SemRisk ontology documentation · 0.2.0-rc.4 · documentation revision 2026-10-06
Documentation candidate, not a scholarly release or independent validation. OWL sources and governed registries remain authoritative. No manuscript is included.
Planning priorities are not implemented domain ontologies. Concept memberships are registry assignments, not formal subclass axioms.
| Domain | Scope | Priority |
|---|---|---|
| Core | Domain-neutral semantics of risk, value, scenario, assessment, evidence, treatment, control, observation and responsibility | `P0` |
| Enterprise | Operational enterprise risk knowledge, risk-register semantics, ownership, assessment lifecycle | `P0` |
| Architecture | Connect risk to objectives, capabilities, processes, applications, data, technology and change initiatives | `P0` |
| Health | Broad reusable risk profile across clinical, patient-safety, digital-health, public-health and care-delivery contexts | `P1` |
| Pharma | Pharmaceutical quality, pharmacovigilance, ecosystem, regulatory, supply and post-market risk | `P1` |
| Governance | Appetite, tolerance, policy, compliance, audit, issue, control accountability | `P2` |
| News | External event/claim/source/narrative signals for risk identification and reassessment | `P2` |
| Security | Threat, vulnerability, prevention, security mechanisms, cyber-risk monitoring | `P2` |
| Finance | Credit, liquidity, market, operational, counterparty, fraud, settlement and systemic risk | `P2` |
| SupplyChain | Supplier, dependency, disruption, logistics, resilience and propagation risk | `P2` |
| AI | AI-system risk, impact, compliance, model/data risk | `P3` |
| Environment | Environmental, exposure, cumulative and public-health risk | `P3` |
A context-dependent risk phenomenon or pattern concerning possible effects on value/objectives; distinct from records, descriptions, scores and workflow artifacts.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Foundational category intentionally remains a derived pattern. Identity continuity follows the #69 contract; mutable record/assessment/state/ownership/treatment fields do not automatically define or replace Risk identity.
Governed definition sourceAn entity, value-bearing object or externally owned item about which risk relevance is asserted.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Should remain minimal to avoid generic Object inflation; exact relation to Value/Objectives handled in #20/#25.
Governed definition sourceA risk-relevant origin, source or contextual contributor that may participate in a scenario or event; causal status is not implied by the label alone.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Must not collapse Cause, Trigger, Threat and Predisposing Condition.
Governed definition sourceA contextual state-of-affairs or situational condition that increases susceptibility to a risk-relevant event/effect without necessarily directly causing it.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Boundary with Vulnerability is foundationally frozen: Predisposing Condition is situational; intrinsic disposition-like susceptibility maps to Vulnerability or an explicit profile refinement.
Governed definition sourceAn occurrence acting as the initiating event for a risk-relevant event or process transition; an enabling condition is represented separately as a Predisposing Condition.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: May be event, threshold condition or role depending context; #20 must model relation semantics carefully. Run 4: event-only definition clarified; successor formal bundle 0.2.0-rc.1 carries the matching annotation; frozen 0.1.0-rc.1 retained.
Current disposition: Trigger is event-only; enabling conditions are modeled separately. The older alternatives in the inherited note are superseded by the current definition.
Governed definition sourceA risk-relevant situation type specifying a possible configuration, whether or not instantiated; separate from the managed descriptions that express it and from realized events.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceA realized occurrence relevant to a risk context, distinct from a possible scenario and information artifacts describing it.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Incident may be a profile refinement; event type vs occurrence requires #25.
Governed definition sourceA risk-relevant outcome or effect of an event/scenario; its magnitude/severity may be assessed separately.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Must remain distinct from Impact Assessment Result.
Governed definition sourceA disposition or condition that increases susceptibility to a risk-relevant event/effect.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Cross-domain polysemy remains; profile refinements required.
Governed definition sourceA context-dependent condition or relation indicating how a subject/value is exposed to a risk-relevant source/event; assessment scores remain separate.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Financial amount, physical exposure and exposure rating must not be unified without explicit mapping.
Governed definition sourceAn activity applying a method, context and evidence to produce one or more risk assessment results.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Must never merge with result.
Governed definition sourceA method or technique governing how assessment evidence/context is transformed into one or more assessment results.
Scope: Method. Status: CORE_SUPPORT_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceA contextual, time-bound information/measurement result produced by a Risk Assessment Activity concerning a risk subject/context.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceAn assessment result concerning estimated likelihood/probability/frequency under a specified method and context.
Scope: Core. Status: CORE_REFINEMENT_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceAn assessment result concerning magnitude/severity of effects under a specified assessment method/context.
Scope: Core. Status: CORE_REFINEMENT_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceA method-dependent overall risk rating/level produced from assessment evidence/results.
Scope: Method. Status: CORE_SUPPORT_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceA risk assessment result representing a pre-treatment/pre-control assessment context.
Scope: Core. Status: CORE_REFINEMENT_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceA risk assessment result representing a post-treatment/control assessment context.
Scope: Core. Status: CORE_REFINEMENT_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceAn information qualification stating confidence or uncertainty in a specified assessment result under a stated basis; it is distinct from estimated likelihood and from an intrinsic quality of the risk.
Scope: Method. Status: CORE_SUPPORT_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceAn information artifact used in context to support, challenge or contextualize a risk-related assertion, assessment or decision.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceInformation about origin, derivation, version, agent, time and transformation history of an artifact/assertion/result.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Prefer reuse/alignment to PROV-O over local reinvention.
Governed definition sourceAn activity that observes/measures risk-relevant phenomena and may produce observation results.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Monitoring may include broader process semantics; exact alignment pending.
Governed definition sourceAn information/measurement result produced by an observation/monitoring activity and potentially used as evidence.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceA versioned specification of what is observed or computed to monitor a risk-relevant condition; each observation value or result is distinct from this specification.
Scope: Method/Governance. Status: CORE_SUPPORT_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceA versioned decision-boundary specification used with an indicator or assessment method; its comparison operator, scale, unit and applicability belong to the selected application profile, not to a universal risk formula.
Scope: Method/Governance. Status: METHOD_PROFILE_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceA decision/information artifact specifying a high-level selected approach for addressing a risk.
Scope: Core/Governance. Status: CORE_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceAn information artifact specifying planned treatment activities, responsibilities, timing or resources.
Scope: Core/Enterprise. Status: CORE_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceAn activity performed to modify risk-relevant conditions, likelihood, consequences or preparedness.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Activity must not be collapsed into persistent Control Mechanism.
Governed definition sourceA persistent mechanism, capability or implemented measure used in prevention, detection, protection or risk treatment.
Scope: Core/Governance. Status: CORE_V0_1.
Inherited registry note: Exact ROSE reuse vs local superpattern owned by #21; do not declare novel yet.
Governed definition sourceA context-dependent role classification of persons, organizations or other eligible external actors bearing specified risk-management responsibilities; bearer identity is supplied by the external actor kinds, not by ownership.
Scope: Core/Enterprise. Status: CORE_V0_1.
Inherited registry note: Broad ownership is anti-rigid and cross-kind; narrower roles need their external identity provider. No local Person/Organization kind is introduced.
Governed definition sourceA concrete responsibility/accountability assignment context that depends on an Actor/role bearer and any modeled governance participants, and is about the Risk, artifact, plan or obligation it concerns.
Scope: Core/Governance. Status: CORE_V0_1.
Inherited registry note: Mediation applies to endurant participants; Risk is an aboutness/assignment target under the #71 grounding contract. Responsibility vs accountability may require later subpattern.
Governed definition sourceA governed information artifact organizing risk register entries for a defined scope; its managed identity persists as entries are added or removed.
Scope: Enterprise. Status: ENTERPRISE_PROFILE_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceA governed information artifact in a risk register recording risk-related description, assessments, ownership, treatment and workflow information.
Scope: Core/Enterprise. Status: CORE_INFORMATION_ARTIFACT_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceAn information artifact describing a Risk Scenario, event chain, assumptions or consequences.
Scope: Core/Enterprise. Status: CORE_INFORMATION_ARTIFACT_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceA time- and context-bound state-of-affairs concerning the governed Risk context, distinct from assessment results, record/workflow progression and management/monitoring classifications.
Scope: Core. Status: CORE_V0_1.
Inherited registry note: Core Risk State is reserved for situational state-of-affairs. Workflow, management-attention, escalation and monitoring labels remain outside Core unless a later profile introduces them explicitly.
Governed definition sourceA reusable nominal workflow-status value interpreted within an explicit scheme version; distinct from each record-specific temporal status attribution and from the underlying Risk State.
Scope: Enterprise. Status: ENTERPRISE_PROFILE_V0_1.
Inherited registry note: Identity decision implemented in 0.2.0-rc.3; editable OntoUML and expanded SQL projection remain separate gates. See foundational/semantic-identity-v0.2.0-rc.3/decisions.md.
Governed definition sourceAn externally owned enterprise/governance objective that may be affected by or provide context for risk.
Scope: Enterprise. Status: EXTERNAL_OWNER_REFERENCE.
Inherited registry note: Not SemRisk Core-owned.
Governed definition sourceAn externally owned enterprise capability that may be exposed to/affected by risk.
Scope: Enterprise/Architecture. Status: EXTERNAL_OWNER_REFERENCE.
Inherited registry note: Not SemRisk Core-owned.
Governed definition sourceAn externally owned process/business activity context that may generate, encounter or be affected by risk.
Scope: Enterprise/Architecture. Status: EXTERNAL_OWNER_REFERENCE.
Inherited registry note: Risk Assessment/Treatment Activities remain SemRisk activities; business process taxonomy does not.
Governed definition sourceA pharmaceutical ingredient/entity referenced in Pharma shortage evidence; the frozen CM-PharmE v1.0.0 catalog does not contain an API/INN concept.
Scope: Pharma. Status: EXTERNAL_OWNER_REFERENCE_UNMAPPED.
Inherited registry note: Do not mint duplicate SemRisk Core class; do not attribute API ownership to CM-PharmE v1.0.0.
Governed definition sourceA potential source of harm under safety/medical-device semantics.
Scope: Health. Status: PROFILE_DEFERRED.
Inherited registry note: Full Health profile outside Paper 1.
Governed definition sourceA negative consequence affecting an entity/value under safety/medical-device semantics.
Scope: Health. Status: PROFILE_DEFERRED.
Inherited registry note: Narrower than generic Consequence; full Health profile deferred.
Governed definition sourceAn information-level indication suggesting a potentially important risk-relevant pattern requiring assessment; detailed semantics are domain-specific.
Scope: Pharma. Status: PROFILE_OPTIONAL.
Inherited registry note: Not synonym of Risk/Event/Evidence; detailed PV runtime outside Paper 1.
Governed definition sourceInformation/decision criteria used to evaluate significance, acceptability or treatment choices in a specified governance/method context.
Scope: Governance/Method. Status: PROFILE_SUPPORT.
Inherited registry note: Threshold values/scales remain method-specific.
Governed definition sourceA governance-level expression of the type/amount of risk an organization is prepared to pursue or retain, under a specified framework.
Scope: Governance. Status: PROFILE_SUPPORT.
Inherited registry note: Framework-specific definitions; not intrinsic Risk property.
Governed definition sourceA governance/method expression of permitted variation/bounds around objectives or risk criteria in a specified framework.
Scope: Governance. Status: PROFILE_SUPPORT.
Inherited registry note: Do not merge with appetite.
Governed definition sourceA polarity/classification construct expressing threat/opportunity framing without asserting separate universal Risk identities.
Scope: Method/Governance. Status: UNRESOLVED_CANDIDATE.
Inherited registry note: Threat/opportunity identity remains open; Critical only if manuscript claims it.
Governed definition source