Standards Index¶
The bedrock list. Every entry below is a standard, specification, methodology, or canonical reference the untool.ai platform anchors to — not "inspired by," but normatively cited in an Architecture Decision Record (ADR), a contract, or a foundational doc.
This page exists so that a reviewer — an architect, a security lead, an auditor, or a compliance reader — can scan a single index and verify that the platform is standing on bedrock rather than inventing. Wherever possible each row links to the ADR or doc that adopts the standard, the standards body that publishes it, and the exact version we anchor to. Versions are pinned: this page does not say "latest" — it says the version our generators, contracts, and conformance tests target. When we deviate from a standard (e.g. a BFO-lite projection of our UFO model), the deviation itself is recorded in an ADR and noted in the "Used in" column.
The catalog is grouped into eleven layers. The first ten are normative standards; the eleventh is a curated bibliography of the books that shaped the methodology. Together they form the platform's standards spine — the answer to "where does this come from?"
1. Foundational ontology & knowledge representation¶
The platform's conceptual core is a UFO/OntoUML model that projects to a BFO/CCO interop view. Both lineages are recorded so that BFO/OBO-aligned consumers and UFO/OntoUML-aligned consumers can both ingest the model without translation loss.
| Standard | Body / Author | Version | Used in | External link |
|---|---|---|---|---|
| Basic Formal Ontology (BFO) | ISO/IEC (originally IFOMIS / Barry Smith) | BFO 2020 — ISO/IEC 21838-2:2021 | ARC-ADR-040 (ontology stack), .claude/skills/bfo-ontology/ |
https://www.iso.org/standard/74572.html · https://basic-formal-ontology.org/ |
| Top-Level Ontologies — Requirements | ISO/IEC | ISO/IEC 21838-1:2021 | Adopted as the umbrella conformance target for BFO 2020 | https://www.iso.org/standard/71954.html |
| Unified Foundational Ontology (UFO) | Guizzardi et al. (NEMO, UFES) | UFO-A/B/C consolidated (2022 refresh) | ARC-ADR-040, ARC-ADR-032, .claude/skills/ufo-ontology/ |
https://nemo.inf.ufes.br/en/projects/ufo/ |
| OntoUML | Guizzardi et al. | OntoUML 2 (2022 metamodel) | Primary authoring discipline for the platform self-model | https://ontouml.org/ |
| gUFO (gentle UFO, OWL implementation) | Almeida, Guizzardi, Falbo et al. | gUFO 1.0 (2019, current) | OWL projection for ontology/platform-self-model/ |
https://nemo-ufes.github.io/gufo/ |
| OBO Foundry Principles | OBO Foundry Operations Committee | Principles v1.4 (2023) | ARC-ADR-040 — sets the obo-style commitment | https://obofoundry.org/principles/fp-000-summary.html |
| Common Core Ontologies (CCO) | CUBRC / Ronald Arp et al. | CCO v2.0 (2024) | BFO/CCO interop projection of the self-model | https://www.commoncoreontologies.org/ |
| Information Artifact Ontology (IAO) | OBO Foundry | IAO 2023-06 release | Document/specification entities in the self-model | https://obofoundry.org/ontology/iao.html |
| Relation Ontology (RO) | OBO Foundry | RO 2024-04 release | Relations between continuants/occurrents | https://obofoundry.org/ontology/ro.html |
| PROV-O — Provenance Ontology | W3C | W3C Recommendation, 30 April 2013 | Lineage on every Object Model node and Data Vault satellite | https://www.w3.org/TR/prov-o/ |
| SKOS — Simple Knowledge Organization System | W3C | W3C Recommendation, 18 August 2009 | Controlled vocabularies, taxonomist agent outputs | https://www.w3.org/TR/skos-reference/ |
| Dublin Core Terms | DCMI | DCMI Metadata Terms, 2020-01-20 | Lightweight metadata on registry artifacts | https://www.dublincore.org/specifications/dublin-core/dcmi-terms/ |
2. Semantic web stack (W3C)¶
The materialization layer. The forge capability emits RDF/OWL/SHACL bundles that any compliant tool (Oxigraph, Fuseki, GraphDB, Stardog) can load.
| Standard | Body / Author | Version | Used in | External link |
|---|---|---|---|---|
| RDF | W3C | RDF 1.1 Concepts, W3C Recommendation 25 February 2014 | Universal graph wire format for the forge output | https://www.w3.org/TR/rdf11-concepts/ |
| RDF Schema | W3C | RDFS 1.1, W3C Recommendation 25 February 2014 | Class/property scaffolding under OWL | https://www.w3.org/TR/rdf-schema/ |
| OWL 2 Structural Specification | W3C | OWL 2 Structural Spec, W3C Recommendation 11 December 2012 | Object Model emission target | https://www.w3.org/TR/owl2-syntax/ |
| OWL 2 Profiles (EL / QL / RL) | W3C | OWL 2 Profiles, W3C Recommendation 11 December 2012 | EL profile for reasoning-tractable subsets; QL for query rewriting | https://www.w3.org/TR/owl2-profiles/ |
| SHACL Core | W3C | SHACL, W3C Recommendation 20 July 2017 | Shape-based validation of forge output | https://www.w3.org/TR/shacl/ |
| SHACL Advanced Features (SHACL-AF) | W3C | SHACL-AF, W3C Working Group Note 8 June 2017 | Rules + functions for derived constraints | https://www.w3.org/TR/shacl-af/ |
| SPARQL 1.1 Query | W3C | W3C Recommendation 21 March 2013 | UDA read surface | https://www.w3.org/TR/sparql11-query/ |
| SPARQL 1.1 Update | W3C | W3C Recommendation 21 March 2013 | Mutation path into the triple store | https://www.w3.org/TR/sparql11-update/ |
| SPARQL 1.1 Graph Store HTTP Protocol | W3C | W3C Recommendation 21 March 2013 | Bulk graph load (used against Fuseki /knowledge) |
https://www.w3.org/TR/sparql11-http-rdf-update/ |
| Notation3 (N3) | W3C Team Submission | N3 — Team Submission 28 March 2011 (active CG drafts) | Rules layer for the FP compiler | https://www.w3.org/TeamSubmission/n3/ · https://w3c.github.io/N3/ |
| Turtle | W3C | RDF 1.1 Turtle, W3C Recommendation 25 February 2014 | Canonical serialization for ADR-attached snippets | https://www.w3.org/TR/turtle/ |
| RDF 1.1 N-Quads | W3C | W3C Recommendation 25 February 2014 | Named-graph wire format | https://www.w3.org/TR/n-quads/ |
| RML — RDF Mapping Language | W3C Community Group | RML Core (2023 CG report) | Mapping non-RDF sources into the graph | https://w3id.org/rml/core/spec |
| R2RML | W3C | R2RML, W3C Recommendation 27 September 2012 | Relational → RDF mapping (Data Vault satellite projections) | https://www.w3.org/TR/r2rml/ |
| JSON-LD 1.1 | W3C | W3C Recommendation 16 July 2020 | JSON wire format for graph-shaped API payloads | https://www.w3.org/TR/json-ld11/ |
| RDF-star / SPARQL-star | W3C CG | RDF-star CG Final Report (2021); RDF 1.2 WG ongoing | Reification of statements for provenance/temporal | https://www.w3.org/2021/12/rdf-star.html |
3. Data engineering & temporal¶
The persistence spine: Data Vault for the warehouse, Kimball for the read marts, Arrow/Parquet for the wire and at-rest format, and ISO SQL:2011 system-versioning for bitemporality.
| Standard | Body / Author | Version | Used in | External link |
|---|---|---|---|---|
| Data Vault 2.1 | Daniel Linstedt / Data Vault Alliance | Data Vault 2.1 (2020 revision) | ARC-ADR-026, docs/data-vault/ |
https://datavaultalliance.com/ |
| Kimball Dimensional Modeling | Ralph Kimball / Kimball Group | The Data Warehouse Toolkit, 3rd ed. (2013) | Read-side marts derived from Data Vault | https://www.kimballgroup.com/data-warehouse-business-intelligence-resources/ |
| Apache Arrow (columnar format) | Apache Software Foundation | Arrow Columnar Format 1.4 (2024) | Zero-copy interchange between Python/Rust/JS data plane | https://arrow.apache.org/docs/format/Columnar.html |
| Apache Arrow Flight RPC | Apache Software Foundation | Flight RPC spec (2024) | High-throughput data plane between fleet services | https://arrow.apache.org/docs/format/Flight.html |
| Apache Parquet | Apache Software Foundation | Parquet Format 2.10 (2024) | On-disk columnar format for the lakehouse | https://parquet.apache.org/docs/file-format/ |
| ISO SQL:2011 system-versioned tables | ISO/IEC | ISO/IEC 9075:2011 (Part 2, §4.15) | Bitemporal hubs/satellites; transaction-time queries | https://www.iso.org/standard/53682.html |
| ISO SQL:2016 / 2023 (JSON, polymorphic tables) | ISO/IEC | ISO/IEC 9075:2023 | JSON path / table functions in DV queries | https://www.iso.org/standard/76583.html |
| dlt (data load tool) | dltHub | dlt 0.5.x (current pinned line) | Emit target from the FP compiler (issue #96) | https://dlthub.com/docs/intro |
| Iceberg (table format) | Apache Software Foundation | Iceberg Table Spec v2 | Reference lakehouse table format for analytics marts | https://iceberg.apache.org/spec/ |
| openCypher | openCypher Implementers Group | openCypher 9 (2019) | Graph query syntax targeted alongside SPARQL | https://opencypher.org/resources/ |
| GQL — Graph Query Language | ISO/IEC | ISO/IEC 39075:2024 | Forward-looking standard graph query target | https://www.iso.org/standard/76120.html |
4. API & contract¶
Every cross-spoke surface is contract-first. The contracts are vendored into consumers and published+mocked in Postman before code is written.
| Standard | Body / Author | Version | Used in | External link |
|---|---|---|---|---|
| OpenAPI | OpenAPI Initiative (Linux Foundation) | OpenAPI 3.1.0 | Every HTTP contract under contracts/*.openapi.*; docs/contracts.md |
https://spec.openapis.org/oas/v3.1.0 |
| AsyncAPI | AsyncAPI Initiative (Linux Foundation) | AsyncAPI 2.6 + 3.0 (dual-emit) | Event contracts (NATS subjects, webhook payloads) | https://www.asyncapi.com/docs/reference/specification/v3.0.0 |
| GraphQL | GraphQL Foundation | GraphQL October 2021 spec | Optional query surface for the Object Model | https://spec.graphql.org/October2021/ |
| JSON Schema | JSON Schema Org | JSON Schema 2020-12 | Validation under OpenAPI 3.1 + AsyncAPI 3 + standalone | https://json-schema.org/draft/2020-12/schema |
| W3C Design Tokens (DTCG) | W3C Community Group | DTCG Editor's Draft, current 2024 line | frontend-core/contract/design-tokens.json (FE-1 contract) |
https://www.w3.org/community/design-tokens/ · https://tr.designtokens.org/format/ |
| Pact — consumer-driven contract testing | Pact Foundation / SmartBear | Pact Specification v4 | contract-test-engineer agent's verification harness |
https://github.com/pact-foundation/pact-specification/tree/version-4 |
| RFC 7807 — Problem Details for HTTP APIs | IETF | RFC 7807 (March 2016) | Error envelope across every HTTP contract | https://datatracker.ietf.org/doc/html/rfc7807 |
| RFC 9457 — Problem Details (revision) | IETF | RFC 9457 (July 2023) | Forward-target replacing 7807 | https://datatracker.ietf.org/doc/html/rfc9457 |
| RFC 8288 — Web Linking | IETF | RFC 8288 (October 2017) | Pagination + relation links | https://datatracker.ietf.org/doc/html/rfc8288 |
| RFC 9110 — HTTP Semantics | IETF | RFC 9110 (June 2022) | Baseline HTTP semantics for all contracts | https://datatracker.ietf.org/doc/html/rfc9110 |
| RFC 8259 — JSON | IETF | RFC 8259 (December 2017) | Canonical JSON encoding | https://datatracker.ietf.org/doc/html/rfc8259 |
5. Agent & LLM protocols¶
The fleet is two armies (Claude Code + Copilot) plus an MCP control plane. Every protocol below is the public, vendor-neutral form.
| Standard | Body / Author | Version | Used in | External link |
|---|---|---|---|---|
| Model Context Protocol (MCP) | Anthropic (open spec) | MCP 2025-06-18 spec line | tools/mcp-local-fleet/, every fleet MCP server |
https://modelcontextprotocol.io/specification |
| MCP — JSON-RPC transport | Anthropic / MCP Working Group | Bound to JSON-RPC 2.0 | All MCP tool calls | https://www.jsonrpc.org/specification |
| A2A — Agent2Agent Protocol | Google / Linux Foundation | A2A 0.2 (2024 line) | Cross-army handoff design (fleet_agent_*) | https://github.com/google/A2A |
| OpenTelemetry GenAI semantic conventions | CNCF / OpenTelemetry | GenAI conventions (active spec line, 2024) | LLM gateway tracing fields | https://opentelemetry.io/docs/specs/semconv/gen-ai/ |
| Anthropic Tool Use schema | Anthropic | tool_use blocks (2024+) | Native Claude tool calls inside MCP wrapping | https://docs.anthropic.com/en/docs/build-with-claude/tool-use |
| OpenAI function-calling schema | OpenAI | 2024 line (parallel tool calls) | Compatibility shim in LLM gateway | https://platform.openai.com/docs/guides/function-calling |
6. Observability & telemetry¶
| Standard | Body / Author | Version | Used in | External link |
|---|---|---|---|---|
| OpenTelemetry — Traces | CNCF | OTel Tracing spec 1.40 (2024 line) | Every fleet service exports traces via OTLP | https://opentelemetry.io/docs/specs/otel/trace/ |
| OpenTelemetry — Metrics | CNCF | OTel Metrics spec 1.40 | Fleet metric pipeline | https://opentelemetry.io/docs/specs/otel/metrics/ |
| OpenTelemetry — Logs | CNCF | OTel Logs Data Model 1.40 | Structured logs into NDJSON pipeline | https://opentelemetry.io/docs/specs/otel/logs/data-model/ |
| OTLP — OpenTelemetry Protocol | CNCF | OTLP 1.3.0 | Wire format from services → collector | https://opentelemetry.io/docs/specs/otlp/ |
| Prometheus exposition format | Prometheus / CNCF | Prom text 0.0.4 + OpenMetrics 1.0 | Metric scraping fallback | https://prometheus.io/docs/instrumenting/exposition_formats/ |
| OpenMetrics | CNCF | OpenMetrics 1.0 (2020) | Prometheus-compatible exposition | https://openmetrics.io/ |
| W3C Trace Context | W3C | W3C Recommendation 23 November 2021 | traceparent/tracestate propagation |
https://www.w3.org/TR/trace-context/ |
| W3C Baggage | W3C | W3C Recommendation 11 May 2023 | Cross-cutting context propagation | https://www.w3.org/TR/baggage/ |
| RFC 5424 — Syslog | IETF | RFC 5424 (March 2009) | Severity levels used in NDJSON logs | https://datatracker.ietf.org/doc/html/rfc5424 |
7. Security & identity¶
| Standard | Body / Author | Version | Used in | External link |
|---|---|---|---|---|
| OAuth 2.1 | IETF | draft-ietf-oauth-v2-1 (current draft line) | Backend-core auth, BYO-credentials broker | https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-1/ |
| OAuth 2.0 | IETF | RFC 6749 (October 2012) | Baseline for 2.1 | https://datatracker.ietf.org/doc/html/rfc6749 |
| OpenID Connect Core | OpenID Foundation | OIDC Core 1.0 (errata set 2) | Federated identity for fleet operators | https://openid.net/specs/openid-connect-core-1_0.html |
| JWT — JSON Web Token | IETF | RFC 7519 (May 2015) | Session token after BFF auth injection | https://datatracker.ietf.org/doc/html/rfc7519 |
| JWS — JSON Web Signature | IETF | RFC 7515 (May 2015) | JWT signing envelope | https://datatracker.ietf.org/doc/html/rfc7515 |
| JWA — JSON Web Algorithms | IETF | RFC 7518 (May 2015) | Algorithm registry | https://datatracker.ietf.org/doc/html/rfc7518 |
| JWK — JSON Web Key | IETF | RFC 7517 (May 2015) | Public-key distribution | https://datatracker.ietf.org/doc/html/rfc7517 |
| PKCE | IETF | RFC 7636 (September 2015) | Required on every interactive OAuth flow | https://datatracker.ietf.org/doc/html/rfc7636 |
| OAuth 2.0 Dynamic Client Registration | IETF | RFC 7591 (July 2015) | Claude.ai connector path (Cloudflare Managed OAuth) | https://datatracker.ietf.org/doc/html/rfc7591 |
| OAuth 2.0 Authorization Server Metadata | IETF | RFC 8414 (June 2018) | Discovery for MCP OAuth | https://datatracker.ietf.org/doc/html/rfc8414 |
| OAuth 2.0 for Native Apps | IETF | RFC 8252 (October 2017) | Local-CLI auth flows | https://datatracker.ietf.org/doc/html/rfc8252 |
| HTTP Signatures | IETF | RFC 9421 (February 2024) | Webhook authenticity (HMAC verify sidecar) | https://datatracker.ietf.org/doc/html/rfc9421 |
| SLSA — Supply-chain Levels for Software Artifacts | OpenSSF | SLSA v1.0 (April 2023) | Build provenance target for ACR-built images | https://slsa.dev/spec/v1.0/ |
| in-toto attestation framework | CNCF / OpenSSF | in-toto Attestation Spec 1.0 | Provenance envelope | https://github.com/in-toto/attestation |
| SPIFFE / SPIRE | CNCF | SPIFFE 1.0 | Workload identity (forward target) | https://spiffe.io/docs/latest/spiffe-about/spiffe-overview/ |
| NIST SP 800-207 — Zero Trust Architecture | NIST | SP 800-207 (August 2020) | Authority for "no implicit trust" between fleet services | https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-207.pdf |
| NIST CSF 2.0 | NIST | CSF 2.0 (February 2024) | Security posture framework | https://www.nist.gov/cyberframework |
| NIST SP 800-53 Rev. 5 | NIST | Rev. 5 (September 2020) | Control catalogue mapping | https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final |
| FedRAMP Rev. 5 baselines | GSA / FedRAMP PMO | Rev. 5 baselines (2024) | Applicability tracking for federal-eligible deployments | https://www.fedramp.gov/rev5-baselines/ |
| OWASP ASVS | OWASP | ASVS 4.0.3 | Application security verification baseline | https://owasp.org/www-project-application-security-verification-standard/ |
| OWASP API Security Top 10 | OWASP | 2023 edition | Postman security skill audits against this | https://owasp.org/API-Security/editions/2023/en/0x00-header/ |
| CWE | MITRE | CWE 4.14 | Vulnerability taxonomy in scanner output | https://cwe.mitre.org/ |
| CVE / CVSS v3.1 | MITRE / FIRST | CVSS 3.1 | Severity scoring on dependency findings | https://www.first.org/cvss/v3.1/specification-document |
| TLS 1.3 | IETF | RFC 8446 (August 2018) | All public ingress | https://datatracker.ietf.org/doc/html/rfc8446 |
8. Architecture & process¶
| Standard | Body / Author | Version | Used in | External link |
|---|---|---|---|---|
| TOGAF | The Open Group | TOGAF 10 (2022) | EA agent roster, ARC-ADR-024 | https://www.opengroup.org/togaf |
| TOGAF ADM | The Open Group | TOGAF 10 — Architecture Development Method | Capability-to-ADR pipeline | https://pubs.opengroup.org/togaf-standard/adm/ |
| MADR — Markdown Architectural Decision Records | adr.github.io community / Olaf Zimmermann et al. | MADR v4.0 (2024) | Our ADR format — every file in docs/decisions/ |
https://adr.github.io/madr/ |
| ADR concept | Michael Nygard (original 2011 post) | n/a | Conceptual ancestor of MADR | https://cognitect.com/blog/2011/11/15/documenting-architecture-decisions |
| Scaled Agile Framework (SAFe) | Scaled Agile Inc. | SAFe 6.0 | PI / Sprint / Epic / Feature / Story labels on the board | https://scaledagileframework.com/ |
| BIZBOK — Business Architecture Body of Knowledge | Business Architecture Guild | BIZBOK v12 (2024) | /capability-map command, business capability modeling |
https://www.businessarchitectureguild.org/page/BIZBOK |
| Wardley Mapping (OWM) | Simon Wardley (CC-BY-SA) | Online Wardley Maps (OWM) syntax — current | /wardley command output |
https://onlinewardleymaps.com/ |
| Team Topologies | Skelton & Pais (Team Topologies Ltd) | 1st ed. (2019), patterns referenced as canonical | Platform-team-pattern rationale across the fleet | https://teamtopologies.com/key-concepts |
| INCOSE SE Handbook | INCOSE | 5th edition (2023) | MBSE rationale for the self-model | https://www.incose.org/products-and-publications/se-handbook |
| OMG SysML | OMG | SysML 1.7 (2022) | Reference syntax for MBSE projections | https://www.omg.org/spec/SysML/1.7/ |
| OMG UML | OMG | UML 2.5.1 (2017) | Substrate for SysML and OntoUML | https://www.omg.org/spec/UML/2.5.1/ |
| OMG BPMN | OMG | BPMN 2.0.2 (2014) | Process modelling where used | https://www.omg.org/spec/BPMN/2.0.2/ |
| OMG DMN | OMG | DMN 1.5 (2024) | Decision-model surface | https://www.omg.org/spec/DMN/1.5/ |
| ArchiMate | The Open Group | ArchiMate 3.2 (2023) | Optional EA viewpoint emission | https://pubs.opengroup.org/architecture/archimate3-doc/ |
| C4 model | Simon Brown | C4 (current) | Lightweight architecture views in docs/ |
https://c4model.com/ |
9. Frontend & accessibility¶
| Standard | Body / Author | Version | Used in | External link |
|---|---|---|---|---|
| WCAG | W3C / WAI | WCAG 2.2 AA (W3C Recommendation, 5 October 2023) | Frontend-core conformance target | https://www.w3.org/TR/WCAG22/ |
| WAI-ARIA | W3C | ARIA 1.2 (W3C Recommendation, 6 June 2023) | Component semantics in shadcn/ui wrappers | https://www.w3.org/TR/wai-aria-1.2/ |
| ARIA Authoring Practices Guide | W3C / WAI | APG (current) | Pattern reference for the design system | https://www.w3.org/WAI/ARIA/apg/ |
| HTML Living Standard | WHATWG | Living Standard (rolling) | Baseline markup | https://html.spec.whatwg.org/multipage/ |
| DOM Living Standard | WHATWG | Living Standard | Baseline DOM API | https://dom.spec.whatwg.org/ |
| Web Components / Custom Elements | WHATWG / W3C | HTML Living Standard §4.13 | Where bespoke elements are used | https://html.spec.whatwg.org/multipage/custom-elements.html |
| ECMAScript | Ecma International (TC39) | ECMAScript 2024 (15th edition) | Source language baseline | https://tc39.es/ecma262/2024/ |
| CSS Color Module Level 4 | W3C | W3C Candidate Recommendation Draft, 2024 line | OKLch tokens via Tailwind/shadcn | https://www.w3.org/TR/css-color-4/ |
| CSS Cascade Level 5 | W3C | Working Draft, 2024 line | Layered tokens in theme.css |
https://www.w3.org/TR/css-cascade-5/ |
| Tailwind CSS v4 | Tailwind Labs (OSS) | v4.x (current) | Frontend-core utility layer | https://tailwindcss.com/docs |
| shadcn/ui registry schema | shadcn (OSS) | components.json schema (current) | Component vendoring contract | https://ui.shadcn.com/schema/registry-item.json |
| WebRTC | W3C / IETF | W3C Recommendation 26 January 2023 | Real-time channels (forward target) | https://www.w3.org/TR/webrtc/ |
| Server-Sent Events | WHATWG | HTML Living Standard | Streaming surface from MCP servers | https://html.spec.whatwg.org/multipage/server-sent-events.html |
10. DevEx & supply chain¶
| Standard | Body / Author | Version | Used in | External link |
|---|---|---|---|---|
| Conventional Commits | Conventional Commits community | 1.0.0 | All commit messages; drives changelog automation | https://www.conventionalcommits.org/en/v1.0.0/ |
| Semantic Versioning | Tom Preston-Werner / community | SemVer 2.0.0 | Versioning of every published artifact | https://semver.org/spec/v2.0.0.html |
| Keep a Changelog | Olivier Lacan | 1.1.0 | Changelog format for vendored libs | https://keepachangelog.com/en/1.1.0/ |
| SLSA provenance | OpenSSF | SLSA v1.0 provenance predicate | Build attestation on container images | https://slsa.dev/spec/v1.0/provenance |
| SPDX | Linux Foundation | SPDX 2.3 (ISO/IEC 5962:2021) | License identifiers in every header and SBOM | https://spdx.dev/specifications/ · https://www.iso.org/standard/81870.html |
| CycloneDX | OWASP | CycloneDX 1.6 | SBOM format on built images | https://cyclonedx.org/specification/overview/ |
| Sigstore — cosign | OpenSSF / Sigstore | cosign 2.x | Image signing on the ACR pipeline | https://docs.sigstore.dev/ |
| OCI Image Spec | Open Container Initiative | OCI Image Spec v1.1.0 | Container image format | https://github.com/opencontainers/image-spec/blob/main/spec.md |
| OCI Distribution Spec | Open Container Initiative | OCI Distribution Spec v1.1.0 | Registry protocol (ACR, GHCR) | https://github.com/opencontainers/distribution-spec/blob/main/spec.md |
| OBO ROBOT | OBO Foundry | ROBOT 1.9.x | Ontology build/release tool for OWL artefacts | http://robot.obolibrary.org/ |
| Editorconfig | EditorConfig project | 0.13.0 spec | Editor consistency across repos | https://editorconfig.org/ |
| REUSE | FSFE | REUSE Specification 3.2 | License compliance on source files | https://reuse.software/spec/ |
| OpenSSF Scorecard | OpenSSF | Scorecard 5.x | Repo security health metrics | https://github.com/ossf/scorecard |
| OpenSSF Best Practices Badge | OpenSSF | Current criteria | Reference baseline for OSS hygiene | https://www.bestpractices.dev/en/criteria |
11. Foundational books & canonical literature¶
The methodology spine. Every book below is cited in at least one ADR or skill as the rationale for an approach the platform took. Editions and publishers are pinned.
Ontology, knowledge representation, and the semantic web¶
- Guizzardi, Giancarlo. Ontological Foundations for Structural Conceptual Models. Telematica Instituut Fundamental Research Series, vol. 015, 2005. — The foundational text of UFO and OntoUML; defines the rigidity / sortality / identity / dependence meta-properties the platform uses to classify every type.
- Allemang, Dean; Hendler, James; Gandon, Fabien. Semantic Web for the Working Ontologist, 3rd ed. ACM Books, 2020. — The practical OWL/SHACL/SPARQL reference; the working text behind the materialization layer.
- Hitzler, Pascal; Krötzsch, Markus; Rudolph, Sebastian. Foundations of Semantic Web Technologies. Chapman & Hall/CRC, 2009. — The formal companion: description logics, OWL 2 profile semantics, reasoning complexity.
- Baader, Franz; Calvanese, Diego; McGuinness, Deborah L.; Nardi, Daniele; Patel-Schneider, Peter F. (eds.). The Description Logic Handbook, 2nd ed. Cambridge University Press, 2007. — The reference for description-logic semantics underlying OWL 2.
- Arp, Robert; Smith, Barry; Spear, Andrew D. Building Ontologies with Basic Formal Ontology. MIT Press, 2015. — The canonical BFO textbook; the authority behind the BFO interop projection.
Data warehousing and temporal data¶
- Linstedt, Daniel; Olschimke, Michael. Building a Scalable Data Warehouse with Data Vault 2.0. Morgan Kaufmann, 2015. — The reference text behind ARC-ADR-026 and every hub/link/satellite in the warehouse layer.
- Kimball, Ralph; Ross, Margy. The Data Warehouse Toolkit: The Definitive Guide to Dimensional Modeling, 3rd ed. Wiley, 2013. — The canonical dimensional-modeling reference for the read-side marts.
- Snodgrass, Richard T. Developing Time-Oriented Database Applications in SQL. Morgan Kaufmann, 2000 (free PDF maintained by the author). — The authority on bitemporal modelling; the rationale behind ISO SQL:2011 system-versioned tables in the persistence layer.
- Inmon, William H. Building the Data Warehouse, 4th ed. Wiley, 2005. — Reference for the EDW lineage that Data Vault descends from.
- Date, C. J.; Darwen, Hugh; Lorentzos, Nikos. Time and Relational Theory, 2nd ed. Morgan Kaufmann, 2014. — Formal grounding for valid-time / transaction-time relational algebra.
Systems thinking, pace, and holons¶
- Brand, Stewart. The Clock of the Long Now: Time and Responsibility. Basic Books, 1999. — Pace layering — the conceptual rationale for tier separation (platform / application / function) in ARC-ADR-023.
- Koestler, Arthur. The Ghost in the Machine. Hutchinson, 1967. — The original holon concept; the conceptual root of the holonic board and the self-model's part-whole structure.
- Meadows, Donella H. Thinking in Systems: A Primer. Chelsea Green, 2008. — Systems-dynamics primer behind the fleet-heartbeat reconciliation loop.
- Beer, Stafford. Brain of the Firm, 2nd ed. Wiley, 1981. — Viable System Model; reference for the fleet's recursive organizational structure.
- Senge, Peter M. The Fifth Discipline, revised ed. Doubleday, 2006. — Organizational learning baseline.
Generative programming, category theory, and formal methods¶
- Czarnecki, Krzysztof; Eisenecker, Ulrich W. Generative Programming: Methods, Tools, and Applications. Addison-Wesley, 2000. — The methodological grandparent of the FP compiler (model → generator → output).
- Awodey, Steve. Category Theory, 2nd ed. Oxford University Press, 2010. — Reference text behind the category-theoretic framing of the FP compiler core (functorial projections, natural transformations, monadic sift loop).
- Bird, Richard; de Moor, Oege. Algebra of Programming. Prentice Hall, 1997. — Catamorphisms and the algebra of recursive generation.
- Pierce, Benjamin C. Types and Programming Languages. MIT Press, 2002. — Type-system foundations used in the F# generator core.
- Milewski, Bartosz. Category Theory for Programmers. Bartosz Milewski (CC-BY-SA, 2019). — Practical CT companion text for the team.
- Fokkinga, Maarten M. Law and Order in Algorithmics (PhD thesis, University of Twente, 1992). — Reference for recursion-scheme reasoning behind catamorphic generators.
Systems engineering and architecture¶
- INCOSE. Systems Engineering Handbook, 5th ed. Wiley, 2023. — The MBSE rationale anchor; cited by every EA-cluster agent.
- Friedenthal, Sanford; Moore, Alan; Steiner, Rick. A Practical Guide to SysML: The Systems Modeling Language, 3rd ed. Morgan Kaufmann, 2014. — Reference for the SysML projection of the platform self-model.
- Hohpe, Gregor; Woolf, Bobby. Enterprise Integration Patterns. Addison-Wesley, 2003. — The vocabulary behind the AsyncAPI event surfaces and NATS subject design.
- Fowler, Martin. Patterns of Enterprise Application Architecture. Addison-Wesley, 2002. — Repository, Unit-of-Work, Domain Model — the pattern names used across the agent roster.
- Evans, Eric. Domain-Driven Design: Tackling Complexity in the Heart of Software. Addison-Wesley, 2003. — Ubiquitous-language discipline behind the system ontology lexicon.
- Vernon, Vaughn. Implementing Domain-Driven Design. Addison-Wesley, 2013. — Tactical DDD reference for the bounded-context layout across spokes.
- Newman, Sam. Building Microservices, 2nd ed. O'Reilly, 2021. — Reference for the contract-first integration pattern between spokes.
- Skelton, Matthew; Pais, Manuel. Team Topologies. IT Revolution, 2019. — Platform-team pattern rationale for the fleet's army/spoke split.
- Open Group. The TOGAF Standard, 10th edition. Van Haren, 2022. — The EA discipline reference cited by the TOGAF agent roster.
DevOps, reliability, and observability¶
- Beyer, Betsy et al. (eds.). Site Reliability Engineering: How Google Runs Production Systems. O'Reilly, 2016. — SRE baseline; SLO/SLI vocabulary used by
sre-engineer. - Kim, Gene; Humble, Jez; Debois, Patrick; Willis, John. The DevOps Handbook, 2nd ed. IT Revolution, 2021. — The DevOps cluster's methodological reference.
- Forsgren, Nicole; Humble, Jez; Kim, Gene. Accelerate. IT Revolution, 2018. — DORA metrics anchor for delivery-ops measurement.
- Majors, Charity; Fong-Jones, Liz; Miranda, George. Observability Engineering. O'Reilly, 2022. — High-cardinality observability rationale behind the OTel pipeline.
Security and zero trust¶
- Rose, Scott; Borchert, Oliver; Mitchell, Stu; Connelly, Sean. Zero Trust Architecture. NIST SP 800-207, August 2020. — Free authoritative reference for the zero-trust posture between fleet services.
- Anderson, Ross. Security Engineering, 3rd ed. Wiley, 2020 (full text free from the author). — Reference for the threat-modelling vocabulary used by
security-engineer.
AI agents, LLMs, and tooling¶
- Russell, Stuart; Norvig, Peter. Artificial Intelligence: A Modern Approach, 4th ed. Pearson, 2020. — Baseline AI textbook; agent-architecture vocabulary.
- Anthropic. Building Effective Agents (engineering essay, 2024). — The pattern catalogue (workflows vs agents, evaluator-optimiser, orchestrator-workers) used by the agent roster. https://www.anthropic.com/engineering/building-effective-agents
Generative / category-theoretic FP for ontology compilation (focus area)¶
- Pierce, Benjamin C. Basic Category Theory for Computer Scientists. MIT Press, 1991. — Compact CT primer; used as onboarding text for the FP compiler workstream.
- Mac Lane, Saunders. Categories for the Working Mathematician, 2nd ed. Springer, 1998. — Foundational CT reference for the natural-transformation framing of UFO ⟷ BFO projections.
Notes on usage¶
- "Used in" links point to internal ADRs and docs. When a row references an ADR that has not yet been numbered (drafts), it is listed by topic; the merge-time ADR number assigner (docs/decisions/README.md) will rewrite the reference once the ADR lands.
- Where a row pins a draft IETF or W3C spec (e.g. OAuth 2.1), the platform's contract tests target the current draft head as of the relevant ADR date, with a follow-up tracking issue to re-pin when the document advances to RFC.
- The bibliography is intentionally short of generic textbooks: only books actively cited as rationale appear. If a book is referenced in a future ADR it should be added here in the same pass — this page is the single index for "where does this come from?".
See also: Ontology Foundations · Ontology Stack · Persistence & Time · LLM & Agent Stack · Coordination & VFS · Generative Pipeline · Intellectual Foundations (Bibliography)