https://cacontology.projectvic.org/hotlines#EvidenceItemShape
Enhanced SHACL shape for evidence items with gUFO Object validation and comprehensive metadata requirements.
Instances of cacontology-hotlines:EvidenceItem can have the following properties:
PROPERTY |
MIN COUNT |
MAX COUNT |
TYPE |
|
|---|---|---|---|---|
| cacontology-hotlines:EvidenceItem | ||||
| cacontology-hotlines:firstSeen | 1 |
xsd:dateTime
|
||
| 1 | ||||
@prefix cacontology-hotlines: <https://cacontology.projectvic.org/hotlines#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix uco-core: <https://ontology.unifiedcyberontology.org/uco/core/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
cacontology-hotlines:EvidenceItemShape a sh:NodeShape ;
rdfs:label "Evidence Item Shape"@en ;
rdfs:comment "Enhanced SHACL shape for evidence items with gUFO Object validation and comprehensive metadata requirements."@en ;
sh:property [ sh:message "An evidence item must have at least one facet"@en ;
sh:minCount 1 ;
sh:path uco-core:hasFacet ],
[ sh:datatype xsd:dateTime ;
sh:message "An evidence item must have a first seen timestamp"@en ;
sh:minCount 1 ;
sh:path cacontology-hotlines:firstSeen ] ;
sh:rule [ a sh:SPARQLRule ;
sh:construct """
INSERT { $this a hotline:TemporalInconsistencyError . }
WHERE {
?report hotline:hasEvidence $this .
$this hotline:firstSeen ?evidenceTime ;
?report uco-core:createdTime ?reportTime .
FILTER(?evidenceTime > ?reportTime)
}
""" ;
sh:message "Evidence first seen time must be before report submission time"@en ;
sh:prefixes cacontology-hotlines: ;
sh:severity sh:Violation ] ;
sh:targetClass cacontology-hotlines:EvidenceItem .