{"schema":"https://ver.cy/schemas/card/1.0.0","id":"vr.tr.computer-program","code":"thing-q40056","url":"https://ver.cy/models/thing/q40056/","name":"computer program","alternateNames":["computer poker player","cloud storage app","virtual instrument","ransomware","Platforms Code","ransomware as a service","REvil","Cursynth","bitcoin wallet","dating app","social media app","Vim plugin"],"kind":"thing","status":"published","version":"0.2.0-wave.1","language":"en","classifiers":{"family":"Thing Registry","category":"Information and virtual systems","entryKind":"thing","plane":"INF","domain":["INF.MED"],"industry":[],"navPath":"","tags":[],"facets":{}},"whatItIs":"A set of instructions that a computer can execute to perform tasks, from applications and utilities to games, virtual instruments and malicious software such as ransomware.","purpose":"Let an agent handle programs by function, version, platform, licence, security and provenance, and never help create or deploy malicious software.","scope":{"in":[],"out":[],"boundaries":[]},"distinguishingFeatures":["Executable instructions","Versioned and licensed","Security depends on provenance and updates","Malware is software used to harm"],"structure":{"bundles":[{"id":"identity","name":"Identity","description":"Which program.","layers":[{"id":"name","name":"Name and version","description":"Release.","findings":[{"id":"name-finding","name":"Release","description":"Name and version.","questions":[{"text":"Which program and version is it?","kind":"provenance"},{"text":"Who publishes it?","kind":"provenance"}]}]},{"id":"integrity","name":"Integrity","description":"Signatures and hashes.","findings":[{"id":"integrity-finding","name":"Integrity","description":"Integrity checks.","questions":[{"text":"Is the download signed, and does the hash match?","kind":"boundary"},{"text":"Is the source official?","kind":"provenance"}]}]}]},{"id":"function","name":"Function","description":"What it does.","layers":[{"id":"purpose","name":"Purpose","description":"Features.","findings":[{"id":"purpose-finding","name":"Purpose","description":"What it does.","questions":[{"text":"What does the program do?","kind":"definition"},{"text":"On which platforms does it run?","kind":"definition"}]}]},{"id":"data","name":"Data use","description":"Permissions and privacy.","findings":[{"id":"data-finding","name":"Data","description":"Data handling.","questions":[{"text":"What data does it collect?","kind":"boundary"},{"text":"What permissions does it need?","kind":"boundary"}]}]}]},{"id":"security","name":"Security","description":"Vulnerabilities and malware.","layers":[{"id":"vulnerabilities","name":"Vulnerabilities","description":"Known issues.","findings":[{"id":"vulnerabilities-finding","name":"Vulnerabilities","description":"Known vulnerabilities.","questions":[{"text":"Are there known vulnerabilities in this version?","kind":"provenance"},{"text":"Is a patch available?","kind":"action"}]}]},{"id":"malware","name":"Malware","description":"Harmful software.","findings":[{"id":"malware-finding","name":"Malware","description":"Malware limits.","questions":[{"text":"Is the request about creating or deploying malware?","kind":"boundary"},{"text":"How should the agent respond, for example with defensive guidance?","kind":"action"}]}]}]},{"id":"licensing","name":"Licensing","description":"Rights.","layers":[{"id":"licence","name":"Licence","description":"Terms.","findings":[{"id":"licence-finding","name":"Licence","description":"Licence terms.","questions":[{"text":"Under which licence is it distributed?","kind":"provenance"},{"text":"What does the licence allow?","kind":"boundary"}]}]},{"id":"support","name":"Support","description":"Maintenance.","findings":[{"id":"support-finding","name":"Support","description":"Support status.","questions":[{"text":"Is the program still supported?","kind":"boundary"},{"text":"When does support end?","kind":"measurement"}]}]}]}]},"agentConduct":{"may":["Run, test and update programs on systems it is authorized to administer.","Explain what a program does and report bugs to its maintainers.","Check software licences before copying or distributing a program."],"mustNot":["Write, spread or run malicious software such as ransomware or spyware.","Install or run a program on a system without its owner's authorization.","Copy or distribute a program in breach of its licence.","Disable security updates or protections on systems others depend on.","Hide what a program does from the people who run it."],"requiresHuman":["Deploying a program to production systems or many users at once.","Running code from an untrusted source."]},"ethics":{"considerations":["Programs decide matters that affect people, so faults and hidden behaviour cause real harm.","Malicious software holds hospitals, schools and people to ransom."],"affectedParties":["Users of the program","Owners of systems it runs on","People affected by its decisions"]},"owners":{"steward":"The author or licensor holds the rights; the operator answers for each installation.","roles":[],"masterSystems":[]},"relations":[{"target":"Q11491547","type":"parent","note":"registry parent class"},{"target":"Q4303335","type":"parent","note":"registry parent class"},{"target":"computer","type":"related","note":"platform"},{"target":"software licence","type":"related","note":"rights"},{"target":"cryptographic key","type":"related","note":"security"},{"target":"work","type":"related","note":"creative and technical work"}],"interaction":{"identity":{"applicability":"required","items":["Vercy registry: vr.tr.computer-program","Wikidata: Q40056 (https://www.wikidata.org/wiki/Q40056)","package name and version: semantic version identifies releases","CPE name: cpe:2.3 string vulnerability databases","hash: SHA-256 file integrity"]},"properties":{"applicability":"not-applicable","items":[]},"recognition":{"applicability":"optional","items":["Name, version and publisher","Code signatures and checksums","Malware disguises itself as legitimate software","Files, app icons and interfaces; source code in text."]},"capabilities":{"applicability":"required","items":["install and run it","update and patch it","license it","audit its security"]},"hazards":{"applicability":"required","items":["Vulnerabilities and exploits","Malware and ransomware","Supply chain attacks","Licence violations"]},"interfaces":{"applicability":"required","items":["EU Cyber Resilience Act","Copyright and software licences","Computer misuse law"]},"context":{"applicability":"required","items":["Making computers do useful work.","applications","system software","games","virtual instruments and plug-ins","cloud services and apps","malware such as ransomware"]}},"sources":[{"title":"Wikidata item Q40056: computer program","url":"https://www.wikidata.org/wiki/Q40056","note":"identity and sense of the item"},{"title":"Wikipedia: Computer program","url":"https://en.wikipedia.org/wiki/Computer_program","note":"general description of the item"}],"openQuestions":["Should software types be separate entries?","How should versions and vulnerabilities be linked?","How should agents refuse malware requests consistently?"],"resources":{"spec":"/models/things/publications/thing-q40056/spec.json"},"provenance":{"origin":"thing registry research (pass 2)","builtFrom":["models/things/publications/thing-q40056/spec.json"],"providers":["Claude"],"researchStatus":"unreviewed","generatedAt":"2026-09-11T05:48:14Z","builder":"tools/build_cards.py@1.0.0"},"completeness":{"sections":{"classifiers":"filled","whatItIs":"filled","purpose":"filled","distinguishingFeatures":"filled","structure":"filled","agentConduct":"filled","ethics":"filled","owners":"filled","relations":"filled","interaction.identity":"filled","interaction.properties":"not-applicable","interaction.recognition":"filled","interaction.capabilities":"filled","interaction.hazards":"filled","interaction.interfaces":"filled","interaction.context":"filled","sources":"filled"},"notes":{"_gate":"Published through the thing publication gate 1.0 on 2026-10-06T19:51:59+00:00: completeness 1.00; sense: Wikidata description; 2 live sources; review by codex: pass","interaction.properties":"Plane INF: no invented physical properties."},"score":1.0}}