DIS Specification v1.8.0 · Active Standard

The Open Standard for
Enterprise Agentic AI

OpenAPI defines endpoints. Terraform defines infrastructure.
DIS defines what AI agents are allowed to do, say, and reach.

A formal grammar, a W3C RDF/SHACL ontology, and a conformance suite.
Write your domain once, as a validated graph: who acts, on what, in which mode, through which system.

Explore Documentation View GitHub Repository The Origin Story
⚡ Governed Triplets from the Reference Dossiers
1. Any Channel In
📞 Voice (IVR / Telephony) Audio Stream
💬 Chat (Slack / Teams / Web) Natural Lang
⚙️ Backoffice Daemon Queue Event
2. Governed Triplet (The Domain)
ROLE (Who Acts) rcm-navigator-agent
ENTITY (What Noun) medication-refill-request
MODE (Which Verb) CREATE
✓ SHACL conformant · CREATE binds a mutating endpoint · DEA Schedule II-V refill prohibition
3. Systems Reached
Application · Endpoint
Surescripts E-Prescribing Gateway
POST /RefillRequest

Prompt & Pray vs. Attributed Causality

Why modern enterprise AI agents fail in production, and how DIS provides structural guardrails.

The Status Quo: Prompt & Pray

Unconstrained Agent Chaos

[Prompt] ──► [LLM Inference] ──► [Unbounded Tool Call] ──► 💥 Liability
  • Ambient permissions grant root access to enterprise APIs.
  • Natural language prompt injections hijack tool invocation.
  • Hallucinated entities and modes mutate databases silently.
  • Zero verifiable audit receipts for compliance or legal review.
The Standard: Governed DIS

Attributed Causal Execution

[Input] ──► [Triplet: Role × Entity × Mode] ──► [SHACL Gate] ──► ✓ Proven Action
  • Strict segregation of duties enforced by W3C SHACL shapes.
  • UtterancePolicy states what an agent must and must not say, with STRUCTURAL, INSTRUCTED or ADVISORY enforcement.
  • Side effects are declared: a mutating endpoint must name the entity it writes.
  • SPARQL audit queries list ungoverned triplets and medical-liability constructs.

DIS 1.8 Formal Semantic Extensions

Six grammar fixes from the Argus trial give a triplet executable provenance: what it reaches, what it mutates, and what it is allowed to call.

G1 · Mode / Mutates

Mode / Mutates Consistency

A READ triplet cannot bind a function whose endpoint mutates; CREATE, UPDATE and DELETE triplets must bind one that does.

G2 · Side Effects

Directed Side Effects

A function calling a mutating endpoint declares the entity it changes with writesEntity, and the triplet's target must match readsEntity or writesEntity.

G3 · Binding

Binding Completeness

A triplet with no executable function declares a bindingStatus (BOUND, MANUAL_PROCEDURE or ABSTRACT_UNBOUND) and an unboundReason, so a human step or roadmap gap is stated, not implied.

G4 · Transport

Multi-Transport Systems Layer

Endpoints declare a transport (HTTPS, MQTT, RTSP, NATS, gRPC and more), and an Application declares a networkScope so private-network systems can be modeled.

G5 · Gates

Function-Level Access Gates

An access gate can name the exact catalog functions a role may run on an entity with allowedFunction, so “may disable, may not re-enable” can be stated.

G6 · Conformance

Single-Graph Conformance

A dossier is validated as one merged graph with the DIS vocabulary; scripts/validate-dossier.sh is the canonical recipe.

CI · 196 Tests

Automated Conformance Suite

Validated with pytest, pySHACL and CUE. 196 automated tests cover the grammar, the shapes, the SPARQL queries and every reference dossier.

Formal W3C Semantic Representation

Pure RDF/Turtle knowledge graphs validated by SHACL shapes — fully auditable with standard SPARQL.

fixtures/v1.8.0/healthcare.ttl · Governed Triplet Example 196/196 Conformance Tests Passing
# healthcare.ttl, prefixes omitted: a bound triplet, the function it binds, and the endpoint that function calls h:t7-request-prescription-refill a dis:AgenticTriplet ; dis:actingRole h:rcm-navigator-agent ; dis:boundFunction h:fn-submit-refill ; dis:stance dis:ACT ; dis:mode dis:CREATE ; dis:targetEntity h:medication-refill-request ; dis:name "Submit refill request" ; dis:description "Submits refill request through Surescripts network." . h:fn-submit-refill a dis:FunctionCatalogEntry ; dis:name "Submit Refill Request" ; dis:description "Submits medication refill to Surescripts network." ; dis:callsEndpoint h:ep-surescripts-request-refill ; dis:readsEntity h:prescription-medication ; dis:writesEntity h:medication-refill-request ; dis:inputFields "patient_mrn,prescription_number,ndc_code,pharmacy_ncpdp" ; dis:outputFields "refill_request_id,status,transmission_receipt" . h:ep-surescripts-request-refill a dis:Endpoint ; dis:name "Surescripts Submit Refill Request" ; dis:description "Submits clinical renewal request to physician inbox via Surescripts electronic routing." ; dis:hostedBy h:surescripts-network ; dis:transport dis:TRANSPORT_HTTPS ; dis:httpMethod dis:POST ; dis:urlPath "/RefillRequest" ; dis:mutates true .