Agent Card (A2A) — a discoverable JSON document
describing an agent’s skills and security requirements, served at
/.well-known/agent-card.json.
Attestation — an Ed25519 signature over a lineage
event’s canonical hash, binding the audit record to its issuer.
Bootstrap bundle — LakeCat’s projection of live
catalog tables into the QueryGraph semantic formats, verified by the
shared qglake-bundle crate.
Capability — TypeSec’s unforgeable, typed proof
that a policy check passed:
Capability<Permission, Resource>.
Dual gate — QueryGraph’s access rule: RBAC
and ODRL must both allow.
Envelope (TypeDID) — a signed agent message:
sender, recipient, action, resource, canonically-hashed payload, Ed25519
signature, did:key verification method.
Navigator bundle — the four-layer JSON-LD
projection of one dataset: Semantic Croissant + CDIF + DID + ODRL.
OSI semantic model — business terms (datasets,
fields, metrics, relationships, ontology terms) with per-dialect SQL and
LLM-facing ai_context.
Receipt — the recorded outcome of a policy
decision, allow or deny, with principal, resource, action, reason, and
policy id.
Run id — a deterministic UUIDv5 under the
QueryGraph namespace, identical across languages for the same seed.
Signing payload — the documented byte string a
signature covers (querygraph-typedid-signing-v1 for
envelopes, querygraph-lineage-attestation-v1 for
attestations).