docs(ocsf): PR-shaped class draft for #1724 — AI Agent Trust Inventory

[Levaj2000]

What

Follow-on to #436, now that the response is posted on ocsf/ocsf-schema#1724: the actual class definition JSON, drafted in the exact shape a 1.10 PR to ocsf-schema needs, ready to hand to Dave the moment the co-drafting offer is taken up.

docs/ocsf-1724-class-draft/ — files laid out as they'd land in ocsf-schema (conventions verified against main 2026-08-11):

• events/discovery/ai_agent_trust_inventory.json — thin Discovery class, uid 24 (first free above cloud_resources_inventory_info's 23), four attributes (actor, ai_agent, declared_configuration, executed_parameters — both halves required), and a Log/Collect/Change activity enum whose Change description carries the admission-control timing contract from the issue.
• Five objects: agent_config_declaration (with at_least_one(ai_model, artifacts)), agent_execution_params, a single typed agent_artifact (Model Weights / Adapter / Tool Schema / Policy Bundle / Charter enum — introduces zero new dictionary attributes), ai_sampling_params (config values only, runtime state explicitly out of scope), and agent_credential (structurally incapable of carrying material).
• dictionary-additions.json — every new dictionary attribute, collision-checked by name against main (notably: charter already exists as a file object, so the charter digest rides ai_agent.charter.hashes[] natively; record_integrity attaches at base_event, so per-emission chaining needs zero schema mechanics).
• README.md — design rationale and six open questions for Dave/the WG (naming, enum-merge semantics, float attributes, cross-object required-ness, TEE reference posture).

Sample shape-sync: docs/cosai-ws4-ocsf-mapping/trust-base-inventory-sample/ regenerated in the drafted shape (typed artifacts array, credential type_ids, charter on ai_agent.charter.hashes) so the publicly linked example on the issue thread and the class draft are one shape.

Verification

python3 docs/cosai-ws4-ocsf-mapping/trust-base-inventory-sample/build_sample.py --verify
# ✓ 3 events: fingerprints recompute, chain links, content digests resolve
#   to named preimages, event-3 declared≠loaded divergence present

All draft JSON parses; ruff clean. OCSF metaschema validation deliberately deferred — it requires the files inside a real ocsf-schema clone (step one when this graduates to an actual upstream PR branch).

Docs only — no product impact.

🤖 Generated with Claude Code

https://claude.ai/code/session_012phLbmYc3Tgp3Bn39EfFML

---

Generated by Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
ai-identity-landing	Ready	Preview	Aug 11, 2026 3:25pm
dashboard	Ready	Preview	Aug 11, 2026 3:25pm