{
  "vercy": "1.0-draft",
  "publication": {
    "status": "research-draft",
    "adjudicationStatus": "unreviewed",
    "publishableCanonical": false,
    "generatedAt": "2026-09-11T05:48:14Z",
    "providers": [
      "Claude"
    ],
    "breadth": "written by Claude from model knowledge without web access - no source was read, every claim is a lead to verify",
    "pass": 2,
    "wave": 1,
    "engine": "claude",
    "enrichment": {
      "pass": 3,
      "engine": "claude",
      "producedAt": "2026-10-05T16:30:00Z",
      "ingestedAt": "2026-10-05T13:19:14+00:00",
      "fields": [
        "agent_conduct",
        "ethics",
        "owners"
      ]
    },
    "gate": {
      "passed": true,
      "version": "1.0",
      "at": "2026-10-06T19:51:59+00:00",
      "evidence": [
        "completeness 1.00",
        "sense: Wikidata description",
        "2 live sources",
        "review by codex: pass"
      ]
    }
  },
  "metaModel": {
    "id": "THING-Q40056",
    "registryId": "vr.tr.computer-program",
    "name": "computer program",
    "version": "0.2.0-wave.1",
    "entryKind": "thing",
    "family": "Thing Registry",
    "domain": [
      "INF.MED"
    ],
    "status": "research-draft"
  },
  "canonicalUrl": "https://ver.cy/models/thing/q40056/",
  "model": {
    "registry_id": "vr.tr.computer-program",
    "name": "computer program",
    "purpose": "Let an agent handle programs by function, version, platform, licence, security and provenance, and never help create or deploy malicious software.",
    "definition": "A set of instructions that a computer can execute to perform tasks, from applications and utilities to games, virtual instruments and malicious software such as ransomware.",
    "what_it_is_for": "Making computers do useful work.",
    "affordances": [
      "install and run it",
      "update and patch it",
      "license it",
      "audit its security"
    ],
    "distinguishing_features": [
      "Executable instructions",
      "Versioned and licensed",
      "Security depends on provenance and updates",
      "Malware is software used to harm"
    ],
    "appearance": "Files, app icons and interfaces; source code in text.",
    "visual_identification": [
      "Name, version and publisher",
      "Code signatures and checksums",
      "Malware disguises itself as legitimate software"
    ],
    "physical_properties": [],
    "families_and_kinds": [
      "applications",
      "system software",
      "games",
      "virtual instruments and plug-ins",
      "cloud services and apps",
      "malware such as ransomware"
    ],
    "related_models": [
      {
        "relation": "runs on",
        "target": "computer",
        "why": "platform"
      },
      {
        "relation": "is licensed under",
        "target": "software licence",
        "why": "rights"
      },
      {
        "relation": "uses",
        "target": "cryptographic key",
        "why": "security"
      },
      {
        "relation": "is a kind of",
        "target": "work",
        "why": "creative and technical work"
      }
    ],
    "identifiers": [
      {
        "scheme": "package name and version",
        "value_or_pattern": "semantic version",
        "note": "identifies releases"
      },
      {
        "scheme": "CPE name",
        "value_or_pattern": "cpe:2.3 string",
        "note": "vulnerability databases"
      },
      {
        "scheme": "hash",
        "value_or_pattern": "SHA-256",
        "note": "file integrity"
      }
    ],
    "standards_and_regulation": [
      "EU Cyber Resilience Act",
      "Copyright and software licences",
      "Computer misuse law"
    ],
    "failure_modes_and_hazards": [
      "Vulnerabilities and exploits",
      "Malware and ransomware",
      "Supply chain attacks",
      "Licence violations"
    ],
    "in_scope": [],
    "out_of_scope": [],
    "characteristics": [],
    "agent_conduct": {
      "may": [
        "Run, test and update programs on systems it is authorized to administer.",
        "Explain what a program does and report bugs to its maintainers.",
        "Check software licences before copying or distributing a program."
      ],
      "must_not": [
        "Write, spread or run malicious software such as ransomware or spyware.",
        "Install or run a program on a system without its owner's authorization.",
        "Copy or distribute a program in breach of its licence.",
        "Disable security updates or protections on systems others depend on.",
        "Hide what a program does from the people who run it."
      ],
      "requires_human": [
        "Deploying a program to production systems or many users at once.",
        "Running code from an untrusted source."
      ]
    },
    "ethics": {
      "considerations": [
        "Programs decide matters that affect people, so faults and hidden behaviour cause real harm.",
        "Malicious software holds hospitals, schools and people to ransom."
      ],
      "affected_parties": [
        "Users of the program",
        "Owners of systems it runs on",
        "People affected by its decisions"
      ]
    },
    "owners": {
      "steward": "The author or licensor holds the rights; the operator answers for each installation.",
      "master_systems": []
    }
  },
  "sources": [
    {
      "id": "wikidata",
      "title": "Wikidata item Q40056: computer program",
      "url": "https://www.wikidata.org/wiki/Q40056",
      "url_status": "live",
      "what_it_supports": "identity and sense of the item",
      "checked_by": "wikidata-api"
    },
    {
      "id": "wikipedia-en",
      "title": "Wikipedia: Computer program",
      "url": "https://en.wikipedia.org/wiki/Computer_program",
      "url_status": "live",
      "what_it_supports": "general description of the item",
      "checked_by": "wikidata-api sitelink"
    }
  ],
  "structure": {
    "bundles": [
      {
        "id": "identity",
        "name": "Identity",
        "description": "Which program.",
        "rationale": "Identity includes version.",
        "layers": [
          {
            "id": "name",
            "name": "Name and version",
            "description": "Release.",
            "findings": [
              {
                "id": "name-finding",
                "name": "Release",
                "description": "Name and version.",
                "questions": [
                  {
                    "text": "Which program and version is it?",
                    "kind": "provenance"
                  },
                  {
                    "text": "Who publishes it?",
                    "kind": "provenance"
                  }
                ]
              }
            ]
          },
          {
            "id": "integrity",
            "name": "Integrity",
            "description": "Signatures and hashes.",
            "findings": [
              {
                "id": "integrity-finding",
                "name": "Integrity",
                "description": "Integrity checks.",
                "questions": [
                  {
                    "text": "Is the download signed, and does the hash match?",
                    "kind": "boundary"
                  },
                  {
                    "text": "Is the source official?",
                    "kind": "provenance"
                  }
                ]
              }
            ]
          }
        ]
      },
      {
        "id": "function",
        "name": "Function",
        "description": "What it does.",
        "rationale": "Function decides use.",
        "layers": [
          {
            "id": "purpose",
            "name": "Purpose",
            "description": "Features.",
            "findings": [
              {
                "id": "purpose-finding",
                "name": "Purpose",
                "description": "What it does.",
                "questions": [
                  {
                    "text": "What does the program do?",
                    "kind": "definition"
                  },
                  {
                    "text": "On which platforms does it run?",
                    "kind": "definition"
                  }
                ]
              }
            ]
          },
          {
            "id": "data",
            "name": "Data use",
            "description": "Permissions and privacy.",
            "findings": [
              {
                "id": "data-finding",
                "name": "Data",
                "description": "Data handling.",
                "questions": [
                  {
                    "text": "What data does it collect?",
                    "kind": "boundary"
                  },
                  {
                    "text": "What permissions does it need?",
                    "kind": "boundary"
                  }
                ]
              }
            ]
          }
        ]
      },
      {
        "id": "security",
        "name": "Security",
        "description": "Vulnerabilities and malware.",
        "rationale": "Security must be maintained.",
        "layers": [
          {
            "id": "vulnerabilities",
            "name": "Vulnerabilities",
            "description": "Known issues.",
            "findings": [
              {
                "id": "vulnerabilities-finding",
                "name": "Vulnerabilities",
                "description": "Known vulnerabilities.",
                "questions": [
                  {
                    "text": "Are there known vulnerabilities in this version?",
                    "kind": "provenance"
                  },
                  {
                    "text": "Is a patch available?",
                    "kind": "action"
                  }
                ]
              }
            ]
          },
          {
            "id": "malware",
            "name": "Malware",
            "description": "Harmful software.",
            "findings": [
              {
                "id": "malware-finding",
                "name": "Malware",
                "description": "Malware limits.",
                "questions": [
                  {
                    "text": "Is the request about creating or deploying malware?",
                    "kind": "boundary"
                  },
                  {
                    "text": "How should the agent respond, for example with defensive guidance?",
                    "kind": "action"
                  }
                ]
              }
            ]
          }
        ]
      },
      {
        "id": "licensing",
        "name": "Licensing",
        "description": "Rights.",
        "rationale": "Licences govern use.",
        "layers": [
          {
            "id": "licence",
            "name": "Licence",
            "description": "Terms.",
            "findings": [
              {
                "id": "licence-finding",
                "name": "Licence",
                "description": "Licence terms.",
                "questions": [
                  {
                    "text": "Under which licence is it distributed?",
                    "kind": "provenance"
                  },
                  {
                    "text": "What does the licence allow?",
                    "kind": "boundary"
                  }
                ]
              }
            ]
          },
          {
            "id": "support",
            "name": "Support",
            "description": "Maintenance.",
            "findings": [
              {
                "id": "support-finding",
                "name": "Support",
                "description": "Support status.",
                "questions": [
                  {
                    "text": "Is the program still supported?",
                    "kind": "boundary"
                  },
                  {
                    "text": "When does support end?",
                    "kind": "measurement"
                  }
                ]
              }
            ]
          }
        ]
      }
    ]
  },
  "openQuestions": [
    "Should software types be separate entries?",
    "How should versions and vulnerabilities be linked?",
    "How should agents refuse malware requests consistently?"
  ],
  "statistics": {
    "bundles": 4,
    "layers": 8,
    "findings": 8,
    "questions": 16
  }
}