control` | `frontmatter.owned_concepts` |
+| AccessFinding | `model/access-control` | `frontmatter.owned_concepts` |
+| AccessRemediation | `model/access-control` | `frontmatter.owned_concepts` |
+| AccessReview | `model/access-control` | `frontmatter.owned_concepts` |
+| AccessRole | `model/access-control` | `frontmatter.owned_concepts` |
+| AccessSession | `model/access-control` | `frontmatter.owned_concepts` |
+| AgentAccess | `model/access-control` | `frontmatter.owned_concepts` |
+| AuthenticatedSubject | `model/access-control` | `frontmatter.owned_concepts` |
+| AuthenticationStrengthReference | `model/access-control` | `frontmatter.owned_concepts` |
+| AuthorizationDecision | `model/access-control` | `frontmatter.owned_concepts` |
+| AuthorizationRequest | `model/access-control` | `frontmatter.owned_concepts` |
+| BreakGlassAccess | `model/access-control` | `frontmatter.owned_concepts` |
+| Condition | `model/access-control` | `frontmatter.owned_concepts` |
+| CredentialReference | `model/access-control` | `frontmatter.owned_concepts` |
+| DecisionReason | `model/access-control` | `frontmatter.owned_concepts` |
+| DelegatedAccess | `model/access-control` | `frontmatter.owned_concepts` |
+| Denial | `model/access-control` | `frontmatter.owned_concepts` |
+| Entitlement | `model/access-control` | `frontmatter.owned_concepts` |
+| EvaluationContext | `model/access-control` | `frontmatter.owned_concepts` |
+| ExcessAccess | `model/access-control` | `frontmatter.owned_concepts` |
+| Grant | `model/access-control` | `frontmatter.owned_concepts` |
+| IdentityReference | `model/access-control` | `frontmatter.owned_concepts` |
+| JustInTimeAccess | `model/access-control` | `frontmatter.owned_concepts` |
+| Operation | `model/access-control` | `frontmatter.owned_concepts` |
+| OrphanedAccess | `model/access-control` | `frontmatter.owned_concepts` |
+| Permission | `model/access-control` | `frontmatter.owned_concepts` |
+| PolicyAdministrationPoint | `model/access-control` | `frontmatter.owned_concepts` |
+| PolicyBinding | `model/access-control` | `frontmatter.owned_concepts` |
+| PolicyDecisionPoint | `model/access-control` | `frontmatter.owned_concepts` |
+| PolicyEnforcementPoint | `model/access-control` | `frontmatter.owned_concepts` |
+| PolicyInformationPoint | `model/access-control` | `frontmatter.owned_concepts` |
+| PolicyRetrievalPoint | `model/access-control` | `frontmatter.owned_concepts` |
+| Principal | `model/access-control` | `frontmatter.owned_concepts` |
+| Privilege | `model/access-control` | `frontmatter.owned_concepts` |
+| ProtectedResource | `model/access-control` | `frontmatter.owned_concepts` |
+| RelationshipTuple | `model/access-control` | `frontmatter.owned_concepts` |
+| Resource | `model/access-control` | `frontmatter.owned_concepts` |
+| ResourceAction | `model/access-control` | `frontmatter.owned_concepts` |
+| ResourceScope | `model/access-control` | `frontmatter.owned_concepts` |
+| RoleBinding | `model/access-control` | `frontmatter.owned_concepts` |
+| ServiceAccountAccess | `model/access-control` | `frontmatter.owned_concepts` |
+| StaleAccess | `model/access-control` | `frontmatter.owned_concepts` |
+| Subject | `model/access-control` | `frontmatter.owned_concepts` |
+| TemporaryAccess | `model/access-control` | `frontmatter.owned_concepts` |
+| TokenReference | `model/access-control` | `frontmatter.owned_concepts` |
 | InfoTechCanon Capability Model | `model/capability` | `artifact_title` |
 | Capability | `model/capability` | `frontmatter.owned_concepts` |
 | CapabilityDomain | `model/capability` | `frontmatter.owned_concepts` |
@ -59,13 +138,169 @@ Concept count: **164**
 | CapabilityConsumption | `model/capability` | `frontmatter.owned_concepts` |
 | CapabilityInclusionRule | `model/capability` | `frontmatter.owned_concepts` |
 | InfoTechCanon Data Model | `model/data` | `artifact_title` |
+| Attribute | `model/data` | `frontmatter.owned_concepts` |
+| AttributeValueType | `model/data` | `frontmatter.owned_concepts` |
+| BreakingChange | `model/data` | `frontmatter.owned_concepts` |
+| BusinessTerm | `model/data` | `frontmatter.owned_concepts` |
+| CodeList | `model/data` | `frontmatter.owned_concepts` |
+| CompatibilityRule | `model/data` | `frontmatter.owned_concepts` |
+| Constraint | `model/data` | `frontmatter.owned_concepts` |
+| ConsumerExpectation | `model/data` | `frontmatter.owned_concepts` |
+| DataAccessPattern | `model/data` | `frontmatter.owned_concepts` |
+| DataAvailability | `model/data` | `frontmatter.owned_concepts` |
+| DataCategory | `model/data` | `frontmatter.owned_concepts` |
+| DataClassification | `model/data` | `frontmatter.owned_concepts` |
+| DataContract | `model/data` | `frontmatter.owned_concepts` |
+| DataDefinition | `model/data` | `frontmatter.owned_concepts` |
+| DataDistribution | `model/data` | `frontmatter.owned_concepts` |
+| DataDomain | `model/data` | `frontmatter.owned_concepts` |
+| DataElement | `model/data` | `frontmatter.owned_concepts` |
+| DataElementConcept | `model/data` | `frontmatter.owned_concepts` |
+| DataEntity | `model/data` | `frontmatter.owned_concepts` |
+| DataFlow | `model/data` | `frontmatter.owned_concepts` |
+| DataFreshness | `model/data` | `frontmatter.owned_concepts` |
+| DataLineage | `model/data` | `frontmatter.owned_concepts` |
+| DataObject | `model/data` | `frontmatter.owned_concepts` |
+| DataProduct | `model/data` | `frontmatter.owned_concepts` |
+| DataQualityCheck | `model/data` | `frontmatter.owned_concepts` |
+| DataQualityDimension | `model/data` | `frontmatter.owned_concepts` |
+| DataQualityIssue | `model/data` | `frontmatter.owned_concepts` |
+| DataQualityResult | `model/data` | `frontmatter.owned_concepts` |
+| DataQualityRule | `model/data` | `frontmatter.owned_concepts` |
+| DataResidency | `model/data` | `frontmatter.owned_concepts` |
+| DataService | `model/data` | `frontmatter.owned_concepts` |
+| DataStoreReference | `model/data` | `frontmatter.owned_concepts` |
+| DataSubjectCategory | `model/data` | `frontmatter.owned_concepts` |
+| DataType | `model/data` | `frontmatter.owned_concepts` |
+| DataUsageConstraint | `model/data` | `frontmatter.owned_concepts` |
+| Dataset | `model/data` | `frontmatter.owned_concepts` |
+| DatasetSeries | `model/data` | `frontmatter.owned_concepts` |
+| Derivation | `model/data` | `frontmatter.owned_concepts` |
+| Field | `model/data` | `frontmatter.owned_concepts` |
+| FitnessForUse | `model/data` | `frontmatter.owned_concepts` |
+| GlossaryTerm | `model/data` | `frontmatter.owned_concepts` |
+| MasterDataReference | `model/data` | `frontmatter.owned_concepts` |
+| ProcessingPurpose | `model/data` | `frontmatter.owned_concepts` |
+| ProducerExpectation | `model/data` | `frontmatter.owned_concepts` |
+| Record | `model/data` | `frontmatter.owned_concepts` |
+| ReferenceData | `model/data` | `frontmatter.owned_concepts` |
+| Representation | `model/data` | `frontmatter.owned_concepts` |
+| RetentionRuleReference | `model/data` | `frontmatter.owned_concepts` |
+| SchemaEvolutionPolicy | `model/data` | `frontmatter.owned_concepts` |
+| Sensitivity | `model/data` | `frontmatter.owned_concepts` |
+| Transformation | `model/data` | `frontmatter.owned_concepts` |
 | InfoTechCanon DevSecOps Model | `model/devsecops` | `artifact_title` |
+| AgentExecutionEvidence | `model/devsecops` | `frontmatter.owned_concepts` |
+| AgentGeneratedPatch | `model/devsecops` | `frontmatter.owned_concepts` |
+| AgentReview | `model/devsecops` | `frontmatter.owned_concepts` |
+| Artifact | `model/devsecops` | `frontmatter.owned_concepts` |
+| ArtifactDigest | `model/devsecops` | `frontmatter.owned_concepts` |
+| ArtifactVersion | `model/devsecops` | `frontmatter.owned_concepts` |
+| Attestation | `model/devsecops` | `frontmatter.owned_concepts` |
+| Branch | `model/devsecops` | `frontmatter.owned_concepts` |
+| ChangeFailure | `model/devsecops` | `frontmatter.owned_concepts` |
+| CodeReview | `model/devsecops` | `frontmatter.owned_concepts` |
+| CodingAgentChange | `model/devsecops` | `frontmatter.owned_concepts` |
+| Commit | `model/devsecops` | `frontmatter.owned_concepts` |
+| ContainerImage | `model/devsecops` | `frontmatter.owned_concepts` |
+| DeliveryMetric | `model/devsecops` | `frontmatter.owned_concepts` |
+| DeploymentExecution | `model/devsecops` | `frontmatter.owned_concepts` |
+| DeploymentHealthSignal | `model/devsecops` | `frontmatter.owned_concepts` |
+| DeploymentManifest | `model/devsecops` | `frontmatter.owned_concepts` |
+| DeploymentPlan | `model/devsecops` | `frontmatter.owned_concepts` |
+| DeploymentRecord | `model/devsecops` | `frontmatter.owned_concepts` |
+| DeploymentVerification | `model/devsecops` | `frontmatter.owned_concepts` |
+| DevSecOpsEntity | `model/devsecops` | `frontmatter.owned_concepts` |
+| EnvironmentPromotion | `model/devsecops` | `frontmatter.owned_concepts` |
+| FeedbackLoop | `model/devsecops` | `frontmatter.owned_concepts` |
+| GateDecision | `model/devsecops` | `frontmatter.owned_concepts` |
+| HumanSupervisionReference | `model/devsecops` | `frontmatter.owned_concepts` |
+| IaCModule | `model/devsecops` | `frontmatter.owned_concepts` |
+| Package | `model/devsecops` | `frontmatter.owned_concepts` |
+| Pipeline | `model/devsecops` | `frontmatter.owned_concepts` |
+| PipelineDefinition | `model/devsecops` | `frontmatter.owned_concepts` |
+| PipelineIdentity | `model/devsecops` | `frontmatter.owned_concepts` |
+| PipelineJob | `model/devsecops` | `frontmatter.owned_concepts` |
+| PipelineResult | `model/devsecops` | `frontmatter.owned_concepts` |
+| PipelineRun | `model/devsecops` | `frontmatter.owned_concepts` |
+| PipelineStage | `model/devsecops` | `frontmatter.owned_concepts` |
+| PipelineStep | `model/devsecops` | `frontmatter.owned_concepts` |
+| PolicyGate | `model/devsecops` | `frontmatter.owned_concepts` |
+| Promotion | `model/devsecops` | `frontmatter.owned_concepts` |
+| Provenance | `model/devsecops` | `frontmatter.owned_concepts` |
+| PullRequest | `model/devsecops` | `frontmatter.owned_concepts` |
+| QualityGate | `model/devsecops` | `frontmatter.owned_concepts` |
+| RecoveryAction | `model/devsecops` | `frontmatter.owned_concepts` |
+| Release | `model/devsecops` | `frontmatter.owned_concepts` |
+| ReleaseApprovalReference | `model/devsecops` | `frontmatter.owned_concepts` |
+| ReleaseCandidate | `model/devsecops` | `frontmatter.owned_concepts` |
+| ReleaseNote | `model/devsecops` | `frontmatter.owned_concepts` |
+| ReleaseVersion | `model/devsecops` | `frontmatter.owned_concepts` |
+| Repository | `model/devsecops` | `frontmatter.owned_concepts` |
+| Rollback | `model/devsecops` | `frontmatter.owned_concepts` |
+| RolloutStrategy | `model/devsecops` | `frontmatter.owned_concepts` |
+| Runner | `model/devsecops` | `frontmatter.owned_concepts` |
+| ScanResult | `model/devsecops` | `frontmatter.owned_concepts` |
+| ScanRun | `model/devsecops` | `frontmatter.owned_concepts` |
+| Signature | `model/devsecops` | `frontmatter.owned_concepts` |
+| Software Bill of Materials | `model/devsecops` | `frontmatter.owned_concepts` |
+| SourceChange | `model/devsecops` | `frontmatter.owned_concepts` |
+| SourceTag | `model/devsecops` | `frontmatter.owned_concepts` |
+| SupplyChainEvidence | `model/devsecops` | `frontmatter.owned_concepts` |
+| TestResult | `model/devsecops` | `frontmatter.owned_concepts` |
+| TestRun | `model/devsecops` | `frontmatter.owned_concepts` |
+| TransparencyLogEntry | `model/devsecops` | `frontmatter.owned_concepts` |
+| VEXReference | `model/devsecops` | `frontmatter.owned_concepts` |
+| VerificationEvidence | `model/devsecops` | `frontmatter.owned_concepts` |
 | InfoTechCanon Evidence Model | `model/evidence` | `artifact_title` |
 | Evidence | `model/evidence` | `frontmatter.owned_concepts` |
 | Evidence Source | `model/evidence` | `frontmatter.owned_concepts` |
 | Adjudication Outcome | `model/evidence` | `frontmatter.owned_concepts` |
 | Evidence strength | `model/evidence` | `frontmatter.owned_concepts` |
 | InfoTechCanon Governance Model | `model/governance` | `artifact_title` |
+| Approval | `model/governance` | `frontmatter.owned_concepts` |
+| Assertion | `model/governance` | `frontmatter.owned_concepts` |
+| Assessment | `model/governance` | `frontmatter.owned_concepts` |
+| AssuranceCase | `model/governance` | `frontmatter.owned_concepts` |
+| AssuranceConclusion | `model/governance` | `frontmatter.owned_concepts` |
+| Audit | `model/governance` | `frontmatter.owned_concepts` |
+| CompensatingControl | `model/governance` | `frontmatter.owned_concepts` |
+| ComplianceRequirement | `model/governance` | `frontmatter.owned_concepts` |
+| Control | `model/governance` | `frontmatter.owned_concepts` |
+| ControlActivity | `model/governance` | `frontmatter.owned_concepts` |
+| ControlImplementation | `model/governance` | `frontmatter.owned_concepts` |
+| ControlObjective | `model/governance` | `frontmatter.owned_concepts` |
+| ControlResult | `model/governance` | `frontmatter.owned_concepts` |
+| ControlTest | `model/governance` | `frontmatter.owned_concepts` |
+| Decision | `model/governance` | `frontmatter.owned_concepts` |
+| DecisionRight | `model/governance` | `frontmatter.owned_concepts` |
+| Escalation | `model/governance` | `frontmatter.owned_concepts` |
+| EvidenceBasis | `model/governance` | `frontmatter.owned_concepts` |
+| Exception | `model/governance` | `frontmatter.owned_concepts` |
+| Finding | `model/governance` | `frontmatter.owned_concepts` |
+| GovernanceCycle | `model/governance` | `frontmatter.owned_concepts` |
+| GovernanceEntity | `model/governance` | `frontmatter.owned_concepts` |
+| GovernanceForum | `model/governance` | `frontmatter.owned_concepts` |
+| GovernanceProcess | `model/governance` | `frontmatter.owned_concepts` |
+| GovernanceScope | `model/governance` | `frontmatter.owned_concepts` |
+| GovernanceSystem | `model/governance` | `frontmatter.owned_concepts` |
+| Guideline | `model/governance` | `frontmatter.owned_concepts` |
+| Impact | `model/governance` | `frontmatter.owned_concepts` |
+| Likelihood | `model/governance` | `frontmatter.owned_concepts` |
+| Nonconformity | `model/governance` | `frontmatter.owned_concepts` |
+| Obligation | `model/governance` | `frontmatter.owned_concepts` |
+| Policy | `model/governance` | `frontmatter.owned_concepts` |
+| Principle | `model/governance` | `frontmatter.owned_concepts` |
+| RegulatoryReference | `model/governance` | `frontmatter.owned_concepts` |
+| Remediation | `model/governance` | `frontmatter.owned_concepts` |
+| Requirement | `model/governance` | `frontmatter.owned_concepts` |
+| Review | `model/governance` | `frontmatter.owned_concepts` |
+| Risk | `model/governance` | `frontmatter.owned_concepts` |
+| RiskAcceptance | `model/governance` | `frontmatter.owned_concepts` |
+| RiskSource | `model/governance` | `frontmatter.owned_concepts` |
+| RiskTreatment | `model/governance` | `frontmatter.owned_concepts` |
+| Rule | `model/governance` | `frontmatter.owned_concepts` |
+| Waiver | `model/governance` | `frontmatter.owned_concepts` |
 | InfoTechCanon Identity Model | `model/identity` | `artifact_title` |
 | Account | `model/identity` | `frontmatter.owned_concepts` |
 | Service Account | `model/identity` | `frontmatter.owned_concepts` |
@ -91,10 +326,234 @@ Concept count: **164**
 | Assurance Level | `model/identity` | `frontmatter.owned_concepts` |
 | Pseudonymous Identifier | `model/identity` | `frontmatter.owned_concepts` |
 | InfoTechCanon Information Space Model | `model/information-space` | `artifact_title` |
+| Anchor | `model/information-space` | `frontmatter.owned_concepts` |
+| AssimilationReport | `model/information-space` | `frontmatter.owned_concepts` |
+| Backlink | `model/information-space` | `frontmatter.owned_concepts` |
+| Block | `model/information-space` | `frontmatter.owned_concepts` |
+| BrokenLink | `model/information-space` | `frontmatter.owned_concepts` |
+| Chunk | `model/information-space` | `frontmatter.owned_concepts` |
+| Citation | `model/information-space` | `frontmatter.owned_concepts` |
+| Collection | `model/information-space` | `frontmatter.owned_concepts` |
+| ConceptIndex | `model/information-space` | `frontmatter.owned_concepts` |
+| ConceptPage | `model/information-space` | `frontmatter.owned_concepts` |
+| ConflictingDefinition | `model/information-space` | `frontmatter.owned_concepts` |
+| Corpus | `model/information-space` | `frontmatter.owned_concepts` |
+| CrossReference | `model/information-space` | `frontmatter.owned_concepts` |
+| DependencyReference | `model/information-space` | `frontmatter.owned_concepts` |
+| Document | `model/information-space` | `frontmatter.owned_concepts` |
+| DuplicateContent | `model/information-space` | `frontmatter.owned_concepts` |
+| EmbeddingRecord | `model/information-space` | `frontmatter.owned_concepts` |
+| Excerpt | `model/information-space` | `frontmatter.owned_concepts` |
+| FrontMatter | `model/information-space` | `frontmatter.owned_concepts` |
+| Generation | `model/information-space` | `frontmatter.owned_concepts` |
+| GraphView | `model/information-space` | `frontmatter.owned_concepts` |
+| Heading | `model/information-space` | `frontmatter.owned_concepts` |
+| Index | `model/information-space` | `frontmatter.owned_concepts` |
+| InformationSpace | `model/information-space` | `frontmatter.owned_concepts` |
+| Infospace | `model/information-space` | `frontmatter.owned_concepts` |
+| KnowledgeArtifact | `model/information-space` | `frontmatter.owned_concepts` |
+| KnowledgeBase | `model/information-space` | `frontmatter.owned_concepts` |
+| Link | `model/information-space` | `frontmatter.owned_concepts` |
+| LowRetrievalQuality | `model/information-space` | `frontmatter.owned_concepts` |
+| MapView | `model/information-space` | `frontmatter.owned_concepts` |
+| MappingDocument | `model/information-space` | `frontmatter.owned_concepts` |
+| MappingReference | `model/information-space` | `frontmatter.owned_concepts` |
+| MarkdownDocument | `model/information-space` | `frontmatter.owned_concepts` |
+| MetadataRecord | `model/information-space` | `frontmatter.owned_concepts` |
+| MissingMetadata | `model/information-space` | `frontmatter.owned_concepts` |
+| NavigationView | `model/information-space` | `frontmatter.owned_concepts` |
+| OrphanArtifact | `model/information-space` | `frontmatter.owned_concepts` |
+| PatternDocument | `model/information-space` | `frontmatter.owned_concepts` |
+| ProfileDocument | `model/information-space` | `frontmatter.owned_concepts` |
+| RelationshipIndex | `model/information-space` | `frontmatter.owned_concepts` |
+| RepositorySpace | `model/information-space` | `frontmatter.owned_concepts` |
+| RetrievalContext | `model/information-space` | `frontmatter.owned_concepts` |
+| RetrievalEvaluation | `model/information-space` | `frontmatter.owned_concepts` |
+| RetrievalQuery | `model/information-space` | `frontmatter.owned_concepts` |
+| RetrievalResult | `model/information-space` | `frontmatter.owned_concepts` |
+| RetrievalUnit | `model/information-space` | `frontmatter.owned_concepts` |
+| ReviewRecord | `model/information-space` | `frontmatter.owned_concepts` |
+| Revision | `model/information-space` | `frontmatter.owned_concepts` |
+| SearchIndex | `model/information-space` | `frontmatter.owned_concepts` |
+| Section | `model/information-space` | `frontmatter.owned_concepts` |
+| Shard | `model/information-space` | `frontmatter.owned_concepts` |
+| SourceReference | `model/information-space` | `frontmatter.owned_concepts` |
+| StaleContent | `model/information-space` | `frontmatter.owned_concepts` |
+| StandardDocument | `model/information-space` | `frontmatter.owned_concepts` |
+| Status | `model/information-space` | `frontmatter.owned_concepts` |
+| Summary | `model/information-space` | `frontmatter.owned_concepts` |
+| TopicIndex | `model/information-space` | `frontmatter.owned_concepts` |
+| UsePath | `model/information-space` | `frontmatter.owned_concepts` |
+| VectorIndex | `model/information-space` | `frontmatter.owned_concepts` |
 | InfoTechCanon Landscape Model | `model/landscape` | `artifact_title` |
+| BusinessService | `model/landscape` | `frontmatter.owned_concepts` |
+| ApplicationService | `model/landscape` | `frontmatter.owned_concepts` |
+| TechnicalService | `model/landscape` | `frontmatter.owned_concepts` |
+| RuntimeResource | `model/landscape` | `frontmatter.owned_concepts` |
+| Environment | `model/landscape` | `frontmatter.owned_concepts` |
+| Workload | `model/landscape` | `frontmatter.owned_concepts` |
+| LandscapeClaim | `model/landscape` | `frontmatter.owned_concepts` |
+| LandscapeEntity | `model/landscape` | `frontmatter.owned_concepts` |
+| LandscapeEvidence | `model/landscape` | `frontmatter.owned_concepts` |
+| LandscapeRelationship | `model/landscape` | `frontmatter.owned_concepts` |
+| LandscapeSource | `model/landscape` | `frontmatter.owned_concepts` |
+| LandscapeState | `model/landscape` | `frontmatter.owned_concepts` |
 | InfoTechCanon Network Model | `model/network` | `artifact_title` |
+| ACL | `model/network` | `frontmatter.owned_concepts` |
+| AddressFamily | `model/network` | `frontmatter.owned_concepts` |
+| AllowedFlow | `model/network` | `frontmatter.owned_concepts` |
+| AppliedNetworkState | `model/network` | `frontmatter.owned_concepts` |
+| AssessedNetworkState | `model/network` | `frontmatter.owned_concepts` |
+| AttackSurfaceReference | `model/network` | `frontmatter.owned_concepts` |
+| Circuit | `model/network` | `frontmatter.owned_concepts` |
+| ConnectivityService | `model/network` | `frontmatter.owned_concepts` |
+| DNSRecord | `model/network` | `frontmatter.owned_concepts` |
+| DNSZone | `model/network` | `frontmatter.owned_concepts` |
+| DeclaredNetworkState | `model/network` | `frontmatter.owned_concepts` |
+| DeniedFlow | `model/network` | `frontmatter.owned_concepts` |
+| EgressEndpoint | `model/network` | `frontmatter.owned_concepts` |
+| Endpoint | `model/network` | `frontmatter.owned_concepts` |
+| Firewall | `model/network` | `frontmatter.owned_concepts` |
+| FirewallRule | `model/network` | `frontmatter.owned_concepts` |
+| Gateway | `model/network` | `frontmatter.owned_concepts` |
+| HistoricalNetworkState | `model/network` | `frontmatter.owned_concepts` |
+| Hostname | `model/network` | `frontmatter.owned_concepts` |
+| IPAddress | `model/network` | `frontmatter.owned_concepts` |
+| IPAllocation | `model/network` | `frontmatter.owned_concepts` |
+| IngressEndpoint | `model/network` | `frontmatter.owned_concepts` |
+| IntendedNetworkState | `model/network` | `frontmatter.owned_concepts` |
+| Interface | `model/network` | `frontmatter.owned_concepts` |
+| KubernetesNetworkPolicy | `model/network` | `frontmatter.owned_concepts` |
+| LoadBalancer | `model/network` | `frontmatter.owned_concepts` |
+| ManagementEndpoint | `model/network` | `frontmatter.owned_concepts` |
+| Microsegment | `model/network` | `frontmatter.owned_concepts` |
+| NAT | `model/network` | `frontmatter.owned_concepts` |
+| NetworkACL | `model/network` | `frontmatter.owned_concepts` |
+| NetworkConfiguration | `model/network` | `frontmatter.owned_concepts` |
+| NetworkDevice | `model/network` | `frontmatter.owned_concepts` |
+| NetworkDomain | `model/network` | `frontmatter.owned_concepts` |
+| NetworkEntity | `model/network` | `frontmatter.owned_concepts` |
+| NetworkFabric | `model/network` | `frontmatter.owned_concepts` |
+| NetworkFlow | `model/network` | `frontmatter.owned_concepts` |
+| NetworkIntent | `model/network` | `frontmatter.owned_concepts` |
+| NetworkNode | `model/network` | `frontmatter.owned_concepts` |
+| NetworkPolicy | `model/network` | `frontmatter.owned_concepts` |
+| NetworkRegion | `model/network` | `frontmatter.owned_concepts` |
+| NetworkSegment | `model/network` | `frontmatter.owned_concepts` |
+| NetworkSite | `model/network` | `frontmatter.owned_concepts` |
+| NetworkTenant | `model/network` | `frontmatter.owned_concepts` |
+| NetworkZone | `model/network` | `frontmatter.owned_concepts` |
+| NextHop | `model/network` | `frontmatter.owned_concepts` |
+| ObservedFlow | `model/network` | `frontmatter.owned_concepts` |
+| ObservedNetworkState | `model/network` | `frontmatter.owned_concepts` |
+| OverlayNetwork | `model/network` | `frontmatter.owned_concepts` |
+| Path | `model/network` | `frontmatter.owned_concepts` |
+| Peering | `model/network` | `frontmatter.owned_concepts` |
+| Port | `model/network` | `frontmatter.owned_concepts` |
+| Prefix | `model/network` | `frontmatter.owned_concepts` |
+| PrivateEndpoint | `model/network` | `frontmatter.owned_concepts` |
+| Proxy | `model/network` | `frontmatter.owned_concepts` |
+| PublicEndpoint | `model/network` | `frontmatter.owned_concepts` |
+| ReachabilityClaim | `model/network` | `frontmatter.owned_concepts` |
+| ReachabilityTest | `model/network` | `frontmatter.owned_concepts` |
+| ReconciliationResult | `model/network` | `frontmatter.owned_concepts` |
+| Route | `model/network` | `frontmatter.owned_concepts` |
+| RouteTable | `model/network` | `frontmatter.owned_concepts` |
+| Router | `model/network` | `frontmatter.owned_concepts` |
+| SecurityGroup | `model/network` | `frontmatter.owned_concepts` |
+| SecurityZone | `model/network` | `frontmatter.owned_concepts` |
+| ServiceEndpoint | `model/network` | `frontmatter.owned_concepts` |
+| ServiceMeshPolicy | `model/network` | `frontmatter.owned_concepts` |
+| ServiceName | `model/network` | `frontmatter.owned_concepts` |
+| Subnet | `model/network` | `frontmatter.owned_concepts` |
+| Switch | `model/network` | `frontmatter.owned_concepts` |
+| TerminationPoint | `model/network` | `frontmatter.owned_concepts` |
+| TrafficPolicy | `model/network` | `frontmatter.owned_concepts` |
+| TrustZoneReference | `model/network` | `frontmatter.owned_concepts` |
+| UnderlayNetwork | `model/network` | `frontmatter.owned_concepts` |
+| VLAN | `model/network` | `frontmatter.owned_concepts` |
+| VRF | `model/network` | `frontmatter.owned_concepts` |
+| WorkloadEndpoint | `model/network` | `frontmatter.owned_concepts` |
 | InfoTechCanon Observability Model | `model/observability` | `artifact_title` |
+| Alert | `model/observability` | `frontmatter.owned_concepts` |
+| AlertCorrelation | `model/observability` | `frontmatter.owned_concepts` |
+| AlertRoute | `model/observability` | `frontmatter.owned_concepts` |
+| AlertRule | `model/observability` | `frontmatter.owned_concepts` |
+| AlertSuppression | `model/observability` | `frontmatter.owned_concepts` |
+| Annotation | `model/observability` | `frontmatter.owned_concepts` |
+| AvailabilityWindow | `model/observability` | `frontmatter.owned_concepts` |
+| Baggage | `model/observability` | `frontmatter.owned_concepts` |
+| BurnRate | `model/observability` | `frontmatter.owned_concepts` |
+| Correlation | `model/observability` | `frontmatter.owned_concepts` |
+| Counter | `model/observability` | `frontmatter.owned_concepts` |
+| Dashboard | `model/observability` | `frontmatter.owned_concepts` |
+| ErrorBudget | `model/observability` | `frontmatter.owned_concepts` |
+| EscalationReference | `model/observability` | `frontmatter.owned_concepts` |
+| Event | `model/observability` | `frontmatter.owned_concepts` |
+| EventConsumer | `model/observability` | `frontmatter.owned_concepts` |
+| EventCorrelationKey | `model/observability` | `frontmatter.owned_concepts` |
+| EventEnvelope | `model/observability` | `frontmatter.owned_concepts` |
+| EventSource | `model/observability` | `frontmatter.owned_concepts` |
+| EventType | `model/observability` | `frontmatter.owned_concepts` |
+| Exemplar | `model/observability` | `frontmatter.owned_concepts` |
+| Gauge | `model/observability` | `frontmatter.owned_concepts` |
+| HealthState | `model/observability` | `frontmatter.owned_concepts` |
+| Histogram | `model/observability` | `frontmatter.owned_concepts` |
+| Log | `model/observability` | `frontmatter.owned_concepts` |
+| LogContext | `model/observability` | `frontmatter.owned_concepts` |
+| LogLevel | `model/observability` | `frontmatter.owned_concepts` |
+| LogRecord | `model/observability` | `frontmatter.owned_concepts` |
+| LogStream | `model/observability` | `frontmatter.owned_concepts` |
+| Metric | `model/observability` | `frontmatter.owned_concepts` |
+| MetricInstrument | `model/observability` | `frontmatter.owned_concepts` |
+| MetricPoint | `model/observability` | `frontmatter.owned_concepts` |
+| Notification | `model/observability` | `frontmatter.owned_concepts` |
+| ObservabilityEntity | `model/observability` | `frontmatter.owned_concepts` |
+| ObservabilityEvidence | `model/observability` | `frontmatter.owned_concepts` |
+| ObservedIncident | `model/observability` | `frontmatter.owned_concepts` |
+| ObservedResource | `model/observability` | `frontmatter.owned_concepts` |
+| OperationalView | `model/observability` | `frontmatter.owned_concepts` |
+| PerformanceProfile | `model/observability` | `frontmatter.owned_concepts` |
+| PostIncidentObservation | `model/observability` | `frontmatter.owned_concepts` |
+| ProfilingSample | `model/observability` | `frontmatter.owned_concepts` |
+| Query | `model/observability` | `frontmatter.owned_concepts` |
+| QueryResult | `model/observability` | `frontmatter.owned_concepts` |
+| ResourceAttribute | `model/observability` | `frontmatter.owned_concepts` |
+| ResourceProfile | `model/observability` | `frontmatter.owned_concepts` |
+| RootCauseHypothesis | `model/observability` | `frontmatter.owned_concepts` |
+| Runbook | `model/observability` | `frontmatter.owned_concepts` |
+| SLAReference | `model/observability` | `frontmatter.owned_concepts` |
+| Service Level Indicator | `model/observability` | `frontmatter.owned_concepts` |
+| Service Level Objective | `model/observability` | `frontmatter.owned_concepts` |
+| Signal | `model/observability` | `frontmatter.owned_concepts` |
+| SignalSource | `model/observability` | `frontmatter.owned_concepts` |
+| Snapshot | `model/observability` | `frontmatter.owned_concepts` |
+| Span | `model/observability` | `frontmatter.owned_concepts` |
+| SpanEvent | `model/observability` | `frontmatter.owned_concepts` |
+| SpanLink | `model/observability` | `frontmatter.owned_concepts` |
+| Telemetry | `model/observability` | `frontmatter.owned_concepts` |
+| TelemetryPipeline | `model/observability` | `frontmatter.owned_concepts` |
+| TelemetrySource | `model/observability` | `frontmatter.owned_concepts` |
+| TimeSeries | `model/observability` | `frontmatter.owned_concepts` |
+| Timeline | `model/observability` | `frontmatter.owned_concepts` |
+| Trace | `model/observability` | `frontmatter.owned_concepts` |
+| TraceContext | `model/observability` | `frontmatter.owned_concepts` |
+| TraceSample | `model/observability` | `frontmatter.owned_concepts` |
 | InfoTechCanon Organization Model | `model/organization` | `artifact_title` |
+| Accountability | `model/organization` | `frontmatter.owned_concepts` |
+| Actor | `model/organization` | `frontmatter.owned_concepts` |
+| Agent | `model/organization` | `frontmatter.owned_concepts` |
+| Authority | `model/organization` | `frontmatter.owned_concepts` |
+| Membership | `model/organization` | `frontmatter.owned_concepts` |
+| Organization | `model/organization` | `frontmatter.owned_concepts` |
+| OrganizationalUnit | `model/organization` | `frontmatter.owned_concepts` |
+| Ownership | `model/organization` | `frontmatter.owned_concepts` |
+| Person | `model/organization` | `frontmatter.owned_concepts` |
+| Position | `model/organization` | `frontmatter.owned_concepts` |
+| Responsibility | `model/organization` | `frontmatter.owned_concepts` |
+| Role | `model/organization` | `frontmatter.owned_concepts` |
+| Stewardship | `model/organization` | `frontmatter.owned_concepts` |
+| Team | `model/organization` | `frontmatter.owned_concepts` |
 | Community | `model/organization` | `frontmatter.owned_concepts` |
 | Household | `model/organization` | `frontmatter.owned_concepts` |
 | InfoTechCanon Purpose And Demand Model Extension | `model/purpose-demand-extension` | `artifact_title` |
@ -108,7 +567,110 @@ Concept count: **164**
 | ScopePressure | `model/purpose-demand-extension` | `frontmatter.owned_concepts` |
 | EvolutionRequest | `model/purpose-demand-extension` | `frontmatter.owned_concepts` |
 | InfoTechCanon Security Model | `model/security` | `artifact_title` |
+| AttackImpact | `model/security` | `frontmatter.owned_concepts` |
+| AttackPath | `model/security` | `frontmatter.owned_concepts` |
+| AttackPattern | `model/security` | `frontmatter.owned_concepts` |
+| AttackPrecondition | `model/security` | `frontmatter.owned_concepts` |
+| AttackStep | `model/security` | `frontmatter.owned_concepts` |
+| AttackTechnique | `model/security` | `frontmatter.owned_concepts` |
+| BlastRadius | `model/security` | `frontmatter.owned_concepts` |
+| ChokePoint | `model/security` | `frontmatter.owned_concepts` |
+| CompensatingMeasure | `model/security` | `frontmatter.owned_concepts` |
+| Containment | `model/security` | `frontmatter.owned_concepts` |
+| DataSecurityFinding | `model/security` | `frontmatter.owned_concepts` |
+| Detection | `model/security` | `frontmatter.owned_concepts` |
+| DetectionCoverage | `model/security` | `frontmatter.owned_concepts` |
+| DetectionRule | `model/security` | `frontmatter.owned_concepts` |
+| Eradication | `model/security` | `frontmatter.owned_concepts` |
+| Exploit | `model/security` | `frontmatter.owned_concepts` |
+| ExploitLikelihood | `model/security` | `frontmatter.owned_concepts` |
+| Exploitability | `model/security` | `frontmatter.owned_concepts` |
+| Exposure | `model/security` | `frontmatter.owned_concepts` |
+| ExposureFinding | `model/security` | `frontmatter.owned_concepts` |
+| HardeningMeasure | `model/security` | `frontmatter.owned_concepts` |
+| IdentityFinding | `model/security` | `frontmatter.owned_concepts` |
+| Investigation | `model/security` | `frontmatter.owned_concepts` |
+| LessonLearned | `model/security` | `frontmatter.owned_concepts` |
+| Misconfiguration | `model/security` | `frontmatter.owned_concepts` |
+| MisconfigurationFinding | `model/security` | `frontmatter.owned_concepts` |
+| Mitigation | `model/security` | `frontmatter.owned_concepts` |
+| PenTestFinding | `model/security` | `frontmatter.owned_concepts` |
+| ProtectedAssetReference | `model/security` | `frontmatter.owned_concepts` |
+| Recovery | `model/security` | `frontmatter.owned_concepts` |
+| SecurityAssessment | `model/security` | `frontmatter.owned_concepts` |
+| SecurityBoundary | `model/security` | `frontmatter.owned_concepts` |
+| SecurityDomain | `model/security` | `frontmatter.owned_concepts` |
+| SecurityEntity | `model/security` | `frontmatter.owned_concepts` |
+| SecurityEvidence | `model/security` | `frontmatter.owned_concepts` |
+| SecurityFinding | `model/security` | `frontmatter.owned_concepts` |
+| SecurityIncident | `model/security` | `frontmatter.owned_concepts` |
+| SecurityMeasure | `model/security` | `frontmatter.owned_concepts` |
+| SecurityPosture | `model/security` | `frontmatter.owned_concepts` |
+| SecurityPostureScore | `model/security` | `frontmatter.owned_concepts` |
+| SecurityReview | `model/security` | `frontmatter.owned_concepts` |
+| SecuritySignal | `model/security` | `frontmatter.owned_concepts` |
+| Severity | `model/security` | `frontmatter.owned_concepts` |
+| SupplyChainFinding | `model/security` | `frontmatter.owned_concepts` |
+| Tactic | `model/security` | `frontmatter.owned_concepts` |
+| Threat | `model/security` | `frontmatter.owned_concepts` |
+| ThreatActor | `model/security` | `frontmatter.owned_concepts` |
+| ThreatEvent | `model/security` | `frontmatter.owned_concepts` |
+| Vulnerability | `model/security` | `frontmatter.owned_concepts` |
+| VulnerabilityFinding | `model/security` | `frontmatter.owned_concepts` |
+| Weakness | `model/security` | `frontmatter.owned_concepts` |
 | InfoTechCanon Task Model | `model/task` | `artifact_title` |
+| AcceptanceCriteria | `model/task` | `frontmatter.owned_concepts` |
+| Action | `model/task` | `frontmatter.owned_concepts` |
+| Actionability | `model/task` | `frontmatter.owned_concepts` |
+| ApprovalTask | `model/task` | `frontmatter.owned_concepts` |
+| AssignmentReference | `model/task` | `frontmatter.owned_concepts` |
+| Backlog | `model/task` | `frontmatter.owned_concepts` |
+| Blocker | `model/task` | `frontmatter.owned_concepts` |
+| Bug | `model/task` | `frontmatter.owned_concepts` |
+| ChangeTask | `model/task` | `frontmatter.owned_concepts` |
+| Commitment | `model/task` | `frontmatter.owned_concepts` |
+| CompletionEvidence | `model/task` | `frontmatter.owned_concepts` |
+| Complexity | `model/task` | `frontmatter.owned_concepts` |
+| Deadline | `model/task` | `frontmatter.owned_concepts` |
+| DecisionTask | `model/task` | `frontmatter.owned_concepts` |
+| DefinitionOfDone | `model/task` | `frontmatter.owned_concepts` |
+| DefinitionOfReady | `model/task` | `frontmatter.owned_concepts` |
+| Deliverable | `model/task` | `frontmatter.owned_concepts` |
+| Dependency | `model/task` | `frontmatter.owned_concepts` |
+| DueDate | `model/task` | `frontmatter.owned_concepts` |
+| EffortEstimate | `model/task` | `frontmatter.owned_concepts` |
+| Epic | `model/task` | `frontmatter.owned_concepts` |
+| Experiment | `model/task` | `frontmatter.owned_concepts` |
+| Exploration | `model/task` | `frontmatter.owned_concepts` |
+| Feature | `model/task` | `frontmatter.owned_concepts` |
+| Importance | `model/task` | `frontmatter.owned_concepts` |
+| IncidentTask | `model/task` | `frontmatter.owned_concepts` |
+| Issue | `model/task` | `frontmatter.owned_concepts` |
+| Milestone | `model/task` | `frontmatter.owned_concepts` |
+| Move | `model/task` | `frontmatter.owned_concepts` |
+| NextAction | `model/task` | `frontmatter.owned_concepts` |
+| Option | `model/task` | `frontmatter.owned_concepts` |
+| Outcome | `model/task` | `frontmatter.owned_concepts` |
+| Priority | `model/task` | `frontmatter.owned_concepts` |
+| ProblemTask | `model/task` | `frontmatter.owned_concepts` |
+| Reachability | `model/task` | `frontmatter.owned_concepts` |
+| Readiness | `model/task` | `frontmatter.owned_concepts` |
+| RemediationTask | `model/task` | `frontmatter.owned_concepts` |
+| Request | `model/task` | `frontmatter.owned_concepts` |
+| ReviewTask | `model/task` | `frontmatter.owned_concepts` |
+| Step | `model/task` | `frontmatter.owned_concepts` |
+| Story | `model/task` | `frontmatter.owned_concepts` |
+| Task | `model/task` | `frontmatter.owned_concepts` |
+| TaskEntity | `model/task` | `frontmatter.owned_concepts` |
+| Transition | `model/task` | `frontmatter.owned_concepts` |
+| Urgency | `model/task` | `frontmatter.owned_concepts` |
+| Value | `model/task` | `frontmatter.owned_concepts` |
+| WIPLimit | `model/task` | `frontmatter.owned_concepts` |
+| WaitingFor | `model/task` | `frontmatter.owned_concepts` |
+| WorkItem | `model/task` | `frontmatter.owned_concepts` |
+| WorkPackage | `model/task` | `frontmatter.owned_concepts` |
+| Workflow | `model/task` | `frontmatter.owned_concepts` |
+| WorkflowState | `model/task` | `frontmatter.owned_concepts` |
 | Intent Scope Purposes Pattern | `pattern/intent-scope-purposes` | `artifact_title` |
 | IntentScopePurposePattern | `pattern/intent-scope-purposes` | `frontmatter.owned_concepts` |
 | AgenticDrivesFunctional | `practice-pattern/agentic-drives-functional` | `artifact_title` |
@ -170,6 +732,30 @@ Concept count: **164**
 | LayoutConformanceLevel | `standard/repository-layout` | `frontmatter.owned_concepts` |
 | ScopeIntentOperatingMode | `standard/repository-layout` | `frontmatter.owned_concepts` |
 | InfoTechCanon Tagging Standard | `standard/tagging` | `artifact_title` |
+| ControlledTag | `standard/tagging` | `frontmatter.owned_concepts` |
+| DeprecatedTag | `standard/tagging` | `frontmatter.owned_concepts` |
+| EmergentTag | `standard/tagging` | `frontmatter.owned_concepts` |
+| OverTaggedEntity | `standard/tagging` | `frontmatter.owned_concepts` |
+| Tag | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagAlias | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagAssignment | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagCategory | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagConflict | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagDefinition | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagDrift | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagKey | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagMapping | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagNamespace | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagProfile | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagQuery | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagRule | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagScheme | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagSelector | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagSet | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagValue | `standard/tagging` | `frontmatter.owned_concepts` |
+| TagView | `standard/tagging` | `frontmatter.owned_concepts` |
+| TaggingEntity | `standard/tagging` | `frontmatter.owned_concepts` |
+| UntaggedEntity | `standard/tagging` | `frontmatter.owned_concepts` |

 ## Duplicate Candidates

--- a/infospace/views/repository-tree.md
+++ b/infospace/views/repository-tree.md
@ -2,7 +2,7 @@

 # Repository Tree

-File count: **280**
+File count: **291**

 - `README.md`
 - `agent/README.md`
@ -200,29 +200,39 @@ File count: **280**
 - `interfaces/security-canon-boundary.md`
 - `kernel/InfoTechCanonCore.md`
 - `kernel/InfoTechCanonKernelMap.md`
+- `kernel/boundary-review.md`
 - `mappings/README.md`
 - `mappings/capability-anchors.yaml`
 - `mappings/purpose-demand-governance-candidates.yaml`
 - `models/access-control/InfoTechCanonAccessControlModel.md`
+- `models/access-control/boundary-review.md`
 - `models/capability/InfoTechCanonCapabilityModel.md`
 - `models/capability/capabilities.yaml`
 - `models/data/InfoTechCanonDataModel.md`
 - `models/data/attribute-value-types-alignment.md`
 - `models/data/attribute-value-types.yaml`
+- `models/data/boundary-review.md`
 - `models/devsecops/InfoTechCanonDevSecOpsModel.md`
+- `models/devsecops/boundary-review.md`
 - `models/evidence/InfoTechCanonEvidenceModel.md`
 - `models/governance/InfoTechCanonGovernanceModel.md`
 - `models/governance/InfoTechCanonPurposeDemandExtension.md`
+- `models/governance/boundary-review.md`
 - `models/governance/evidence-basis.yaml`
 - `models/identity/InfoTechCanonIdentityModel.md`
 - `models/identity/boundary-review.md`
 - `models/information-space/InfoTechCanonInformationSpaceModel.md`
+- `models/information-space/boundary-review.md`
 - `models/landscape/InfoTechCanonLandscapeModel.md`
 - `models/network/InfoTechCanonNetworkModel.md`
+- `models/network/boundary-review.md`
 - `models/observability/InfoTechCanonObservabilityModel.md`
+- `models/observability/boundary-review.md`
 - `models/organization/InfoTechCanonOrganizationModel.md`
 - `models/security/InfoTechCanonSecurityModel.md`
+- `models/security/boundary-review.md`
 - `models/task/InfoTechCanonTaskModel.md`
+- `models/task/boundary-review.md`
 - `patterns/AgenticDrivesFunctional.md`
 - `patterns/InterfaceDeprecationStrangler.md`
 - `patterns/PracticePatternScheme.md`
@ -273,6 +283,7 @@ File count: **280**
 - `standards/emission-cadence/examples/qonto-assistant.yaml`
 - `standards/repository-layout/InfoTechCanonRepositoryLayoutStandard.md`
 - `standards/tagging/InfoTechCanonTaggingStandard.md`
+- `standards/tagging/boundary-review.md`
 - `validation/README.md`
 - `validation/latest.json`
 - `validation/model-import-reviews.yaml`
--- a/tests/test_maintenance.py
+++ b/tests/test_maintenance.py
@ -9,6 +9,7 @@ import pytest
 import yaml

 from info_tech_canon.cli import main
+from info_tech_canon.generation import concept_ownership
 from info_tech_canon.maintenance import (
    check_generated,
    concept_candidates,
@ -121,16 +122,22 @@ def test_missing_mapping_schema_is_a_validation_finding(corpus):
    assert any(e["code"] == "mapping_schema_unreadable" for e in payload["errors"])


-def test_concept_candidates_find_prose_definitions_the_declarations_miss():
+def test_authority_is_declared_where_the_kernel_map_assigns_it():
    """The gap that let itc-org:Authority pass the SecurityCanon conflict check."""
-    report = concept_candidates(load_context())
-    organization = next(item for item in report["artifacts"]
-                        if item["artifact"] == "model/organization")
+    ownership = concept_ownership(load_context())
+    owners = {item["concept"]: item["owner"] for item in ownership["concepts"]}

-    assert "Authority" in organization["undeclared"]
-    assert organization["undeclared_count"] > organization["declared_count"]
-    assert report["undeclared_total"] > 0
-    assert "model/security" in report["silent_artifacts"]
+    assert owners["Authority"] == "model/organization"
+    assert owners["Actor"] == "model/organization"
+    assert not ownership["ownership_conflicts"]
+
+
+def test_only_the_kernel_map_declares_no_concepts():
+    """It assigns concepts to owners rather than defining them (T02)."""
+    report = concept_candidates(load_context())
+
+    assert report["silent_artifacts"] == ["kernel/itc-kernel-map"]
+    assert report["undeclared_total"] < report["candidate_total"] / 2


 def test_concept_candidates_ignore_preserved_source():
--- a/workplans/INFO-WP-0027-concept-declaration-coverage.md
+++ b/workplans/INFO-WP-0027-concept-declaration-coverage.md
@ -106,7 +106,7 @@ regression test. `make check` passes with 49 tests.

 ```task
 id: INFO-WP-0027-T02
-status: todo
+status: done
 priority: high
 state_hub_task_id: "b086abf1-3b36-5b05-a8a8-c8b12c9ab280"
 ```
@ -127,6 +127,64 @@ Expect this task to surface genuine conflicts once the index grows. A conflict
 found here is the workplan working, not a regression; resolve each by naming one
 owner, as ADHOC-2026-09-20-T01 did for `Scope`.

+### Result — 2026-09-20 (T02)
+
+Declarations written for twelve of the thirteen silent artifacts, plus the
+map-assigned concepts the Organization Model was missing and the Landscape seed
+concepts the extractor could not see. The ownership index goes from **164 entries
+to 750**, and undeclared prose definitions fall from **637 to 57**, with
+**zero ownership conflicts**. The 57 that remain are the overlaps this round
+assigned to another owner: they are imports, and each is recorded in a boundary
+review.
+
+`kernel/itc-kernel-map` declares nothing, deliberately. It assigns concepts to
+owners rather than defining them, and it is now the only silent artifact — which
+the test suite asserts, so a future artifact that declares nothing fails.
+
+The kernel map's concept-owner table was used as the arbiter wherever it assigns
+an owner, which resolved most overlaps without new judgment. Fifteen concepts it
+does not assign were decided in this round and recorded with rationale.
+
+`itc-org:Authority` — the concept whose absence produced finding F-1 — is now
+declared, along with `Actor`, `Ownership`, `Membership`, `Role`, `Responsibility`
+and `Accountability`, which SecurityCanon and the identity model already treat as
+organization-owned. The regression test asserts the kernel map's assignment and
+the declaration agree.
+
+One concept is deliberately left undeclared. The kernel map assigns `Profile` to
+Core, but the identity model owns `Profile` under accepted CUST-ADR-006, and
+Observability defines a runtime performance profile that the identity boundary
+review already disambiguates. Declaring Core's sense would have created the
+first real conflict; resolving three senses needs a decision, not a declaration.
+It is recorded as open in the kernel boundary review.
+
+### Boundary reviews
+
+```task
+id: INFO-WP-0027-T06
+status: done
+priority: medium
+```
+
+Every artifact that gained a declaration and has an overlap now carries a
+`boundary-review.md` beside it, in the shape the identity model has used since
+INFO-WP-0021: one row per overlapping concept, naming the owner, the resolution
+and whether the kernel map or this review decided it. Eleven were written —
+kernel, access-control, data, devsecops, governance, information-space, network,
+observability, security, task and tagging. Landscape gained declarations without
+overlaps and needs none.
+
+The largest finding is in the kernel review. Core and the Information Space model
+restate eight provenance concepts — `Activity`, `AgentReference`, `Alias`,
+`DecisionRecord`, `ExternalReference`, `Influence`, `Namespace` and `Source` — in
+nearly identical words. Core owns them with the provenance family; Information
+Space imports. Four more were decided by disambiguation rather than transfer:
+`Label` (Core, with Tagging's display sense kept), `Drift` (Core, with Network's
+configuration drift kept), `Summary` (Information Space, with Observability's
+metric aggregation kept) and `Attribute` (Data, with Access Control importing for
+attribute-based decisions). `Exposure` and `Investigation` go to Security;
+`Subject` stays with ITC-ACCESS as SECURITY-DEC-2026-003 records.
+
 ## Report coverage instead of asserting completeness

 ```task