Declare concepts and review boundaries for the silent artifacts (T02)

Twelve of the thirteen artifacts that declared nothing now declare what they
define, together with the map-assigned concepts the Organization Model was
missing and the Landscape seed concepts the extractor cannot see because they
are listed rather than defined in prose. The ownership index grows from 164
entries to 750, undeclared prose definitions fall from 637 to 57, and there are
no ownership conflicts. The 57 that remain are overlaps this round assigned to
another owner: imports, each recorded in a boundary review.

The kernel map declares nothing, deliberately, because it assigns concepts to
owners rather than defining them. It is now the only silent artifact and the
suite asserts that, so an artifact added without declarations fails.

itc-org:Authority is declared, with Actor, Ownership, Membership, Role,
Responsibility and Accountability, which SecurityCanon and the identity model
already treat as organization-owned. The regression test that previously
asserted the blind spot now asserts that the kernel map's assignment and the
declaration agree.

Profile is deliberately left undeclared. The kernel map assigns it to Core, the
identity model owns it under accepted CUST-ADR-006, and Observability defines a
runtime performance profile. Three senses need a decision, not a declaration, so
it is recorded as open rather than forced.

Eleven boundary reviews are added beside the artifacts they describe, in the
shape the identity model has used since INFO-WP-0021. The largest finding is
that Core and the Information Space model restate eight provenance concepts in
nearly identical words; Core owns them and Information Space imports. Label,
Drift, Summary and Attribute are resolved by disambiguation rather than
transfer.

make check passes with 50 tests, clean validation, no stale generated assets.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 3588@bnt-lap001
Assistant-Session: 24b80f66-e5a7-4e61-99fe-2d422e6d17da

infospace/agent/retrieval-index.yaml

@@ -689,7 +689,40 @@ items:
   summary: 'Kernel artifact that defines canon structure or integration: InfoTechCanon
     Core.'
   owned_concepts:
+  - Activity
+  - AgentBrief
+  - AgentReference
+  - Alias
+  - Ambiguity
+  - Assimilation
+  - CanonArtifact
+  - CanonInterfaceCard
+  - Canonical Owner
+  - ChangeRecord
+  - Concept
+  - Conflict
+  - ConformanceLevel
+  - DecisionRecord
+  - Drift
+  - ExternalReference
+  - Gap
+  - Import
+  - Influence
   - InfoTechCanon Core
+  - Label
+  - Mapping
+  - Namespace
+  - OpenQuestion
+  - Overlap
+  - Pattern
+  - ProvenanceRecord
+  - RelationshipDefinition
+  - Source
+  - Standard
+  - ValidationResult
+  - ValidationRule
+  - Version
+  - VersionRecord
   imports: []
   relationships: []
   warnings: []
@@ -798,7 +831,53 @@ items:
   summary: 'Domain model used by canon profiles and standards: InfoTechCanon Access
     Control Model.'
   owned_concepts:
+  - AccessCertification
+  - AccessControlEntity
+  - AccessFinding
+  - AccessRemediation
+  - AccessReview
+  - AccessRole
+  - AccessSession
+  - AgentAccess
+  - AuthenticatedSubject
+  - AuthenticationStrengthReference
+  - AuthorizationDecision
+  - AuthorizationRequest
+  - BreakGlassAccess
+  - Condition
+  - CredentialReference
+  - DecisionReason
+  - DelegatedAccess
+  - Denial
+  - Entitlement
+  - EvaluationContext
+  - ExcessAccess
+  - Grant
+  - IdentityReference
   - InfoTechCanon Access Control Model
+  - JustInTimeAccess
+  - Operation
+  - OrphanedAccess
+  - Permission
+  - PolicyAdministrationPoint
+  - PolicyBinding
+  - PolicyDecisionPoint
+  - PolicyEnforcementPoint
+  - PolicyInformationPoint
+  - PolicyRetrievalPoint
+  - Principal
+  - Privilege
+  - ProtectedResource
+  - RelationshipTuple
+  - Resource
+  - ResourceAction
+  - ResourceScope
+  - RoleBinding
+  - ServiceAccountAccess
+  - StaleAccess
+  - Subject
+  - TemporaryAccess
+  - TokenReference
   imports:
   - kernel/itc-core
   - model/evidence
@@ -877,7 +956,58 @@ items:
   summary: 'Domain model used by canon profiles and standards: InfoTechCanon Data
     Model.'
   owned_concepts:
+  - Attribute
+  - AttributeValueType
+  - BreakingChange
+  - BusinessTerm
+  - CodeList
+  - CompatibilityRule
+  - Constraint
+  - ConsumerExpectation
+  - DataAccessPattern
+  - DataAvailability
+  - DataCategory
+  - DataClassification
+  - DataContract
+  - DataDefinition
+  - DataDistribution
+  - DataDomain
+  - DataElement
+  - DataElementConcept
+  - DataEntity
+  - DataFlow
+  - DataFreshness
+  - DataLineage
+  - DataObject
+  - DataProduct
+  - DataQualityCheck
+  - DataQualityDimension
+  - DataQualityIssue
+  - DataQualityResult
+  - DataQualityRule
+  - DataResidency
+  - DataService
+  - DataStoreReference
+  - DataSubjectCategory
+  - DataType
+  - DataUsageConstraint
+  - Dataset
+  - DatasetSeries
+  - Derivation
+  - Field
+  - FitnessForUse
+  - GlossaryTerm
   - InfoTechCanon Data Model
+  - MasterDataReference
+  - ProcessingPurpose
+  - ProducerExpectation
+  - Record
+  - ReferenceData
+  - Representation
+  - RetentionRuleReference
+  - SchemaEvolutionPolicy
+  - Sensitivity
+  - Transformation
   imports:
   - kernel/itc-core
   - model/evidence
@@ -900,7 +1030,69 @@ items:
   summary: 'Domain model used by canon profiles and standards: InfoTechCanon DevSecOps
     Model.'
   owned_concepts:
+  - AgentExecutionEvidence
+  - AgentGeneratedPatch
+  - AgentReview
+  - Artifact
+  - ArtifactDigest
+  - ArtifactVersion
+  - Attestation
+  - Branch
+  - ChangeFailure
+  - CodeReview
+  - CodingAgentChange
+  - Commit
+  - ContainerImage
+  - DeliveryMetric
+  - DeploymentExecution
+  - DeploymentHealthSignal
+  - DeploymentManifest
+  - DeploymentPlan
+  - DeploymentRecord
+  - DeploymentVerification
+  - DevSecOpsEntity
+  - EnvironmentPromotion
+  - FeedbackLoop
+  - GateDecision
+  - HumanSupervisionReference
+  - IaCModule
   - InfoTechCanon DevSecOps Model
+  - Package
+  - Pipeline
+  - PipelineDefinition
+  - PipelineIdentity
+  - PipelineJob
+  - PipelineResult
+  - PipelineRun
+  - PipelineStage
+  - PipelineStep
+  - PolicyGate
+  - Promotion
+  - Provenance
+  - PullRequest
+  - QualityGate
+  - RecoveryAction
+  - Release
+  - ReleaseApprovalReference
+  - ReleaseCandidate
+  - ReleaseNote
+  - ReleaseVersion
+  - Repository
+  - Rollback
+  - RolloutStrategy
+  - Runner
+  - ScanResult
+  - ScanRun
+  - Signature
+  - Software Bill of Materials
+  - SourceChange
+  - SourceTag
+  - SupplyChainEvidence
+  - TestResult
+  - TestRun
+  - TransparencyLogEntry
+  - VEXReference
+  - VerificationEvidence
   imports:
   - kernel/itc-core
   - model/evidence
@@ -940,7 +1132,50 @@ items:
   summary: 'Domain model used by canon profiles and standards: InfoTechCanon Governance
     Model.'
   owned_concepts:
+  - Approval
+  - Assertion
+  - Assessment
+  - AssuranceCase
+  - AssuranceConclusion
+  - Audit
+  - CompensatingControl
+  - ComplianceRequirement
+  - Control
+  - ControlActivity
+  - ControlImplementation
+  - ControlObjective
+  - ControlResult
+  - ControlTest
+  - Decision
+  - DecisionRight
+  - Escalation
+  - EvidenceBasis
+  - Exception
+  - Finding
+  - GovernanceCycle
+  - GovernanceEntity
+  - GovernanceForum
+  - GovernanceProcess
+  - GovernanceScope
+  - GovernanceSystem
+  - Guideline
+  - Impact
   - InfoTechCanon Governance Model
+  - Likelihood
+  - Nonconformity
+  - Obligation
+  - Policy
+  - Principle
+  - RegulatoryReference
+  - Remediation
+  - Requirement
+  - Review
+  - Risk
+  - RiskAcceptance
+  - RiskSource
+  - RiskTreatment
+  - Rule
+  - Waiver
   imports:
   - kernel/itc-core
   - model/evidence
@@ -1007,7 +1242,66 @@ items:
   summary: 'Domain model used by canon profiles and standards: InfoTechCanon Information
     Space Model.'
   owned_concepts:
+  - Anchor
+  - AssimilationReport
+  - Backlink
+  - Block
+  - BrokenLink
+  - Chunk
+  - Citation
+  - Collection
+  - ConceptIndex
+  - ConceptPage
+  - ConflictingDefinition
+  - Corpus
+  - CrossReference
+  - DependencyReference
+  - Document
+  - DuplicateContent
+  - EmbeddingRecord
+  - Excerpt
+  - FrontMatter
+  - Generation
+  - GraphView
+  - Heading
+  - Index
   - InfoTechCanon Information Space Model
+  - InformationSpace
+  - Infospace
+  - KnowledgeArtifact
+  - KnowledgeBase
+  - Link
+  - LowRetrievalQuality
+  - MapView
+  - MappingDocument
+  - MappingReference
+  - MarkdownDocument
+  - MetadataRecord
+  - MissingMetadata
+  - NavigationView
+  - OrphanArtifact
+  - PatternDocument
+  - ProfileDocument
+  - RelationshipIndex
+  - RepositorySpace
+  - RetrievalContext
+  - RetrievalEvaluation
+  - RetrievalQuery
+  - RetrievalResult
+  - RetrievalUnit
+  - ReviewRecord
+  - Revision
+  - SearchIndex
+  - Section
+  - Shard
+  - SourceReference
+  - StaleContent
+  - StandardDocument
+  - Status
+  - Summary
+  - TopicIndex
+  - UsePath
+  - VectorIndex
   imports:
   - kernel/itc-core
   - model/evidence
@@ -1028,7 +1322,19 @@ items:
   summary: 'Domain model used by canon profiles and standards: InfoTechCanon Landscape
     Model.'
   owned_concepts:
+  - ApplicationService
+  - BusinessService
+  - Environment
   - InfoTechCanon Landscape Model
+  - LandscapeClaim
+  - LandscapeEntity
+  - LandscapeEvidence
+  - LandscapeRelationship
+  - LandscapeSource
+  - LandscapeState
+  - RuntimeResource
+  - TechnicalService
+  - Workload
   imports:
   - kernel/itc-core
   - model/evidence
@@ -1046,7 +1352,82 @@ items:
   summary: 'Domain model used by canon profiles and standards: InfoTechCanon Network
     Model.'
   owned_concepts:
+  - ACL
+  - AddressFamily
+  - AllowedFlow
+  - AppliedNetworkState
+  - AssessedNetworkState
+  - AttackSurfaceReference
+  - Circuit
+  - ConnectivityService
+  - DNSRecord
+  - DNSZone
+  - DeclaredNetworkState
+  - DeniedFlow
+  - EgressEndpoint
+  - Endpoint
+  - Firewall
+  - FirewallRule
+  - Gateway
+  - HistoricalNetworkState
+  - Hostname
+  - IPAddress
+  - IPAllocation
   - InfoTechCanon Network Model
+  - IngressEndpoint
+  - IntendedNetworkState
+  - Interface
+  - KubernetesNetworkPolicy
+  - LoadBalancer
+  - ManagementEndpoint
+  - Microsegment
+  - NAT
+  - NetworkACL
+  - NetworkConfiguration
+  - NetworkDevice
+  - NetworkDomain
+  - NetworkEntity
+  - NetworkFabric
+  - NetworkFlow
+  - NetworkIntent
+  - NetworkNode
+  - NetworkPolicy
+  - NetworkRegion
+  - NetworkSegment
+  - NetworkSite
+  - NetworkTenant
+  - NetworkZone
+  - NextHop
+  - ObservedFlow
+  - ObservedNetworkState
+  - OverlayNetwork
+  - Path
+  - Peering
+  - Port
+  - Prefix
+  - PrivateEndpoint
+  - Proxy
+  - PublicEndpoint
+  - ReachabilityClaim
+  - ReachabilityTest
+  - ReconciliationResult
+  - Route
+  - RouteTable
+  - Router
+  - SecurityGroup
+  - SecurityZone
+  - ServiceEndpoint
+  - ServiceMeshPolicy
+  - ServiceName
+  - Subnet
+  - Switch
+  - TerminationPoint
+  - TrafficPolicy
+  - TrustZoneReference
+  - UnderlayNetwork
+  - VLAN
+  - VRF
+  - WorkloadEndpoint
   imports:
   - kernel/itc-core
   - model/evidence
@@ -1067,7 +1448,71 @@ items:
   summary: 'Domain model used by canon profiles and standards: InfoTechCanon Observability
     Model.'
   owned_concepts:
+  - Alert
+  - AlertCorrelation
+  - AlertRoute
+  - AlertRule
+  - AlertSuppression
+  - Annotation
+  - AvailabilityWindow
+  - Baggage
+  - BurnRate
+  - Correlation
+  - Counter
+  - Dashboard
+  - ErrorBudget
+  - EscalationReference
+  - Event
+  - EventConsumer
+  - EventCorrelationKey
+  - EventEnvelope
+  - EventSource
+  - EventType
+  - Exemplar
+  - Gauge
+  - HealthState
+  - Histogram
   - InfoTechCanon Observability Model
+  - Log
+  - LogContext
+  - LogLevel
+  - LogRecord
+  - LogStream
+  - Metric
+  - MetricInstrument
+  - MetricPoint
+  - Notification
+  - ObservabilityEntity
+  - ObservabilityEvidence
+  - ObservedIncident
+  - ObservedResource
+  - OperationalView
+  - PerformanceProfile
+  - PostIncidentObservation
+  - ProfilingSample
+  - Query
+  - QueryResult
+  - ResourceAttribute
+  - ResourceProfile
+  - RootCauseHypothesis
+  - Runbook
+  - SLAReference
+  - Service Level Indicator
+  - Service Level Objective
+  - Signal
+  - SignalSource
+  - Snapshot
+  - Span
+  - SpanEvent
+  - SpanLink
+  - Telemetry
+  - TelemetryPipeline
+  - TelemetrySource
+  - TimeSeries
+  - Timeline
+  - Trace
+  - TraceContext
+  - TraceSample
   imports:
   - kernel/itc-core
   - model/evidence
@@ -1088,9 +1533,23 @@ items:
   summary: 'Domain model used by canon profiles and standards: InfoTechCanon Organization
     Model.'
   owned_concepts:
+  - Accountability
+  - Actor
+  - Agent
+  - Authority
   - Community
   - Household
   - InfoTechCanon Organization Model
+  - Membership
+  - Organization
+  - OrganizationalUnit
+  - Ownership
+  - Person
+  - Position
+  - Responsibility
+  - Role
+  - Stewardship
+  - Team
   imports:
   - kernel/itc-core
   - model/evidence
@@ -1145,7 +1604,58 @@ items:
   summary: 'Domain model used by canon profiles and standards: InfoTechCanon Security
     Model.'
   owned_concepts:
+  - AttackImpact
+  - AttackPath
+  - AttackPattern
+  - AttackPrecondition
+  - AttackStep
+  - AttackTechnique
+  - BlastRadius
+  - ChokePoint
+  - CompensatingMeasure
+  - Containment
+  - DataSecurityFinding
+  - Detection
+  - DetectionCoverage
+  - DetectionRule
+  - Eradication
+  - Exploit
+  - ExploitLikelihood
+  - Exploitability
+  - Exposure
+  - ExposureFinding
+  - HardeningMeasure
+  - IdentityFinding
   - InfoTechCanon Security Model
+  - Investigation
+  - LessonLearned
+  - Misconfiguration
+  - MisconfigurationFinding
+  - Mitigation
+  - PenTestFinding
+  - ProtectedAssetReference
+  - Recovery
+  - SecurityAssessment
+  - SecurityBoundary
+  - SecurityDomain
+  - SecurityEntity
+  - SecurityEvidence
+  - SecurityFinding
+  - SecurityIncident
+  - SecurityMeasure
+  - SecurityPosture
+  - SecurityPostureScore
+  - SecurityReview
+  - SecuritySignal
+  - Severity
+  - SupplyChainFinding
+  - Tactic
+  - Threat
+  - ThreatActor
+  - ThreatEvent
+  - Vulnerability
+  - VulnerabilityFinding
+  - Weakness
   imports:
   - kernel/itc-core
   - model/access-control
@@ -1166,7 +1676,59 @@ items:
   summary: 'Domain model used by canon profiles and standards: InfoTechCanon Task
     Model.'
   owned_concepts:
+  - AcceptanceCriteria
+  - Action
+  - Actionability
+  - ApprovalTask
+  - AssignmentReference
+  - Backlog
+  - Blocker
+  - Bug
+  - ChangeTask
+  - Commitment
+  - CompletionEvidence
+  - Complexity
+  - Deadline
+  - DecisionTask
+  - DefinitionOfDone
+  - DefinitionOfReady
+  - Deliverable
+  - Dependency
+  - DueDate
+  - EffortEstimate
+  - Epic
+  - Experiment
+  - Exploration
+  - Feature
+  - Importance
+  - IncidentTask
   - InfoTechCanon Task Model
+  - Issue
+  - Milestone
+  - Move
+  - NextAction
+  - Option
+  - Outcome
+  - Priority
+  - ProblemTask
+  - Reachability
+  - Readiness
+  - RemediationTask
+  - Request
+  - ReviewTask
+  - Step
+  - Story
+  - Task
+  - TaskEntity
+  - Transition
+  - Urgency
+  - Value
+  - WIPLimit
+  - WaitingFor
+  - WorkItem
+  - WorkPackage
+  - Workflow
+  - WorkflowState
   imports:
   - kernel/itc-core
   - model/evidence
@@ -1917,7 +2479,31 @@ items:
   source_path: seeds/InfoTechCanonTaggingStandard_RC1_seed.md
   summary: 'Cross-cutting canon standard: InfoTechCanon Tagging Standard.'
   owned_concepts:
+  - ControlledTag
+  - DeprecatedTag
+  - EmergentTag
   - InfoTechCanon Tagging Standard
+  - OverTaggedEntity
+  - Tag
+  - TagAlias
+  - TagAssignment
+  - TagCategory
+  - TagConflict
+  - TagDefinition
+  - TagDrift
+  - TagKey
+  - TagMapping
+  - TagNamespace
+  - TagProfile
+  - TagQuery
+  - TagRule
+  - TagScheme
+  - TagSelector
+  - TagSet
+  - TagValue
+  - TagView
+  - TaggingEntity
+  - UntaggedEntity
   imports:
   - kernel/itc-core
   - model/evidence