{"schema":"https://ver.cy/schemas/card/1.0.0","id":"vr.tr.software","code":"thing-q7397","url":"https://ver.cy/models/thing/q7397/","name":"software","alternateNames":[],"kind":"thing","status":"published","version":"0.2.0-wave.1","language":"en","classifiers":{"family":"Thing Registry","category":"Physical world and living systems","entryKind":"thing","plane":"PHY","domain":["PHY.OBJ"],"industry":[],"navPath":"","tags":[],"facets":{}},"whatItIs":"Programs, data and instructions that tell a computer or device what to do, including system software such as operating systems, application software, firmware, libraries and services, distributed under licences and maintained through updates.","purpose":"Let an agent handle software by type, licence, security, supply chain, lifecycle and regulation, and support users and developers with sourced guidance.","scope":{"in":[],"out":[],"boundaries":[]},"distinguishingFeatures":["Intangible instructions","Versioned and updated","Licensed rather than sold outright","Can contain vulnerabilities"],"structure":{"bundles":[{"id":"identify","name":"Identify","description":"Which software.","layers":[{"id":"type","name":"Type","description":"Kind.","findings":[{"id":"type-finding","name":"Type","description":"Software type.","questions":[{"text":"Is this system software, an application, firmware or a library?","kind":"definition"},{"text":"Which version is installed?","kind":"provenance"}]}]},{"id":"licence","name":"Licence","description":"Terms.","findings":[{"id":"licence-finding","name":"Licence","description":"Licence.","questions":[{"text":"Which licence applies, and what does it permit?","kind":"provenance"},{"text":"Is it compatible with the intended use?","kind":"boundary"}]}]}]},{"id":"security","name":"Security","description":"Vulnerabilities.","layers":[{"id":"advisories","name":"Advisories","description":"CVEs.","findings":[{"id":"advisories-finding","name":"Advisories","description":"Security advisories.","questions":[{"text":"Are there known vulnerabilities for this version?","kind":"provenance"},{"text":"Is a patch available?","kind":"provenance"}]}]},{"id":"supply","name":"Supply chain","description":"Dependencies.","findings":[{"id":"supply-finding","name":"Supply chain","description":"Supply chain.","questions":[{"text":"What does the software bill of materials list?","kind":"provenance"},{"text":"Are dependencies maintained?","kind":"boundary"}]}]}]},{"id":"lifecycle","name":"Lifecycle","description":"Support.","layers":[{"id":"support","name":"Support","description":"End of life.","findings":[{"id":"support-finding","name":"Support","description":"Support lifecycle.","questions":[{"text":"When does support end for this version?","kind":"provenance"},{"text":"What migration path exists?","kind":"action"}]}]},{"id":"docs","name":"Docs","description":"Documentation.","findings":[{"id":"docs-finding","name":"Docs","description":"Documentation.","questions":[{"text":"Where is the official documentation?","kind":"provenance"},{"text":"Is it current for this version?","kind":"boundary"}]}]}]},{"id":"regulation","name":"Regulation","description":"Rules.","layers":[{"id":"products","name":"Products","description":"Product rules.","findings":[{"id":"products-finding","name":"Products","description":"Product rules.","questions":[{"text":"Which cybersecurity or product rules apply to this software?","kind":"provenance"},{"text":"Who is responsible as manufacturer?","kind":"provenance"}]}]},{"id":"critical","name":"Critical","description":"Safety-critical uses.","findings":[{"id":"critical-finding","name":"Critical","description":"Safety-critical software.","questions":[{"text":"Is the software used in medical, automotive or other safety-critical settings?","kind":"boundary"},{"text":"Which standards govern it?","kind":"provenance"}]}]}]}]},"agentConduct":{"may":["Install, update and configure software on systems it is authorized to administer.","Report the version, licence and known vulnerabilities of installed software.","Write or modify code when the owner of the codebase has asked for it."],"mustNot":["Install or run software on a system without the owner's authorization.","Copy or distribute software in breach of its licence.","Write or deploy software designed to damage systems, steal data or evade security controls.","Disable security updates or logging to hide what software is doing.","Remove licence notices or attribution from code it reuses."],"requiresHuman":["Deploying changes to production systems that other people depend on.","Accepting licence terms on behalf of a person or organization."]},"ethics":{"considerations":["Software decides more and more about people's lives, so its errors and biases spread at scale.","Users rarely see what software collects about them; transparency and consent matter."],"affectedParties":["Users of the software","Authors and licensors","People affected by automated decisions"]},"owners":{"steward":"The licensor holds the rights; the operator who runs it answers for its use.","roles":[],"masterSystems":[]},"relations":[{"target":"Q12774177","type":"parent","note":"registry parent class"},{"target":"Q17537576","type":"parent","note":"registry parent class"},{"target":"Q2424752","type":"parent","note":"registry parent class"},{"target":"Q47461344","type":"parent","note":"registry parent class"},{"target":"creative work and product","type":"related","note":"category"},{"target":"application software","type":"related","note":"kind"},{"target":"computer hardware","type":"related","note":"platform"},{"target":"software licence","type":"related","note":"terms"}],"interaction":{"identity":{"applicability":"required","items":["Vercy registry: vr.tr.software","Wikidata: Q7397 (https://www.wikidata.org/wiki/Q7397)","Package identifier: purl or CPE software identity"]},"properties":{"applicability":"not-applicable","items":[]},"recognition":{"applicability":"required","items":["Programs, apps, libraries and firmware","Version numbers and licences","Hardware is the physical equipment","Not physical; experienced through interfaces and represented by code and binaries."]},"capabilities":{"applicability":"required","items":["classify software and its licence","check security advisories and updates","understand software supply chain and SBOMs","find documentation and support"]},"hazards":{"applicability":"required","items":["Security vulnerabilities","Licence non-compliance","End-of-life software without updates"]},"interfaces":{"applicability":"required","items":["EU Cyber Resilience Act","ISO/IEC 25010 software quality model","Medical device rules for software as a medical device"]},"context":{"applicability":"required","items":["Making computers and devices perform tasks.","system software","application software","firmware","libraries and frameworks","open source and proprietary software"]}},"sources":[{"title":"Wikidata item Q7397: software","url":"https://www.wikidata.org/wiki/Q7397","note":"identity and sense of the item"},{"title":"Wikipedia: Software","url":"https://en.wikipedia.org/wiki/Software","note":"general description of the item"}],"openQuestions":["Should software types be separate entries?","How should identifiers such as purl be linked?","How should vulnerabilities be tracked?"],"resources":{"spec":"/models/things/publications/thing-q7397/spec.json"},"provenance":{"origin":"thing registry research (pass 2)","builtFrom":["models/things/publications/thing-q7397/spec.json"],"providers":["Claude"],"researchStatus":"unreviewed","generatedAt":"2026-09-11T12:48:55Z","builder":"tools/build_cards.py@1.0.0"},"completeness":{"sections":{"classifiers":"filled","whatItIs":"filled","purpose":"filled","distinguishingFeatures":"filled","structure":"filled","agentConduct":"filled","ethics":"filled","owners":"filled","relations":"filled","interaction.identity":"filled","interaction.properties":"not-applicable","interaction.recognition":"filled","interaction.capabilities":"filled","interaction.hazards":"filled","interaction.interfaces":"filled","interaction.context":"filled","sources":"filled"},"notes":{"_gate":"Published through the thing publication gate 1.0 on 2026-10-07T10:10:32+00:00: completeness 1.00; sense: Wikidata description; 2 live sources; review by codex: pass","interaction.properties":"Software is intangible, so physical properties belong to its storage media or executing hardware rather than to the software itself."},"score":1.0}}