{
  "vercy": "1.0-draft",
  "publication": {
    "status": "research-draft",
    "adjudicationStatus": "unreviewed",
    "publishableCanonical": false,
    "generatedAt": "2026-09-11T12:48:55Z",
    "providers": [
      "Claude"
    ],
    "breadth": "written by Claude from model knowledge without web access - no source was read, every claim is a lead to verify",
    "pass": 2,
    "wave": 1,
    "engine": "claude",
    "enrichment": {
      "pass": 3,
      "engine": "claude",
      "producedAt": "2026-10-05T18:00:00Z",
      "ingestedAt": "2026-10-05T13:25:38+00:00",
      "fields": [
        "agent_conduct",
        "ethics",
        "owners"
      ]
    },
    "gate": {
      "passed": true,
      "version": "1.0",
      "at": "2026-10-07T10:10:32+00:00",
      "evidence": [
        "completeness 1.00",
        "sense: Wikidata description",
        "2 live sources",
        "review by codex: pass"
      ]
    }
  },
  "metaModel": {
    "id": "THING-Q7397",
    "registryId": "vr.tr.software",
    "name": "software",
    "version": "0.2.0-wave.1",
    "entryKind": "thing",
    "family": "Thing Registry",
    "domain": [
      "PHY.OBJ"
    ],
    "status": "research-draft"
  },
  "canonicalUrl": "https://ver.cy/models/thing/q7397/",
  "model": {
    "registry_id": "vr.tr.software",
    "name": "software",
    "purpose": "Let an agent handle software by type, licence, security, supply chain, lifecycle and regulation, and support users and developers with sourced guidance.",
    "definition": "Programs, data and instructions that tell a computer or device what to do, including system software such as operating systems, application software, firmware, libraries and services, distributed under licences and maintained through updates.",
    "what_it_is_for": "Making computers and devices perform tasks.",
    "affordances": [
      "classify software and its licence",
      "check security advisories and updates",
      "understand software supply chain and SBOMs",
      "find documentation and support"
    ],
    "distinguishing_features": [
      "Intangible instructions",
      "Versioned and updated",
      "Licensed rather than sold outright",
      "Can contain vulnerabilities"
    ],
    "appearance": "Not physical; experienced through interfaces and represented by code and binaries.",
    "visual_identification": [
      "Programs, apps, libraries and firmware",
      "Version numbers and licences",
      "Hardware is the physical equipment"
    ],
    "physical_properties": [],
    "families_and_kinds": [
      "system software",
      "application software",
      "firmware",
      "libraries and frameworks",
      "open source and proprietary software"
    ],
    "related_models": [
      {
        "relation": "is a kind of",
        "target": "creative work and product",
        "why": "category"
      },
      {
        "relation": "includes",
        "target": "application software",
        "why": "kind"
      },
      {
        "relation": "runs on",
        "target": "computer hardware",
        "why": "platform"
      },
      {
        "relation": "is distributed under",
        "target": "software licence",
        "why": "terms"
      }
    ],
    "identifiers": [
      {
        "scheme": "Package identifier",
        "value_or_pattern": "purl or CPE",
        "note": "software identity"
      }
    ],
    "standards_and_regulation": [
      "EU Cyber Resilience Act",
      "ISO/IEC 25010 software quality model",
      "Medical device rules for software as a medical device"
    ],
    "failure_modes_and_hazards": [
      "Security vulnerabilities",
      "Licence non-compliance",
      "End-of-life software without updates"
    ],
    "in_scope": [],
    "out_of_scope": [],
    "characteristics": [],
    "agent_conduct": {
      "may": [
        "Install, update and configure software on systems it is authorized to administer.",
        "Report the version, licence and known vulnerabilities of installed software.",
        "Write or modify code when the owner of the codebase has asked for it."
      ],
      "must_not": [
        "Install or run software on a system without the owner's authorization.",
        "Copy or distribute software in breach of its licence.",
        "Write or deploy software designed to damage systems, steal data or evade security controls.",
        "Disable security updates or logging to hide what software is doing.",
        "Remove licence notices or attribution from code it reuses."
      ],
      "requires_human": [
        "Deploying changes to production systems that other people depend on.",
        "Accepting licence terms on behalf of a person or organization."
      ]
    },
    "ethics": {
      "considerations": [
        "Software decides more and more about people's lives, so its errors and biases spread at scale.",
        "Users rarely see what software collects about them; transparency and consent matter."
      ],
      "affected_parties": [
        "Users of the software",
        "Authors and licensors",
        "People affected by automated decisions"
      ]
    },
    "owners": {
      "steward": "The licensor holds the rights; the operator who runs it answers for its use.",
      "master_systems": []
    },
    "facets_not_applicable": {
      "properties": "Software is intangible, so physical properties belong to its storage media or executing hardware rather than to the software itself."
    }
  },
  "sources": [
    {
      "id": "wikidata",
      "title": "Wikidata item Q7397: software",
      "url": "https://www.wikidata.org/wiki/Q7397",
      "url_status": "live",
      "what_it_supports": "identity and sense of the item",
      "checked_by": "wikidata-api"
    },
    {
      "id": "wikipedia-en",
      "title": "Wikipedia: Software",
      "url": "https://en.wikipedia.org/wiki/Software",
      "url_status": "live",
      "what_it_supports": "general description of the item",
      "checked_by": "wikidata-api sitelink"
    }
  ],
  "structure": {
    "bundles": [
      {
        "id": "identify",
        "name": "Identify",
        "description": "Which software.",
        "rationale": "Identity matters.",
        "layers": [
          {
            "id": "type",
            "name": "Type",
            "description": "Kind.",
            "findings": [
              {
                "id": "type-finding",
                "name": "Type",
                "description": "Software type.",
                "questions": [
                  {
                    "text": "Is this system software, an application, firmware or a library?",
                    "kind": "definition"
                  },
                  {
                    "text": "Which version is installed?",
                    "kind": "provenance"
                  }
                ]
              }
            ]
          },
          {
            "id": "licence",
            "name": "Licence",
            "description": "Terms.",
            "findings": [
              {
                "id": "licence-finding",
                "name": "Licence",
                "description": "Licence.",
                "questions": [
                  {
                    "text": "Which licence applies, and what does it permit?",
                    "kind": "provenance"
                  },
                  {
                    "text": "Is it compatible with the intended use?",
                    "kind": "boundary"
                  }
                ]
              }
            ]
          }
        ]
      },
      {
        "id": "security",
        "name": "Security",
        "description": "Vulnerabilities.",
        "rationale": "Security requires updates.",
        "layers": [
          {
            "id": "advisories",
            "name": "Advisories",
            "description": "CVEs.",
            "findings": [
              {
                "id": "advisories-finding",
                "name": "Advisories",
                "description": "Security advisories.",
                "questions": [
                  {
                    "text": "Are there known vulnerabilities for this version?",
                    "kind": "provenance"
                  },
                  {
                    "text": "Is a patch available?",
                    "kind": "provenance"
                  }
                ]
              }
            ]
          },
          {
            "id": "supply",
            "name": "Supply chain",
            "description": "Dependencies.",
            "findings": [
              {
                "id": "supply-finding",
                "name": "Supply chain",
                "description": "Supply chain.",
                "questions": [
                  {
                    "text": "What does the software bill of materials list?",
                    "kind": "provenance"
                  },
                  {
                    "text": "Are dependencies maintained?",
                    "kind": "boundary"
                  }
                ]
              }
            ]
          }
        ]
      },
      {
        "id": "lifecycle",
        "name": "Lifecycle",
        "description": "Support.",
        "rationale": "Software ages.",
        "layers": [
          {
            "id": "support",
            "name": "Support",
            "description": "End of life.",
            "findings": [
              {
                "id": "support-finding",
                "name": "Support",
                "description": "Support lifecycle.",
                "questions": [
                  {
                    "text": "When does support end for this version?",
                    "kind": "provenance"
                  },
                  {
                    "text": "What migration path exists?",
                    "kind": "action"
                  }
                ]
              }
            ]
          },
          {
            "id": "docs",
            "name": "Docs",
            "description": "Documentation.",
            "findings": [
              {
                "id": "docs-finding",
                "name": "Docs",
                "description": "Documentation.",
                "questions": [
                  {
                    "text": "Where is the official documentation?",
                    "kind": "provenance"
                  },
                  {
                    "text": "Is it current for this version?",
                    "kind": "boundary"
                  }
                ]
              }
            ]
          }
        ]
      },
      {
        "id": "regulation",
        "name": "Regulation",
        "description": "Rules.",
        "rationale": "Rules apply to some software.",
        "layers": [
          {
            "id": "products",
            "name": "Products",
            "description": "Product rules.",
            "findings": [
              {
                "id": "products-finding",
                "name": "Products",
                "description": "Product rules.",
                "questions": [
                  {
                    "text": "Which cybersecurity or product rules apply to this software?",
                    "kind": "provenance"
                  },
                  {
                    "text": "Who is responsible as manufacturer?",
                    "kind": "provenance"
                  }
                ]
              }
            ]
          },
          {
            "id": "critical",
            "name": "Critical",
            "description": "Safety-critical uses.",
            "findings": [
              {
                "id": "critical-finding",
                "name": "Critical",
                "description": "Safety-critical software.",
                "questions": [
                  {
                    "text": "Is the software used in medical, automotive or other safety-critical settings?",
                    "kind": "boundary"
                  },
                  {
                    "text": "Which standards govern it?",
                    "kind": "provenance"
                  }
                ]
              }
            ]
          }
        ]
      }
    ]
  },
  "openQuestions": [
    "Should software types be separate entries?",
    "How should identifiers such as purl be linked?",
    "How should vulnerabilities be tracked?"
  ],
  "statistics": {
    "bundles": 4,
    "layers": 8,
    "findings": 8,
    "questions": 16
  }
}