[OrgGov v0] Bind actors, roles, authority, tool grants, and revocation

[mdheller]

Parent

SocioProphet/prophet-platform#406

Purpose

Make Agent Registry the authority registry for OrgGov v0.

The control plane needs to answer: who or what acted, in what workroom, under what role, with what grants, against which assets, under which policies, and with what revocation semantics.

Scope

Define or extend registry contracts for:

• Actor records;
• HumanActor and AgentActor distinction;
• role bindings by workroom/context;
• tool grants and data-scope grants;
• capability expiration and revocation;
• policy references from Policy Fabric;
• model/tool/provider routing references;
• session/evidence references from AgentPlane;
• work-order participation records.

Required alignment

• Ontology terms: [OrgGov v0] Add canonical organizational work ontology ontogenesis#39.
• Platform contracts and fixture: [Tranche] Organization Governance Control Plane v0 prophet-platform#406.
• Policy decisions: SocioProphet/policy-fabric follow-on work.
• Runtime artifacts: SocioProphet/agentplane follow-on work.

Acceptance criteria

• Add at least one schema or documented contract for actor/role/authority binding.
• Add a golden example for a human actor and an agent actor working in the same Professional Workroom.
• Include revocation semantics for grants.
• Include evidence references and policy references.
• Validation or smoke checks exist for the examples.

Non-goals

• Do not make Agent Registry a policy engine.
• Do not make Agent Registry execute work.
• Do not store raw secrets or provider credentials.

[mdheller]

Merged PR #23 for the first OrgGov v0 actor/authority registry slice.

PR: #23
Merge commit: 9d481de

Captured artifacts:

• contracts/orggov/actor-authority-binding.v0.1.schema.json
• contracts/orggov/actor-authority-binding.v0.1.example.json
• docs/orggov-authority-bindings.md
• tools/validate_orggov_authority_bindings.py

Checks were green before merge:

• validate: success
• release-dry-run: success

This establishes Agent Registry as the authority ledger for actors, roles, role bindings, authorities, capability grants, policy refs, evidence refs, and revocation posture inside OrgGov v0.