Re-vendor OGIT from d0f489f to 18f8177e

docs/OGIT-DOMAIN-LIFT-CATALOGUE.md

@@ -93,8 +93,8 @@ arago/almato coordination."
 | `Accounting` | 9 | 20 | 7 | Lift-tested | Mixed-authorship: `Viktor Voss` / `Gibson Xavier` / `Moritz Vannahme` (25 files, original arago/almato) + a prior session's extension (`Claude (AdaWorldAPI/lance-graph 3-hop optim)`, 11 files **promoted to the OGIT fork** via commit `c5dc1b8`). The 11 are a completed promotion (fork → mirrored here), the worked example of the staging-tier model (`vocab/exports/PROVENANCE.md`), NOT stranded content. Covered conceptually via `0x02XX` commerce/ERP via Odoo lift. Structural changes to the upstream files need arago coordination; the 11 OGAR-promoted ones are ours. |
 | `Advertising` | 16 | 0 | 0 | Imported | |
 | `Audit` | 3 | 0 | 0 | Lift-tested | `Marek Meyer` (sole author) — pure upstream. Audit-as-Lance-version (ADR-013) covers the semantics. |
-| `Auth` | 13 | 24 | 6 | Imported | Cross-walk to `0x0BXX` auth domain (Zitadel/Zanzibar) queued |
-| `Automation` | 22 | 105 | 0 | Imported | OLD `marsNodeType` superseded by `NTO/MARS/` |
+| `Auth` | 14 | 31 | 7 | Imported | Cross-walk to `0x0BXX` auth domain (Zitadel/Zanzibar) queued. +1 entity, +7 attributes, +1 verb at the 2026-10-10 re-vendor |
+| `Automation` | 22 | 107 | 0 | Imported | OLD `marsNodeType` superseded by `NTO/MARS/`. +2 attributes at the 2026-10-10 re-vendor (`manualProcessingTimeSeconds`, `savedTimeSeconds`) |
 | `Botany` | 2 | 0 | 0 | Imported | |
 | `ClassificationStandard` | 2 | 5 | 2 | Imported | |
 | `Compliance` | 1 | 4 | 4 | Lift-tested | `chris.boos@almato.com` (sole author) — pure upstream |
@@ -112,10 +112,11 @@ arago/almato coordination."
 | `FinancialMarket` | 20 | 24 | 7 | Imported | |
 | `Forms` | 3 | 0 | 0 | Imported | |
 | `Forum` | 22 | 1 | 4 | Imported | Covered by `class_ids::PROJECT_FORUM` etc. |
+| `GFS` | 5 | 16 | 2 | Imported | Bardioc Graph File System namespace (upstream almatoai, 2026-05-28). Added at the 2026-10-10 re-vendor |
 | `GeoProfile` | 1 | 11 | 0 | Imported | `Codes/` subdir — country/region codes |
 | `HR` | 10 | 0 | 4 | Imported | `Recruiting/` subdir |
 | `Health` | 7 | 22 | 0 | Imported | `Diagnostics/` subdir; HIPAA domain covered by `0x09XX` |
-| `Healthcare` | 7 | 0 | 0 | Imported | `entities/` + `enumerations/` — namespace for `0x09XX` |
+| `Healthcare` | 8 | 0 | 0 | Imported | `entities/` + `enumerations/` — namespace for `0x09XX`. +1 entity (`Assessment` sub-tree) at the 2026-10-10 re-vendor |
 | `Knowledge` | 4 | 1 | 0 | Imported | |
 | `Legal` | 2 | 3 | 1 | Imported | |
 | `Location` | 4 | 7 | 0 | Imported | |
@@ -124,7 +125,7 @@ arago/almato coordination."
 | `MRO` | 11 | 0 | 11 | Imported | `Aviation/` subdir |
 | `MRP` | 10 | 17 | 5 | Imported | |
 | `MaterialManagement` | 1 | 0 | 0 | Imported | |
-| `Medical` | 0 | 0 | 0 | Imported | `namespaces/`, `sql_mirror/` — special form (non-TTL) |
+| `Medical` | 0 | 0 | 0 | Imported | `namespaces/` — special form (non-TTL). `sql_mirror/` (25 files) was removed upstream at `18f8177e` as a private schema that belongs in the MedCare family only |
 | `Meteorology` | 8 | 2 | 0 | Imported | |
 | `Mobile` | 7 | 40 | 0 | Imported | |
 | `Network` | 27 | 0 | 0 | Imported | NetworkInterface = MARS Machine `contains` target |
@@ -160,21 +161,22 @@ arago/almato coordination."
 | `Survey` | 3 | 0 | 0 | Imported | |
 | `Transport` | 5 | 14 | 8 | Lift-tested | `chris.boos@almato.com` (sole author, 27 files) — pure upstream-arago |
 | `UserMeta` | 4 | 0 | 4 | Imported | |
+| `Utilities` | 270 | 924 | 100 | Imported | Electricity and Emissions vocabulary (1295 files); an AdaWorldAPI fork addition, not in upstream almatoai. Added at the 2026-10-10 re-vendor |
 | `Version` | 0 | 3 | 0 | Imported | Used by MARS Machine for OS version |
 | **`WorkOrder`** | 27 | 0 | 0 | **Lift-tested** | **Our extension** (`dcterms:creator` = `bus-compiler` + `family-codec-smith` — internal agent authors, zero external). Authored for `woa-rs`. All 27 TTLs declared as `rdfs:Class`, including the 12 in `verbs/`. **The `rdfs:Class`-as-verb convention is deliberate, not a quirk** — it makes each verb a typed template (slots, inheritance, policy metadata) that `ogar-render-askama` can compile-time-validate against a binding, the same way askama validates HTML templates against a Rust struct. See `docs/VERB-AS-CLASS-TEMPLATE.md`. Previous catalogue row split 15 entities + 12 verbs by directory; the content-driven count is 27 first-class typed declarations (entities + verb-as-class templates), which is what `ogar-from-schema` sees and what the action-render path consumes. |
-| **TOTALS** | **549** | **599** | **241** | — | + 42 other (Medical sql_mirror, etc.) |
+| **TOTALS** | **826** | **1548** | **344** | — | + 17 other. Rows changed at the 2026-10-10 re-vendor were updated by their file delta (added minus deleted, counted by the nearest `entities` / `attributes` / `verbs` directory), so the earlier per-row rule is kept |
 
 ## Adjacent imports (not NTO)
 
 | Path | Files | Purpose |
 |---|--:|---|
-| `vocab/imports/ogit/SGO/` | 508 TTLs | Upper ontology — `core/`, `ogit/`, `sgo/`. **`SGO/sgo/verbs/` is the 176-verb canonical AST predicate vocabulary** lifted by `ogar-from-schema::sgo` |
+| `vocab/imports/ogit/SGO/` | 509 TTLs | Upper ontology — `core/`, `ogit/`, `sgo/`. **`SGO/sgo/verbs/` is the 176-verb canonical AST predicate vocabulary** lifted by `ogar-from-schema::sgo` |
 | `vocab/imports/ogit/SDF/` | 7 JSON | Standard Data Format config samples (MARS/Automation) — instance configs, not schema |
 | `vocab/imports/ogit/ogit.ttl` | 1 TTL | Root ontology declaring `ogit:Entity`, `ogit:Verb`, `ogit:Attribute` |
 
 ## Provenance
 
-All imports at OGIT SHA `d0f489fff94640fef1e6abe7eacba90a1a144579`
-(2026-05-30). See `vocab/imports/ogit/PROVENANCE.md` for the re-vendor
+All imports at OGIT SHA `18f8177ec63dc2c26cb635556fedc7f54186b7b4`
+(2026-07-06), re-vendored 2026-10-10 from `d0f489f`. See `vocab/imports/ogit/PROVENANCE.md` for the re-vendor
 recipe and `vocab/imports/ogit/NTO/MARS/PROVENANCE.md` for the
 MARS-specific XSD-oracle provenance.

vocab/imports/ogit/NTO/Auth/attributes/deviceType.ttl

@@ -0,0 +1,16 @@
+@prefix ogit:           <http://www.purl.org/ogit/> .
+@prefix ogit.Auth:      <http://www.purl.org/ogit/Auth/> .
+@prefix owl:            <http://www.w3.org/2002/07/owl#> .
+@prefix rdfs:           <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix dcterms:        <http://purl.org/dc/terms/> .
+
+ogit.Auth:deviceType
+    a owl:DatatypeProperty;
+    rdfs:subPropertyOf ogit:Attribute;
+    rdfs:label "deviceType";
+    dcterms:description "Category of an end-user device used to access the platform. Distinct from ogit.Mobile:deviceType (free-form, mobile-domain): this attribute is fixed-set and covers the auth-relevant device categories that drive access policy.";
+    dcterms:valid "start=2026-06-01;";
+    dcterms:creator "Almato AG";
+    ogit:validation-parameter "mobile,desktop,web,hsm,hardware-wallet";
+    ogit:validation-type "fixed";
+.

vocab/imports/ogit/NTO/Auth/attributes/fingerprint.ttl

@@ -0,0 +1,14 @@
+@prefix ogit:           <http://www.purl.org/ogit/> .
+@prefix ogit.Auth:      <http://www.purl.org/ogit/Auth/> .
+@prefix owl:            <http://www.w3.org/2002/07/owl#> .
+@prefix rdfs:           <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix dcterms:        <http://purl.org/dc/terms/> .
+
+ogit.Auth:fingerprint
+    a owl:DatatypeProperty;
+    rdfs:subPropertyOf ogit:Attribute;
+    rdfs:label "fingerprint";
+    dcterms:description "Cryptographic device fingerprint that uniquely identifies an end-user device across login sessions. Opaque string, set by the platform on first device registration.";
+    dcterms:valid "start=2026-06-01;";
+    dcterms:creator "Almato AG";
+.

vocab/imports/ogit/NTO/Auth/attributes/isWorkspace.ttl

@@ -0,0 +1,16 @@
+@prefix ogit:           <http://www.purl.org/ogit/> .
+@prefix ogit.Auth:      <http://www.purl.org/ogit/Auth/> .
+@prefix owl:            <http://www.w3.org/2002/07/owl#> .
+@prefix rdfs:           <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix dcterms:        <http://purl.org/dc/terms/> .
+
+ogit.Auth:isWorkspace
+    a owl:DatatypeProperty;
+    rdfs:subPropertyOf ogit:Attribute;
+    rdfs:label "isWorkspace";
+    dcterms:description "Boolean marker on ogit.Auth:Team. When true, the team is a self-service Workspace whose members manage themselves and which owns its own DataScope. When false or absent, the team is a classical enterprise-RBAC group administered by org admins.";
+    dcterms:valid "start=2026-06-01;";
+    dcterms:creator "Almato AG";
+    ogit:validation-parameter "true,false";
+    ogit:validation-type "fixed";
+.

vocab/imports/ogit/NTO/Auth/attributes/lastSeenAt.ttl

@@ -0,0 +1,14 @@
+@prefix ogit:           <http://www.purl.org/ogit/> .
+@prefix ogit.Auth:      <http://www.purl.org/ogit/Auth/> .
+@prefix owl:            <http://www.w3.org/2002/07/owl#> .
+@prefix rdfs:           <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix dcterms:        <http://purl.org/dc/terms/> .
+
+ogit.Auth:lastSeenAt
+    a owl:DatatypeProperty;
+    rdfs:subPropertyOf ogit:Attribute;
+    rdfs:label "lastSeenAt";
+    dcterms:description "ISO timestamp of the most recent successful authentication from this device.";
+    dcterms:valid "start=2026-06-01;";
+    dcterms:creator "Almato AG";
+.

vocab/imports/ogit/NTO/Auth/attributes/registeredAt.ttl

@@ -0,0 +1,14 @@
+@prefix ogit:           <http://www.purl.org/ogit/> .
+@prefix ogit.Auth:      <http://www.purl.org/ogit/Auth/> .
+@prefix owl:            <http://www.w3.org/2002/07/owl#> .
+@prefix rdfs:           <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix dcterms:        <http://purl.org/dc/terms/> .
+
+ogit.Auth:registeredAt
+    a owl:DatatypeProperty;
+    rdfs:subPropertyOf ogit:Attribute;
+    rdfs:label "registeredAt";
+    dcterms:description "ISO timestamp at which an end-user device was first registered against the platform. Explicit lifecycle property on ogit.Auth:Device, distinct from the platform-standard ogit/_created (which records vertex-creation time but is system-managed). Distinct from the SGO verb ogit:registeredAt (Person-to-Address relation) -- this is an attribute on Device in the Auth namespace.";
+    dcterms:valid "start=2026-06-01;";
+    dcterms:creator "Almato AG";
+.

vocab/imports/ogit/NTO/Auth/attributes/revokedAt.ttl

@@ -0,0 +1,14 @@
+@prefix ogit:           <http://www.purl.org/ogit/> .
+@prefix ogit.Auth:      <http://www.purl.org/ogit/Auth/> .
+@prefix owl:            <http://www.w3.org/2002/07/owl#> .
+@prefix rdfs:           <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix dcterms:        <http://purl.org/dc/terms/> .
+
+ogit.Auth:revokedAt
+    a owl:DatatypeProperty;
+    rdfs:subPropertyOf ogit:Attribute;
+    rdfs:label "revokedAt";
+    dcterms:description "ISO timestamp set when an end-user device is revoked (loss, theft, or admin action). After this point all authentication attempts from the device are denied. Specialised Auth-namespace counterpart to the generic top-level ogit:revokedAt; both coexist by Cy's call (2026-06-01) so that device revocation can be reasoned about as an Auth-specific concept separately from generic revocation.";
+    dcterms:valid "start=2026-06-01;";
+    dcterms:creator "Almato AG";
+.

vocab/imports/ogit/NTO/Auth/attributes/securityLevel.ttl

@@ -0,0 +1,16 @@
+@prefix ogit:           <http://www.purl.org/ogit/> .
+@prefix ogit.Auth:      <http://www.purl.org/ogit/Auth/> .
+@prefix owl:            <http://www.w3.org/2002/07/owl#> .
+@prefix rdfs:           <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix dcterms:        <http://purl.org/dc/terms/> .
+
+ogit.Auth:securityLevel
+    a owl:DatatypeProperty;
+    rdfs:subPropertyOf ogit:Attribute;
+    rdfs:label "securityLevel";
+    dcterms:description "Discrete security level of an end-user device. 0 = unverified, 50 = registered, 80 = managed (MDM or equivalent), 100 = HSM or hardware wallet. Drives per-file device restrictions in conjunction with file-side minDeviceSecurityLevel.";
+    dcterms:valid "start=2026-06-01;";
+    dcterms:creator "Almato AG";
+    ogit:validation-parameter "0,50,80,100";
+    ogit:validation-type "fixed";
+.

vocab/imports/ogit/NTO/Auth/entities/Account.ttl

@@ -68,6 +68,7 @@ ogit.Auth:Account
 			[ ogit.Auth:consents  ogit.Auth:Application ]
 			[ ogit.Auth:isMemberOf  ogit.Auth:Organization ]
 			[ ogit.Auth:isMemberOf  ogit.Auth:Team ]
+			[ ogit.Auth:uses        ogit.Auth:Device ]
 			[ ogit:consumes  ogit.Project:Milestone ]
 			[ ogit:consumes  ogit.Project:Project ]
 			[ ogit:supervises  ogit.Project:Project ]

vocab/imports/ogit/NTO/Auth/entities/Application.ttl

@@ -30,6 +30,8 @@ ogit.Auth:Application
 	ogit:optional-attributes (
 	    ogit.Auth:allowedTypes
 	    ogit.Auth.Application:type
+		ogit:category
+		ogit:tags
 	    ogit.Auth.Application:status
 	    ogit.Auth.Application:parent
 	    ogit.Auth.Application:urls

vocab/imports/ogit/NTO/Auth/entities/Device.ttl

@@ -0,0 +1,48 @@
+@prefix ogit:           <http://www.purl.org/ogit/> .
+@prefix ogit.Auth:      <http://www.purl.org/ogit/Auth/> .
+@prefix owl:            <http://www.w3.org/2002/07/owl#> .
+@prefix rdfs:           <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix dcterms:        <http://purl.org/dc/terms/> .
+
+# ogit.Auth:Device -- end-user device that authenticates against
+# the platform. Distinct from the SGO ogit:Device which models
+# datacenter equipment (servers, sensors, PDUs). The Auth-context
+# device is a smartphone, laptop, browser session, HSM, or
+# hardware wallet that an ogit.Auth:Account uses to access
+# platform services. Drives per-file device restrictions when
+# combined with file-side minDeviceSecurityLevel and
+# restrictToDevices attributes (see ogit.GFS:File).
+
+ogit.Auth:Device
+    a rdfs:Class;
+    rdfs:subClassOf ogit:Entity;
+    rdfs:label "Device";
+    dcterms:description "An end-user device that authenticates against the platform and uses platform services. Distinct from the SGO ogit:Device which models datacenter equipment.";
+    dcterms:valid "start=2026-06-01;";
+    dcterms:creator "Almato AG";
+    dcterms:created "2026-06-01";
+    dcterms:modified "2026-06-01";
+    ogit:admin-contact "Almato AG";
+    ogit:tech-contact "Almato AG";
+    ogit:scope "NTO";
+    ogit:parent ogit:Node;
+    ogit:blob "false";
+    ogit:mandatory-attributes (
+        ogit:name
+        ogit.Auth:deviceType
+        ogit.Auth:securityLevel
+    );
+    ogit:optional-attributes (
+        ogit.Auth:fingerprint
+        ogit.Auth:registeredAt
+        ogit.Auth:lastSeenAt
+        ogit.Auth:revokedAt
+    );
+    ogit:indexed-attributes (
+        ogit.Auth:fingerprint
+    );
+    ogit:history (
+    );
+    ogit:allowed (
+    );
+.

vocab/imports/ogit/NTO/Auth/entities/Team.ttl

@@ -26,6 +26,7 @@ ogit.Auth:Team
 	);
 	ogit:optional-attributes (
         ogit:description
+        ogit.Auth:isWorkspace
 	);
   ogit:indexed-attributes (
 

vocab/imports/ogit/NTO/Auth/verbs/owns.ttl

@@ -0,0 +1,20 @@
+@prefix ogit:           <http://www.purl.org/ogit/> .
+@prefix ogit.Auth:      <http://www.purl.org/ogit/Auth/> .
+@prefix owl:            <http://www.w3.org/2002/07/owl#> .
+@prefix rdfs:           <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix dcterms:        <http://purl.org/dc/terms/> .
+
+ogit.Auth:owns
+    a owl:ObjectProperty;
+    rdfs:subPropertyOf ogit:Verb;
+    rdfs:label "owns";
+    dcterms:description "Auth-namespace ownership relation. Currently used to anchor a Vault DataScope to its owning Person (Personal Vault) -- the relation survives Account deactivation so a Person who changes employer keeps the Vault reachable through any remaining Account that belongs to the Person.";
+    dcterms:valid "start=2026-06-01;";
+    dcterms:creator "Almato AG";
+    dcterms:created "2026-06-01";
+    dcterms:modified "2026-06-01";
+    ogit:admin-contact "Almato AG";
+    ogit:tech-contact "Almato AG";
+    ogit:history (
+    );
+.

vocab/imports/ogit/NTO/Automation/attributes/manualProcessingTimeSeconds.ttl

@@ -0,0 +1,14 @@
+@prefix ogit.Automation:        <http://www.purl.org/ogit/Automation/> .
+@prefix ogit:                   <http://www.purl.org/ogit/> .
+@prefix owl:                    <http://www.w3.org/2002/07/owl#> .
+@prefix rdfs:                   <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix dcterms:                <http://purl.org/dc/terms/> .
+
+ogit.Automation:manualProcessingTimeSeconds
+	a owl:DatatypeProperty;
+	rdfs:subPropertyOf ogit:Attribute;
+	rdfs:label "manualProcessingTimeSeconds";
+	dcterms:description "An integer which contains the manual processing time defined in seconds.";
+	dcterms:valid "start=2026-05-07;";
+	dcterms:creator "Meganitrospeed";
+.

vocab/imports/ogit/NTO/Automation/attributes/savedTimeSeconds.ttl

@@ -0,0 +1,14 @@
+@prefix ogit.Automation:        <http://www.purl.org/ogit/Automation/> .
+@prefix ogit:                   <http://www.purl.org/ogit/> .
+@prefix owl:                    <http://www.w3.org/2002/07/owl#> .
+@prefix rdfs:                   <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix dcterms:                <http://purl.org/dc/terms/> .
+
+ogit.Automation:savedTimeSeconds
+	a owl:DatatypeProperty;
+	rdfs:subPropertyOf ogit:Attribute;
+	rdfs:label "savedTimeSeconds";
+	dcterms:description "An integer which contains the aggregation of all KnowledgeItem manualProcessingTimeSeconds .";
+	dcterms:valid "start=2026-05-15;";
+	dcterms:creator "Meganitrospeed";
+.

vocab/imports/ogit/NTO/Automation/entities/AutomationIssue.ttl

@@ -44,6 +44,7 @@ IssueCondition is processed first.""";
     	ogit.Automation:webhook
     	ogit.RL:state
     	ogit.RL:totalReward
+		ogit.Automation:savedTimeSeconds
 	);
 	ogit:indexed-attributes (
 		ogit:subject

vocab/imports/ogit/NTO/Automation/entities/KnowledgeItem.ttl

@@ -53,6 +53,7 @@ In that case, the KnowledgeItem executes operations, which serves the exploitati
 		ogit.Automation:deployToEngine
 		ogit.Automation:isDeployed
 		ogit.Automation:deployStatus
+		ogit.Automation:manualProcessingTimeSeconds
 	);
 	ogit:indexed-attributes (
 		ogit:_tags

vocab/imports/ogit/NTO/Documents/entities/Document.ttl

@@ -23,12 +23,15 @@ ogit.Documents:Document
             ogit:type
             ogit:creationTime
             ogit:modificationTime
+			ogit:status
 	);
     ogit:indexed-attributes (
     );
     ogit:allowed (
 			[ ogit:consistsOf  ogit:Attachment ]
 			[ ogit:describes  ogit.ServiceManagement:Service ]
 			[ ogit:represents  ogit.Forms:Form ]
+			[ ogit:references ogit.Forms:Form ]
+			[ ogit:references ogit.Forms:FormField ]
 	);
 .

vocab/imports/ogit/NTO/Documents/entities/DocumentInfoRecord.ttl

@@ -14,6 +14,7 @@ ogit.Documents:DocumentInfoRecord
 	dcterms:creator "Marek Meyer";
 	ogit:scope "NTO";
 	ogit:parent ogit:Node;
+	ogit:blob "true";
 	ogit:mandatory-attributes (
 	);
 	ogit:optional-attributes (
@@ -23,12 +24,14 @@ ogit.Documents:DocumentInfoRecord
 		ogit.Documents:documentVersion
 		ogit:name
 		ogit:description
+		ogit:type
+		ogit:creationTime
 	);
     ogit:indexed-attributes (
     );
 	ogit:allowed (
 			[ ogit:specifies ogit.PLM:Product ]
 			[ ogit:consistsOf  ogit:Attachment ]
-
+			[ ogit:includes ogit.Documents:Document ]	
 	);
 .

vocab/imports/ogit/NTO/GFS/README.md

@@ -0,0 +1,47 @@
+# GFS
+
+## Overview
+
+This is a graph system NTO governing the **Bardioc Graph File
+System (GFS)** -- a platform-level filesystem in which files,
+folders, symbolic links, sharing tokens, and file-type-to-app
+mappings are first-class graph constructs. Bytes live in the
+platform object store; metadata, permissions, and audit live
+in the graph.
+
+## Contents
+
+| Folder | What it holds |
+|---|---|
+| `entities/` | Five vertex types: `File`, `Folder`, `Symlink`, `ShareLink`, `AppHandler`. Each derives from `ogit:Entity`; none are subclasses of an existing OGIT type. |
+| `verbs/` | Two new edges: `refersTo` (Symlink to target), `sharedVia` (File or Folder to ShareLink). Containment (`ogit:contains`) and team membership (`ogit.Auth:isMemberOf`) are reused unchanged. |
+| `attributes/` | Seventeen new properties covering MIME, content-pointers (via standard OGIT attributes), per-device restrictions, the ShareLink token, the AppHandler mapping fields, and soft-delete markers. |
+
+## Permission model
+
+Permissions are not modelled here. They reuse the platform's
+existing scope, role-rule, and ACL-materialisation mechanisms.
+The platform materialisation pipeline maintains two reserved
+properties on every GFS vertex -- `_effectiveReaders` and
+`_effectiveDevices` -- which the platform owns and which are
+not part of the `ogit.GFS:` namespace.
+
+## Related platform extensions
+
+GFS depends on three constructs that live outside `NTO/GFS/`
+and ship as separate platform-team contributions (coordinated
+with the OGIT review):
+
+- `ogit.Auth:Device` -- end-user device vertex carrying a
+  `securityLevel` 0-100.
+- `ogit.Auth:usesDevice` -- Account-to-Device, many-to-many.
+- `ogit:hasVault` -- Person-to-DataScope anchor for Personal
+  Vaults (location open: `SGO/sgo/verbs/` or `NTO/Auth/verbs/`).
+- A Workspace marker (boolean attribute) on `ogit.Auth:Team`.
+
+## Audit
+
+GFS does not introduce an `AuditEvent` vertex. Audit is a
+platform concern; GFS emits events through the existing
+platform `AuditEventListenerRegistry`. A consolidated platform
+audit concept is tracked separately.