Confidential Data Platform Constraint

@prefix core: <http://proethica.org/ontology/core#> . @prefix owl: <http://www.w3.org/2002/07/owl#> . @prefix pcsh: <http://proethica.org/shapes/core#> . @prefix proeth: <http://proethica.org/ontology/intermediate#> . @prefix proeth-prov: <http://proethica.org/provenance#> . @prefix prov: <http://www.w3.org/ns/prov#> . @prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> . @prefix sh: <http://www.w3.org/ns/shacl#> . @prefix skos: <http://www.w3.org/2004/02/skos/core#> . @prefix xsd: <http://www.w3.org/2001/XMLSchema#> . proeth:ConfidentialDataPlatformConstraint a owl:Class ; rdfs:label "Confidential Data Platform Constraint" ; proeth:affectedStakeholders "Client", "Engineer", "Licensing Board", "Third Parties" ; proeth:confidence "0.86" ; proeth:constraintType "confidentiality" ; proeth:flexibility "hard" ; proeth:mitigationStrategies "Anonymize or redact confidential information before inputting into any AI platform", "Obtain explicit client consent before using any third-party platform to process client data", "Review AI platform terms of service for data retention and sharing policies before use", "Use only secure, enterprise-grade AI tools with appropriate data handling agreements when processing confidential client data" ; proeth:textReferences "Engineer A gathered the relevant information provided by Client W and relied on the AI software to synthesize the information", "Engineer A input the information gathered from Client W into the AI software", "The AI drafting software was also open-sourced." ; proeth:violationImpact "Breach of client confidentiality, potential legal liability, loss of client trust, exposure of proprietary or sensitive site data to unauthorized parties, and disciplinary action." ; proeth-prov:discoveredInCase 7 ; proeth-prov:discoveredInPass 2 ; proeth-prov:discoveredInSection "facts" ; proeth-prov:firstDiscoveredAt "2026-06-03T14:06:33.588436+00:00"^^xsd:dateTime ; proeth-prov:firstDiscoveredInCase 7 ; proeth-prov:matchConfidence 0.78 ; proeth-prov:matchReasoning "The Confidentiality Constraint class covers boundaries on information disclosure and privacy, which encompasses this scenario. However, the specific application to open-source AI platform data upload is a variant not explicitly addressed by the existing class. Matching as a variant of Confidentiality Constraint at medium confidence, while defining a more specific reusable subtype for AI platform contexts." ; proeth-prov:matchedOntologyClass proeth:ConfidentialityConstraint ; proeth-prov:matchedOntologyLabel "Confidentiality Constraint" ; proeth-prov:matchesExisting true ; proeth-prov:sourceText "Engineer A gathered the relevant information provided by Client W and relied on the AI software to synthesize the information" ; rdfs:comment "Confidentiality constraint prohibiting an engineer from uploading or transmitting confidential client data to open-source, publicly accessible, or third-party AI platforms or software systems where the data may be exposed, retained, or used outside the confidential professional relationship." ; rdfs:subClassOf proeth:ConfidentialityConstraint, proeth:InviolableConstraint ; skos:definition "Confidentiality constraint prohibiting an engineer from uploading or transmitting confidential client data to open-source, publicly accessible, or third-party AI platforms or software systems where the data may be exposed, retained, or used outside the confidential professional relationship." ; skos:scopeNote "[ConfidentialityConstraint] Boundaries on information disclosure and privacy (Dennis et al. 2016)" ; prov:generatedAtTime "2026-06-03T14:06:33.588436+00:00"^^xsd:dateTime ; prov:wasAttributedTo "Case 7 Extraction", "claude-sonnet-4-6" . pcsh:CaseAnnotationShape a sh:NodeShape ; rdfs:label "Shared per-case annotation schema (all nine components)"@en ; rdfs:comment "The cross-component annotation fields on committed case individuals: proeth:confidence (extraction confidence, decimal; all components except Action, whose Step-3 contract carries no confidence field), proeth:textReferences (verbatim supporting quotes, universal), proeth-prov sourceText (the source snippet, on the Step-1/2 provenance layers; Step-3 A/E individuals ground via textReferences only), and the involvement gloss (proeth:caseInvolvement on role individuals, proeth:caseContext on obligation, capability, and constraint individuals). Values are per-individual; the fields do not individuate any type."@en ; sh:property [ sh:description "Extraction confidence for this individual (0 to 1)." ; sh:name "confidence" ; sh:order 1 ; sh:path proeth:confidence ], [ sh:description "Verbatim case quotes supporting this individual." ; sh:name "text references" ; sh:order 2 ; sh:path proeth:textReferences ], [ sh:description "How this individual figures in the case narrative (role individuals; the same text is routed into rdfs:comment)." ; sh:name "case involvement" ; sh:order 3 ; sh:path proeth:caseInvolvement ], [ sh:description "Grounding context in this case (obligation, capability, and constraint individuals)." ; sh:name "case context" ; sh:order 4 ; sh:path proeth:caseContext ] ; sh:targetClass core:Action, core:Capability, core:Constraint, core:Event, core:Obligation, core:Principle, core:Resource, core:Role, core:State . pcsh:ConstraintDefinitionShape a sh:NodeShape ; rdfs:label "Constraint definition schema (type-level, descriptive, field contract)"@en ; rdfs:comment "What individuates a constraint TYPE: the boundary it states (boundary_type, which drives the subClassOf typing into one of the ten closed boundary-type classes) and the source provision that establishes it. The per-case severity and applicability, the agent it limits, and the action it bounds are per-individual and declared on ConstraintPropertyShape, mirroring the R/P/O/S/Rs/Ca Definition/Property split and the constraint scopeNote (the TYPE is the prohibition plus its source provision; the constrained party, per-occasion applicability, and any exception attach to the case individual). Descriptive only (no validation result); the routing input is the constraint_type schema field (the boundaryType property is its shape-path anchor), not stored as a literal."@en ; sh:property [ sh:description "The controlled boundary type, which drives the subClassOf typing into one of the ten closed boundary-type classes: LegalConstraint, RegulatoryConstraint, ResourceConstraint, CompetenceConstraint, JurisdictionalConstraint, ProceduralConstraint, EthicalConstraint, SafetyConstraint, ConfidentialityConstraint, TemporalConstraint. The prohibition/boundary content that individuates the type. A routing input, not stored as a literal." ; sh:name "boundary type" ; sh:order 1 ; sh:path proeth:boundaryType ], [ pcsh:informationalOnly true ; sh:description "The source CodeProvision that establishes the constraint, via the establishedBy edge. The second type-individuating coordinate: per the scopeNote a constraint type is the boundary it states plus its source provision. Range: CodeProvision." ; sh:name "established by" ; sh:order 2 ; sh:path core:establishedBy ] ; sh:targetClass core:Constraint . pcsh:ConstraintPropertyShape a sh:NodeShape ; rdfs:label "Constraint per-case schema (individual data, non-definitional)"@en ; rdfs:comment "What a given constraint INDIVIDUAL is described by in a specific case: its per-occasion severity and applicability window, the agent whose conduct it limits, and the action it bounds. These do NOT individuate the constraint TYPE (that is ConstraintDefinitionShape, keyed on the boundary it states and its source provision); their values are per-case, asserted on the individual. Descriptive only."@en ; sh:property [ sh:description "The severity of the constraint in this case (critical, high, medium, low); a per-occasion assessment (Dennis severity ordering) that can differ across cases sharing the same boundary." ; sh:name "severity" ; sh:order 1 ; sh:path proeth:severity ], [ sh:description "The situational TRIGGER: the circumstances under which the prohibition applies in this case (the Dennis specification-by-context condition); temporalScope carries the durational window." ; sh:name "applicability condition" ; sh:order 2 ; sh:path proeth:applicabilityCondition ], [ sh:description "The agent whose conduct the constraint limits, via the outgoing constrainedEntity edge. Range: Agent." ; sh:name "constrained entity" ; sh:order 3 ; sh:path core:constrainedEntity ], [ sh:description "The durational WINDOW during which the boundary is in force in this case (e.g. for the duration of the engagement); applicabilityCondition carries the situational trigger under which it applies." ; sh:name "temporal scope" ; sh:order 4 ; sh:path proeth:temporalScope ], [ sh:description "The provision or authority string as extracted, kept verbatim on the individual; each dotted NSPE designation that resolves against the provision registry is also materialized as the establishedBy edge (a non-code source survives only in this literal)." ; sh:name "source" ; sh:order 5 ; sh:path proeth:source ], [ sh:description "The operative must-not clause, kept verbatim; mirrors skos:definition and is one of the narrative source fields the defeasibility harvest reads from committed TTLs." ; sh:name "constraint statement" ; sh:order 6 ; sh:path proeth:constraintStatement ] ; sh:targetClass core:Constraint .