Ahmed Muzammil

Open specification

Draft 0.1

Private Wealth Management Ontology

A shared vocabulary for private banking and wealth management, and for the AI that works on it. Built on FIBO, with every term cited to the standard, regulation or Kognita source it comes from.

Version
0.1 (draft), 2026-11-02
Namespace
https://ahmedmuzammil.com/ontology/pwm#
Version IRI
https://ahmedmuzammil.com/ontology/pwm/0.1
Licence
CC BY-SA 4.0
Ontology (Turtle)Data rules (SHACL)Example dataSource on GitHub
  • 126classes
  • 148properties
  • 37code lists
  • 28data rules
  • 46references
  • 456citations

About

A generic ontology for private banking and wealth management. It models parties and relationships, due diligence, investor profiling and suitability, mandates, accounts and holdings, products and research, client interactions, and the governance of AI that acts on them: use cases, agents, delegated authority, claims and evidence. Business concepts reuse or specialise the Financial Industry Business Ontology (FIBO) and the OMG Commons library. Governance concepts follow the MAS Guidelines on Artificial Intelligence Risk Management (7 October 2026) and the Kognita roadmap. Every term cites the references it is grounded in. Institution-specific detail belongs in an extension that imports this ontology.

Draft for comment. Version 0.1 is the first public draft. Terms, code lists and rules may change before 1.0, and every change will be recorded in the change log. It is not legal advice: the regulatory citations show where a term comes from, not how a rule applies to a given firm.

In scope

  • Parties, roles and the client relationship, including trusts, foundations and other legal arrangements
  • Due diligence, risk rating, source of wealth and funds, screening and tax residency
  • Investor classification, risk profile, knowledge and experience, suitability and appropriateness
  • Mandates, investment restrictions and fees
  • Accounts, portfolios, holdings and valuations
  • The product shelf, product risk, target market, cross-border rules, offering documents and the house view
  • The client journey: origination, recommendation, final decision and client communication
  • AI governance: the use-case inventory, risk materiality, accountability, agents, tools, delegated authority and autonomy
  • Information governance, facts and claims, policy decisions and hash-chained evidence

Not in 0.1

  • Orders, execution and the trade lifecycle; corporate actions
  • Performance and attribution methods (only the provenance of figures is modelled)
  • Tax reporting detail (CRS and FATCA reporting records), lending beyond the Lombard facility
  • Sustainability preferences in suitability (planned for 0.2)
  • Any institution's thresholds, scales, product shelf or internal names: these belong in an extension

Design principles

  1. 01

    Reuse before inventing

    Business terms specialise or map to FIBO first (Release before Provisional), then OMG Commons, W3C PROV-O and DPV. A term is defined here only when none fits, and it is marked NEW.

  2. 02

    Declare, don't import

    External terms are declared with their label, source and FIBO maturity instead of importing whole ontologies, so the file loads on its own. Specialisation uses rdfs:subClassOf; looser alignment uses SKOS exact, close and related matches.

  3. 03

    Every term cites its grounds

    Each class, property and code list carries at least one citation with a locator: an article, paragraph, roadmap item or slide. The reference register records how each source was checked.

  4. 04

    Logic in OWL, codes in SKOS, rules in SHACL

    The ontology stays within OWL 2 DL with light axioms that an extension can build on. Code lists are SKOS concept schemes. Data rules are SHACL shapes kept in a separate file.

  5. 05

    Context speed and classification

    Each class states how fast its facts change and the data classification it carries by default. Fast facts, such as positions and prices, are looked up live and are never cached or embedded for AI.

  6. 06

    Accountability stays with people

    Accountability roles are played by named people. A shape rejects any record that names an AI agent in one.

  7. 07

    Generic core, firm extension

    No institution's data, thresholds or names appear here. A firm adds them in its own ontology that imports PWM.

How to read a term

Every class, property and code list lists its citations: a mark for the kind of source, the source, and the article, paragraph, roadmap item or slide it rests on.

ONTstandard ontologyPublished ontology reused or specialised: FIBO, OMG Commons, W3C PROV-O, DPV.
ISOtechnical standardISO or ISO/IEC standard, used for identifiers, code formats and terminology.
REGregulation or supervisory guidanceLaw, regulation, supervisory guideline, notice or international standard-setter recommendation.
KOGKognitaKognita roadmap, regulations library (control-frameworks.md), controlled vocabularies or policy packs.
AMauthor frameworkEVOLVE framework, essays and talks by Ahmed Muzammil.
NEWpractitioner definitionDefined in this ontology because no published standard term was found at the versions checked.

FIBO terms show their maturity, Release or Provisional. Each reference in the register is marked verified (checked against the source while drafting) or instrument-level (paragraph numbers to re-check before formal use). Classes show how fast their facts change: slow: changes over weeks or months, such as policies, definitions and the house view; medium: changes over days or weeks, such as client profile, kyc status and mandate; fast: changes in seconds or minutes, such as positions, prices, cash and orders.

Terms

Module 0

Core patterns

Assessments, validity periods and supersession: the patterns every other module reuses.

Classes

assessment

pwm:Assessmentmedium context

Dated, attributable record of an evaluation of a party, product, portfolio or AI use case, valid for a period and replaceable by a later assessment.

Due diligence, investor classification, risk profile, suitability, product risk rating and AI risk materiality are all assessments. Who assessed it is recorded with prov:wasAttributedTo; when, with prov:generatedAtTime.

specialises
EntityPROV-O
properties
assesses

Properties

supersedes

pwm:supersedesobject property

Earlier version that this record, rule or document replaces. The earlier version stays readable for reconstruction but may no longer be used.

domain → range
anyany
close match
ReplacesDCMI

approved by

pwm:approvedByobject property

Role whose holder approved this record.

domain → range
anyparty roleOMG Commons
  • REGMAS AIRG4.13: control function approves materiality; 5.21: approval body

valid from

pwm:validFromdatatype property

Start of the period in which a record, rule or document is in force.

domain → range
anydateTimeXSD
close match
Date ValidDCMI

valid until

pwm:validUntildatatype property

End of the period in which a record, rule or document is in force. Absent while it remains in force.

domain → range
anydateTimeXSD
close match
Date ValidDCMI
  • KOGKognita roadmap0.6 item 2: created, effective, superseded and expiry dates

next review date

pwm:nextReviewDatedatatype property

Date by which a record must be reviewed. Past this date the record is treated as expired.

domain → range
anydateXSD

rationale

pwm:rationaledatatype property

Reasons for an assessment or decision, stated as facts and evidence rather than as a bare score.

domain → range
anystringXSD

Module 1

Parties, roles and relationships

Clients, related parties, legal arrangements, providers and the relationship that binds them.

Classes

client

pwm:Clientmedium contextC2

Role of a party that has, or is establishing, a business relationship with a wealth manager to receive investment, banking, advisory or fiduciary services.

specialises
clientFIBO · Release
properties
inGroup

entity client

pwm:EntityClientC2

Client role played by a legal person or a legal arrangement, such as a company, foundation or trust.

specialises
client

prospect

pwm:ProspectC2

Role of a party a wealth manager is considering or approaching before any business relationship exists.

specialises
party roleOMG Commons

client relationship

pwm:ClientRelationshipmedium contextC2

Business relationship between a wealth manager and one or more clients, booked in a booking centre and covered by named relationship managers for a period.

specialises
situationOMG Commons
properties
hasClienthasProvider

relationship group

pwm:RelationshipGroupmedium contextC2

Set of related clients, such as a family, its holding structures and its trusts, managed and reported together.

also called
family group, household

investment adviser

pwm:InvestmentAdviser

Role of a person who gives investment advice to clients under the wealth manager's licence or registration.

specialises
party roleOMG Commons

external asset manager

pwm:ExternalAssetManager

Independent firm that manages a client's assets booked with the wealth manager, acting under a limited power of attorney granted by the client.

specialises
party roleOMG Commons
also called
independent asset manager

authorised signatory

pwm:AuthorisedSignatory

Person authorised to give instructions on an account or for an entity client, within stated signing rules.

specialises
authorized individualFIBO · Release

power of attorney holder

pwm:PowerOfAttorneyHolder

Party authorised by a client, under a power of attorney, to act for the client within the scope that instrument grants.

specialises
authorized individualFIBO · Release

beneficial owner

pwm:BeneficialOwnerC2

Natural person who ultimately owns or controls a client, or on whose behalf a transaction is conducted, including those exercising ultimate effective control over a legal person or arrangement.

specialises
beneficial ownerFIBO · Release

controlling person

pwm:ControllingPersonC2

Natural person who exercises control over an entity account holder for tax-reporting purposes; for a trust, the settlor, trustees, protector, beneficiaries and anyone with ultimate effective control.

specialises
party roleOMG Commons
close match
beneficial owner

politically exposed person

pwm:PoliticallyExposedPersonC3

Role of a person who is or has been entrusted with a prominent public function, or is a family member or close associate of such a person, attracting enhanced due diligence.

specialises
party roleOMG Commons
also called
PEP
properties
pepCategory

connected party

pwm:ConnectedPartyC2

Party linked to a client by family, business or control, recorded for due diligence and conflict checks.

specialises
party roleOMG Commons
properties
connectedTo

legal arrangement

pwm:LegalArrangement

Express trust or similar arrangement through which assets are held and controlled, treated as a party to the relationship.

specialises
partyOMG Commons

settlor

pwm:Settlor

Party that establishes a trust and places assets into it.

specialises
trustorFIBO · Release
exact match
trustorFIBO · Release
also called
trustor

trustee

pwm:Trustee

Party that holds and manages trust assets for the beneficiaries.

specialises
trusteeFIBO · Release
exact match
trusteeFIBO · Release

protector

pwm:Protector

Party appointed under a trust instrument to oversee the trustee, often with powers of consent or removal.

specialises
party roleOMG Commons

private foundation

pwm:Foundation

Legal person, without shareholders, established to hold and administer assets for stated purposes or beneficiaries.

specialises
legal entityOMG Commons

wealth manager

pwm:WealthManager

Financial service provider that delivers wealth management services: advice, portfolio management, custody, lending and planning.

specialises
financial service providerFIBO · Release
  • ISOISO 22222Scope of personal financial planning

private bank

pwm:PrivateBank

Bank that delivers wealth management services to high-net-worth clients.

specialises
bankFIBO · Releasewealth manager
  • REGBanking Act (SG)s47: customer information may be disclosed only as the Act provides

wealth management service

pwm:WealthManagementService

Service combining investment advice or portfolio management with planning, custody, credit and estate services for a client.

specialises
wealth management serviceFIBO · Release
exact match
wealth management serviceFIBO · Release
  • ISOISO 22222Personal financial planning process

booking centre

pwm:BookingCentreslow context

Role of a legal entity or branch of a wealth manager in which client accounts, contracts and assets are booked, and whose jurisdiction's rules apply to them.

specialises
party roleOMG Commons

Properties

assigned coverage

pwm:assignedCoverageobject property

Party role named in a coverage assignment: a relationship manager, or a product, credit, investment or planning specialist. The coverage role says which.

domain → range
coverage assignmentparty roleOMG Commons

residence country

pwm:residenceCountrydatatype property

Country where a natural person resides, as an ISO 3166-1 alpha-2 code.

domain → range
anystringXSD

domicile country

pwm:domicileCountrydatatype property

Country of a party's domicile, as an ISO 3166-1 alpha-2 code. Drives cross-border rules.

domain → range
anystringXSD
close match
is domiciled inOMG Commons

nationality country

pwm:nationalityCountrydatatype property

Country of a natural person's nationality, as an ISO 3166-1 alpha-2 code.

domain → range
anystringXSD

legal entity identifier

pwm:legalEntityIdentifierdatatype property

Twenty-character ISO 17442 identifier of a legal entity.

domain → range
anystringXSD
close match
legal entity identifierFIBO · Release

Code lists

coverage roles

pwm:CoverageRoleScheme

Used by coverageRole

CodeConceptDefinition
primarypwm:CoveragePrimaryLead relationship manager, accountable for the relationship.
secondarypwm:CoverageSecondaryBackup relationship manager.
specialistpwm:CoverageSpecialistProduct, credit, investment or planning specialist supporting the relationship.

politically exposed person categories

pwm:PEPCategoryScheme

Used by pepCategory

CodeConceptDefinition
foreign PEPpwm:ForeignPEPEntrusted with a prominent public function by a foreign country.
domestic PEPpwm:DomesticPEPEntrusted domestically with a prominent public function.
international organisation PEPpwm:InternationalOrganisationPEPEntrusted with a prominent function by an international organisation.
family member of a PEPpwm:PEPFamilyMemberRelated to a PEP by blood or marriage.
close associate of a PEPpwm:PEPCloseAssociateClosely connected to a PEP, socially or professionally.

Module 2

Due diligence, financial crime and tax

Customer due diligence, risk rating, source of wealth, screening and tax residency.

Classes

customer due diligence

pwm:CustomerDueDiligencemedium contextC2

Assessment that identifies and verifies a client and its beneficial owners, and establishes the purpose and intended nature of the relationship.

specialises
assessment
also called
CDD, KYC

enhanced due diligence

pwm:EnhancedDueDiligenceC3

Customer due diligence with additional measures, applied where the client presents higher risk, such as a politically exposed person.

specialises
customer due diligence
also called
EDD

periodic review

pwm:PeriodicReviewC2

Scheduled re-assessment of a client's due diligence, at a frequency set by the client's risk rating, or earlier on a trigger event.

specialises
assessment

customer risk rating

pwm:CustomerRiskRatingC3

Assessment of the money-laundering and terrorist-financing risk a client presents, which sets due diligence depth and review frequency.

specialises
assessment
properties
amlRiskLevel

source of wealth assessment

pwm:SourceOfWealthAssessmentC3

Assessment of how a client accumulated their total wealth, with the evidence relied on.

specialises
assessment

source of funds assessment

pwm:SourceOfFundsAssessmentC3

Assessment of where specific funds or assets entering the relationship come from.

specialises
assessment

screening result

pwm:ScreeningResultC3

Outcome of screening a party against sanctions, politically exposed person and adverse-media sources, with its disposition.

specialises
assessment
properties
screeningDisposition

tax residency self-certification

pwm:TaxResidencySelfCertificationC2

Client's declaration of tax residence countries and taxpayer identification numbers, collected at account opening and on change of circumstances.

specialises
assessment
properties
taxResidenceCountryhasTaxIdentifier
  • REGOECD CRSSections IV and VI: self-certification for new accounts; Section VIII: definitions

Properties

Code lists

AML risk levels

pwm:AMLRiskLevelScheme

Used by amlRiskLevel

CodeConceptDefinition
Llowpwm:AMLLowSimplified measures may apply where permitted.
Mmediumpwm:AMLMediumStandard due diligence.
Hhighpwm:AMLHighEnhanced due diligence and senior approval.
Xoutside risk appetitepwm:AMLOutsideAppetiteRelationship declined or exited.

screening dispositions

pwm:ScreeningDispositionScheme

Used by screeningDisposition

CodeConceptDefinition
pending reviewpwm:ScreeningPendingAlert raised, not yet reviewed.
false positivepwm:ScreeningFalsePositiveReviewed; not the listed party.
true matchpwm:ScreeningTrueMatchReviewed; confirmed as the listed party.
escalatedpwm:ScreeningEscalatedReferred to compliance for decision.

Module 3

Investor profile and suitability

Regulatory investor classification, risk profile, knowledge and experience, and suitability and appropriateness.

Classes

investor classification

pwm:InvestorClassificationmedium contextC2

Regulatory categorisation of a client under one jurisdiction's rules, such as retail, professional or accredited, with any opt-in or opt-out recorded.

specialises
assessment
related match
qualified investor restrictionFIBO · Release
properties
investorCategoryoptStatus

investor risk profile

pwm:InvestorRiskProfilemedium contextC2

Versioned assessment of a client's risk tolerance, capacity for loss and investment horizon, expressed on the wealth manager's risk scale.

Each change produces a new version that supersedes the last. A suitability assessment cites the version in force at the time.

specialises
assessment
properties
riskProfileLevel

knowledge and experience assessment

pwm:KnowledgeAndExperienceAssessmentC2

Assessment of whether a client understands the risks of a type of product or service, from education, work and past investments.

specialises
assessment

financial situation assessment

pwm:FinancialSituationAssessmentC2

Assessment of a client's income, assets, liabilities and liquidity needs, including the ability to bear losses.

specialises
assessment

investment objective

pwm:InvestmentObjectiveC2

Financial objective a client states for their investments, used to judge whether an investment is appropriate for them.

specialises
investment objectiveFIBO · Release
exact match
investment objectiveFIBO · Release

suitability assessment

pwm:SuitabilityAssessmentmedium contextC2

Determination, before a recommendation or a discretionary decision, that a product or transaction fits the client's objectives, financial situation, and knowledge and experience, within the mandate.

Origination records why a client or product was proposed. Suitability records why it was permitted. Keep them separate.

specialises
assessment
properties
assessesRecommendationusesRiskProfileusesMandateusesProductRiskRating

appropriateness assessment

pwm:AppropriatenessAssessmentC2

Check, for services without advice, that a client has the knowledge and experience to understand the risks of the product.

specialises
assessment

suitability report

pwm:SuitabilityReportC2

Statement given to the client explaining how advice meets their preferences, objectives and other characteristics.

specialises
documentOMG Commons

client acknowledgement

pwm:ClientAcknowledgementC2

Record that a client received, read or accepted a disclosure, risk warning or document, and when.

specialises
EntityPROV-O

Properties

capacity for loss

pwm:capacityForLossobject property

Client's ability to bear losses without a material change to their standard of living or objectives.

domain → code list
anyrating levels
  • REGMiFID IIArt. 25(2): ability to bear losses

suitability outcome

pwm:suitabilityOutcomeobject property

Result of a suitability or appropriateness assessment.

domain → code list
anysuitability outcomes

investment horizon (years)

pwm:investmentHorizonYearsdatatype property

Length of time, in years, the client intends to hold the investments.

domain → range
anydecimalXSD

Code lists

investor categories

pwm:InvestorCategoryScheme

Two generic top concepts, retail and non-retail, with jurisdiction-specific categories beneath them. Thresholds stay in each jurisdiction's rules, not in the ontology.

Used by appliesToInvestorCategory, investorCategory

CodeConceptDefinition
retailpwm:RetailCategoryClient given the full protections of the jurisdiction's conduct rules.
retail investor (SG)pwm:RetailInvestorSGNot an accredited, expert or institutional investor under the Securities and Futures Act.
private client (CH)pwm:PrivateClientCHPrivate client under FinSA Art. 4.
retail client (EU)pwm:RetailClientEUClient that is not a professional client under MiFID II.
retail client (UK)pwm:RetailClientUKRetail client under COBS 3.
non-retailpwm:NonRetailCategoryClient treated as able to bear more risk, with some protections relaxed.
accredited investor (SG)pwm:AccreditedInvestorSGAccredited investor under s4A of the Securities and Futures Act, subject to the opt-in regime.
expert investor (SG)pwm:ExpertInvestorSGExpert investor under s4A of the Securities and Futures Act.
institutional investor (SG)pwm:InstitutionalInvestorSGInstitutional investor under s4A of the Securities and Futures Act.
professional investor (HK)pwm:ProfessionalInvestorHKProfessional investor under the Securities and Futures Ordinance and the Professional Investor Rules.
professional client (CH)pwm:ProfessionalClientCHProfessional client under FinSA Art. 4.
institutional client (CH)pwm:InstitutionalClientCHInstitutional client under FinSA Art. 4.
professional client (EU)pwm:ProfessionalClientEUProfessional client under MiFID II Annex II, per se or on request.
eligible counterparty (EU)pwm:EligibleCounterpartyEUEligible counterparty under MiFID II Art. 30.
professional client (UK)pwm:ProfessionalClientUKProfessional client under COBS 3.
accredited investor (US)pwm:AccreditedInvestorUSAccredited investor under Regulation D, Rule 501(a).

opt statuses

pwm:OptStatusScheme

Directions differ by jurisdiction. In Singapore an eligible investor opts in to accredited-investor status and gives up some retail protections. Under FinSA a high-net-worth retail client opts out to be treated as a professional client, and some professional clients opt in to be treated as retail. Record the resulting category on the classification.

Used by optStatus

CodeConceptDefinition
defaultpwm:OptDefaultCategory applies by default, with no election.
opted inpwm:OptedInClient made an opt-in election under the jurisdiction's rules. Which category that moves the client into, and whether protection rises or falls, depends on the jurisdiction, so record the classification it produced.
opted outpwm:OptedOutClient made an opt-out election under the jurisdiction's rules. Which category that moves the client into, and whether protection rises or falls, depends on the jurisdiction, so record the classification it produced.

suitability outcomes

pwm:SuitabilityOutcomeScheme

Used by suitabilityOutcome

CodeConceptDefinition
suitablepwm:SuitableFits the profile and mandate.
suitable with conditionspwm:SuitableWithConditionsFits if stated conditions are met, such as a size limit.
not suitablepwm:NotSuitableDoes not fit; may not be recommended.
insufficient informationpwm:InsufficientInformationCannot be assessed; no recommendation may be made.

illustrative risk scale

pwm:IllustrativeRiskScale

Placeholder five-point scale. An institution replaces it with its own scale in its extension.

Used by productRiskLevel, riskProfileLevel, targetRiskProfile

CodeConceptDefinition
RP1conservativepwm:RP1Capital preservation first.
RP2moderately conservativepwm:RP2Income with limited volatility.
RP3balancedpwm:RP3Growth and income in balance.
RP4growthpwm:RP4Growth with higher volatility.
RP5aggressivepwm:RP5Maximum growth; accepts large drawdowns.

Module 4

Mandates, restrictions and fees

The service model agreed with the client, its investment restrictions and its charges.

Classes

mandate

pwm:Mandatemedium contextC2

Written agreement under which a wealth manager serves a client on a stated service model: advisory, discretionary, execution-only or custody-only. Investment restrictions apply where the service model calls for them.

specialises
written contractFIBO · Release
properties
hasRestriction

advisory mandate

pwm:AdvisoryMandate

Mandate under which the wealth manager makes personal recommendations and the client takes each investment decision.

specialises
mandate

discretionary mandate

pwm:DiscretionaryMandate

Mandate under which the wealth manager takes investment decisions for the client within agreed guidelines.

specialises
mandate
  • REGMiFID IIArt. 4(1)(8): portfolio management

execution-only arrangement

pwm:ExecutionOnlyArrangement

Arrangement under which the wealth manager executes client instructions without advice.

specialises
mandate

custody-only arrangement

pwm:CustodyOnlyArrangement

Arrangement under which the wealth manager holds assets and services them, without advice or dealing.

specialises
mandate

investment restriction

pwm:InvestmentRestrictionmedium context

Provision of a mandate that limits what may be held or done: asset-class bands, concentration limits, excluded issuers or sectors, prohibited instruments, leverage limits.

specialises
contractual commitmentFIBO · Release
properties
limitValuelimitBasis

concentration limit

pwm:ConcentrationLimit

Investment restriction capping exposure to one issuer, sector, country, currency or product type as a share of the portfolio.

specialises
investment restriction

model portfolio

pwm:ModelPortfolioslow contextC1

Target allocation, for a risk profile or strategy, from which client portfolios are built and against which drift is measured.

specialises
EntityPROV-O

benchmark

pwm:Benchmarkslow context

Index or composite against which a portfolio's performance is evaluated.

close match
portfolio benchmarkFIBO · Provisional

fee

pwm:Fee

Charge for services under a mandate or account, of a stated type.

specialises
feeFIBO · Release
properties
feeType
  • REGMiFID IIArt. 24(4): information on costs and charges

third-party payment

pwm:ThirdPartyPayment

Payment or non-monetary benefit the wealth manager receives from a third party, such as a product provider, in connection with a client service. It is not a charge to the client.

specialises
EntityPROV-O
also called
inducement, retrocession

Properties

governed by mandate

pwm:governedByMandateobject property

Mandate under which an account or portfolio is managed or advised.

domain → range
anymandate

fee type

pwm:feeTypeobject property

Kind of fee.

domain → code list
feefee types

has benchmark

pwm:hasBenchmarkobject property

Benchmark a mandate or portfolio is measured against.

domain → range
anybenchmark

Code lists

fee types

pwm:FeeTypeScheme

Used by feeType

CodeConceptDefinition
management feepwm:FeeManagementFor discretionary portfolio management.
advisory feepwm:FeeAdvisoryFor advice under an advisory mandate.
custody feepwm:FeeCustodyFor safekeeping and servicing of assets.
transaction feepwm:FeeTransactionPer transaction, such as brokerage.
performance feepwm:FeePerformanceContingent on returns above a hurdle or high-water mark.

Module 5

Accounts, portfolios and holdings

Where assets are held, what is held, and how it is valued.

Classes

account

pwm:Accountmedium contextC2

Record of a business arrangement between a client and a wealth manager, in which balances and transactions are kept.

specialises
accountFIBO · Release
properties
accountHeldByhasPortfolio

custody account

pwm:CustodyAccountC2

Investment account in which the wealth manager holds a client's securities in safekeeping.

specialises
investment account
also called
securities account

joint account

pwm:JointAccountC2

Account held by two or more holders, operated under a stated signing rule.

specialises
account

account holder

pwm:AccountHolderC2

Role of a party that owns an account.

specialises
account holderFIBO · Release
exact match
account holderFIBO · Release

portfolio

pwm:Portfoliomedium contextC2

Collection of holdings managed or advised as a unit under one mandate.

specialises
portfolioFIBO · Release
properties
hasHolding

holding

pwm:Holdingfast contextC2

Quantity of a financial instrument or other asset held in a portfolio or account at a point in time.

specialises
holdingFIBO · Release

position

pwm:Positionfast contextC2

Financial exposure from owning, borrowing, shorting or contracting, including derivatives and credit.

specialises
positionFIBO · Release

valuation

pwm:Valuationfast contextC2

Monetary value of a portfolio, account or holding at a stated time, produced by a registered calculation service.

A figure presented as authoritative must cite its calculation service. A model may explain a valuation; it may not produce one.

specialises
EntityPROV-O
properties
valuationOf

Lombard facility

pwm:LombardFacilityfast contextC2

Credit extended to a client against a pledged portfolio of financial assets, with an advance rate per asset.

specialises
collateralized loanFIBO · Release
also called
securities-backed loan
properties
securedBy

Properties

valuation of

pwm:valuationOfobject property

Portfolio, account or holding a valuation measures.

domain → range
valuationany

signing rule

pwm:signingRuleobject property

Rule for who must sign instructions on a joint account or for an entity.

domain → code list
anysigning rules

currency

pwm:currencydatatype property

Currency of an amount, as an ISO 4217 alphabetic code.

domain → range
anystringXSD
close match
has currencyFIBO · Release

Code lists

signing rules

pwm:SigningRuleScheme

Used by signingRule

CodeConceptDefinition
any one to signpwm:SignAnyOneAny single authorised signatory may instruct.
two to signpwm:SignTwoJointlyAny two authorised signatories together.
all to signpwm:SignAllJointlyEvery holder or signatory must sign.

Module 6

Products, distribution and research

The product shelf, product risk and target market, cross-border distribution rules, offering documents and the house view.

Classes

product risk rating

pwm:ProductRiskRatingslow contextC1

Wealth manager's assessment of a product's risk on its own scale, used to match products to client risk profiles.

specialises
assessment
related match
risk levelFIBO · Provisional
properties
productRiskLevel
  • REGMiFID IIArt. 16(3), 24(2): product governance

target market

pwm:TargetMarketslow contextC1

Description of the clients a product is designed for, and those it is not, by category, knowledge, risk and objectives.

specialises
EntityPROV-O

cross-border rule

pwm:CrossBorderRuleslow contextC1

Deterministic rule stating whether an activity, such as solicitation, advice or research distribution, is permitted for a client domicile, booking centre, investor category and product.

A rule table evaluated outside the model. It is not AI under MAS AIRG para 1.3 unless a model takes part in the decision. Activity, client domicile and booking centre are required; an absent investor category or product means all. When rules overlap, the most specific rule (most scope values set) decides; on a tie, not permitted wins; with no matching rule the activity is not permitted (fail closed).

specialises
policy rule
related match
investors' domicile restrictionFIBO · Release
related match
qualified investor restrictionFIBO · Release
properties
appliesToActivityclientDomicileCodebookingCentreCodepermitted

research publication

pwm:ResearchPublicationslow contextC1

Authored, dated and versioned investment research, with effective, last-reviewed, superseded and expiry dates and any distribution restrictions.

specialises
documentOMG Commons

house view

pwm:HouseViewslow contextC1

Wealth manager's current official view on markets and asset allocation. When it changes, recommendations that depend on it are invalidated.

specialises
research publication
also called
CIO view
  • KOGKognita roadmap0.6 item 4: house-view change propagation
  • AMEVOLVEDefine truth once: one source for policies

Properties

product risk level

pwm:productRiskLevelobject property

Level a product risk rating assigns, on a scale that can be compared with client risk profile levels.

Use the same scale as the risk profile, or a published mapping between the two, so a suitability check can compare them.

domain → code list
product risk ratingillustrative risk scale

applies to product

pwm:appliesToProductobject property

Product a rule covers. Absent when the rule covers all products.

domain → range
anyproduct

applies to investor category

pwm:appliesToInvestorCategoryobject property

Investor category a rule covers. Absent when the rule covers all investor categories.

domain → code list
anyinvestor categories

ISIN

pwm:isindatatype property

Twelve-character ISO 6166 international securities identification number.

domain → range
anystringXSD

client domicile code

pwm:clientDomicileCodedatatype property

Client domicile a rule covers, as an ISO 3166-1 alpha-2 code. Required: a rule without a domicile is incomplete, not a rule for every domicile.

domain → range
cross-border rulestringXSD

booking centre code

pwm:bookingCentreCodedatatype property

Booking centre jurisdiction a rule covers, as an ISO 3166-1 alpha-2 code. Required: a rule without a booking centre is incomplete, not a rule for every booking centre.

domain → range
cross-border rulestringXSD

Code lists

product complexity classes

pwm:ProductComplexityScheme

Used by productComplexity

CodeConceptDefinition
complexpwm:ComplexProductRequires an assessment of knowledge and experience before sale.
specified investment product (SG)pwm:SpecifiedInvestmentProductSGProduct that MAS requires a customer knowledge or account assessment for before sale to retail customers.
non-complexpwm:NonComplexProductMay be sold without an appropriateness check where the rules allow.
excluded investment product (SG)pwm:ExcludedInvestmentProductSGProduct outside the specified-investment-product regime.

cross-border activities

pwm:CrossBorderActivityScheme

Used by appliesToActivity

CodeConceptDefinition
solicitationpwm:ActivitySolicitationApproaching a client or prospect unprompted.
reverse enquirypwm:ActivityReverseEnquiryResponding to a request the client initiated.
advicepwm:ActivityAdviceGiving a personal recommendation.
executionpwm:ActivityExecutionExecuting a client instruction.
marketingpwm:ActivityMarketingPromoting a product or service.
research distributionpwm:ActivityResearchDistributionSending research to a client.

Module 7

Interactions, advice and communication

Why a client was approached, what was recommended, who decided, and what reached the client.

Classes

client interaction

pwm:ClientInteractionmedium contextC2

One client journey, from its trigger through retrieval, recommendation, review and decision to any communication, recorded under a single identifier.

specialises
ActivityPROV-O

origination

pwm:OriginationC2

Step that selects a client or product for attention, recorded with its trigger, selection criteria, candidate set and reasons, before anything is shown to a relationship manager.

An origination may conclude that no contact is recommended, with a reason.

specialises
ActivityPROV-O
properties
originationTriggerdoNotContactReason
  • KOGKognita roadmap0.4 item 10: origination evidence; do not contact is a first-class outcome

recommendation

pwm:Recommendationmedium contextC2

Personal recommendation to a client about a product, transaction or allocation, with structured rationale and cited sources.

specialises
EntityPROV-O
properties
originatedByrecommendsProduct
  • REGMiFID IIArt. 4(1)(4): investment advice
  • REGMAS FAA-N16Recommendations on investment products
  • KOGKognita roadmap0.4 item 10: rationale as structured fields with citations

final decision

pwm:FinalDecisionC2

Named person's decision on an AI-prepared recommendation or action, approving, modifying, rejecting or escalating it, with what they saw and what they changed.

specialises
EntityPROV-O
properties
decisionOn

client communication

pwm:ClientCommunicationC2

Message sent to a client through a channel, classified by communication level, carrying its content provenance and any AI disclosure, and traceable to the final decision it came from.

specialises
EntityPROV-O
properties
derivedFromDecisioncommunicationLevelviaChannelaiDisclosureGiven

communication channel

pwm:CommunicationChannelslow context

Means of reaching a client, registered as approved only if it meets archiving and supervision requirements.

properties
isApprovedChannel

complaint

pwm:ComplaintC2

Expression of dissatisfaction by a client, linked to the interaction, output, model version and approver it concerns.

specialises
EntityPROV-O

vulnerability indicator

pwm:VulnerabilityIndicatorC3

Flag that a client may be vulnerable, raised for human review. AI may raise the flag; only a person may decide, and only a governed process may change treatment.

specialises
EntityPROV-O

Properties

with client

pwm:withClientobject property

Client an interaction, recommendation or communication concerns.

domain → range
anyclient

part of interaction

pwm:partOfInteractionobject property

Client interaction an origination, recommendation, decision, communication or evidence record belongs to.

domain → range
anyclient interaction
  • KOGKognita roadmap0.4 item 9: one interaction_id spans a whole client journey

recommends product

pwm:recommendsProductobject property

Product a recommendation proposes.

domain → range
recommendationproduct

decision on

pwm:decisionOnobject property

Recommendation or proposed action a final decision rules on.

domain → range
final decisionany

decision result

pwm:decisionResultobject property

Approve, modify, reject or escalate.

domain → code list
anyfinal decision results
  • KOGKognita roadmap0.4 item 11: outcomes are approve, modify, reject or escalate

derived from decision

pwm:derivedFromDecisionobject property

Final decision a client communication traces back to. A communication without one is refused.

domain → range
client communicationfinal decision
sub-property of
wasDerivedFromPROV-O
  • KOGKognita roadmap0.4 item 12: a communication that does not trace back to a final decision is a DENY

content provenance

pwm:contentProvenanceobject property

Who produced content: a person, AI, AI then edited by a person, or a person with AI assistance. The label survives edits.

domain → code list
anycontent provenance labels

disclosure trigger

pwm:disclosureTriggerobject property

Reason recorded for an AI disclosure: what the AI did that the disclosure describes. Whether disclosure is required is decided by the jurisdiction's disclosure rule and the content provenance.

domain → code list
anyAI disclosure triggers

is approved channel

pwm:isApprovedChanneldatatype property

Whether a channel is registered as meeting archiving and supervision requirements.

domain → range
communication channelbooleanXSD

content hash

pwm:contentHashdatatype property

Cryptographic hash of content as rendered, sent or stored, so the content can be proved later without being copied into the record.

domain → range
anystringXSD

Code lists

communication levels

pwm:CommunicationLevelScheme

Ordered least to most consequential. A higher level keeps every control of the levels below it.

Used by communicationLevel

CodeConceptDefinition
1general informationpwm:CommGeneralInformationInformation not specific to the client.
2house viewpwm:CommHouseViewThe institution's published view, unadapted.
3contextualised insightpwm:CommContextualisedInsightInformation related to the client's circumstances, without a recommendation.
4investment discussionpwm:CommInvestmentDiscussionDiscussion of options for the client's portfolio.
5product recommendationpwm:CommProductRecommendationPersonal recommendation of a product; triggers suitability checks and approval.
6transactionpwm:CommTransactionCommunication that confirms or effects a transaction.

content provenance labels

pwm:ContentProvenanceScheme

Used by contentProvenance

CodeConceptDefinition
humanpwm:ProvenanceHumanWritten by a person without AI.
AIpwm:ProvenanceAIGenerated by AI.
AI then human-editedpwm:ProvenanceAIHumanEditedGenerated by AI, then edited by a person; stays identifiable as AI-originated.
human with AI assistancepwm:ProvenanceHumanAIAssistedWritten by a person with AI help.

AI disclosure triggers

pwm:DisclosureTriggerScheme

Used by disclosureTrigger

CodeConceptDefinition
AI generated contentpwm:TriggerAIGeneratedContentThe content was generated by AI.
assisted analysispwm:TriggerAssistedAnalysisAI assisted the analysis behind the content.
powers a chatbotpwm:TriggerPowersChatbotThe client is talking to an AI system.
materially contributed to a decisionpwm:TriggerMaterialContributionAI materially contributed to a decision affecting the client.

origination triggers

pwm:OriginationTriggerScheme

Used by originationTrigger

CodeConceptDefinition
eventpwm:OriginationEventA client or market event, such as a maturity or a house-view change.
schedulepwm:OriginationScheduleA scheduled review.
RM requestpwm:OriginationRMRequestA relationship manager asked for it.

do-not-contact reasons

pwm:DoNotContactReasonScheme

Used by doNotContactReason

CodeConceptDefinition
low relevancepwm:DNCLowRelevanceNot relevant enough to the client.
poor timingpwm:DNCPoorTimingWrong moment for the client.
vulnerabilitypwm:DNCVulnerabilityA vulnerability indicator is open.
excessive frequencypwm:DNCExcessiveFrequencyContact-frequency limit reached.
a recent rejectionpwm:DNCRecentRejectionThe client recently declined a similar proposal.
a relationship circumstancepwm:DNCRelationshipCircumstanceA circumstance in the relationship makes contact inappropriate.

final decision results

pwm:DecisionResultScheme

Used by decisionResult

CodeConceptDefinition
approvepwm:DecisionApproveAccepted as prepared.
modifypwm:DecisionModifyAccepted with changes, recorded as a structured diff.
rejectpwm:DecisionRejectNot accepted.
escalatepwm:DecisionEscalateReferred to a more senior or specialist decision-maker.

Module 8

AI use cases, authority and accountability

The AI inventory, risk materiality, agents, delegated authority, autonomy and the people accountable for them.

Classes

AI use case

pwm:AIUseCaseslow contextC1

Specific real-world context that an AI model or system is applied to, registered as a versioned inventory entry with its purpose, approved scope including jurisdiction, data, dependencies, lifecycle status, risk materiality, review status and accountable people.

The use case, not the model, is the unit of risk assessment. Every policy decision cites the use case it was taken under; an unregistered or retired use case is refused.

specialises
EntityPROV-O
properties
approvedJurisdictionmodelTypelifecycleStatusisMediatedriskTierhasMaterialityAssessment

AI system

pwm:AISystemslow context

Machine-based system of one or more models and other components that derives outputs, such as predictions, content, recommendations or decisions, from learned premises.

Tools whose outputs are fully determined by manually specified rules, and robotic process automation without learning, are not AI for this purpose.

specialises
EntityPROV-O
close match
AI SystemDPV-AI

AI model

pwm:AIModelslow context

Method that converts assumptions and input data into outputs such as estimates, decisions or recommendations, pinned to a provider and version.

specialises
EntityPROV-O
close match
ModelDPV-AI

AI agent

pwm:AIAgentslow context

Software agent that plans and takes actions with tools on behalf of a person, holding its own credentials, a maximum autonomy level, a tool allow-list, guardrails and a deployment version that covers prompt, tools, permissions and data.

An agent can never hold an accountability role. Its entitlements are always narrower than those of the person it acts for.

specialises
SoftwareAgentPROV-Osoftware agentOMG Commons
close match
AI AgentDPV-AI
properties
registeredForUseCaseagentIdentifierdeploymentVersionmaxAutonomyLevelpermittedTool

third-party AI

pwm:ThirdPartyAI

AI system, model, or service using AI, that an external party develops, owns, operates or provides and the institution procures, accesses or relies on, including AI embedded in software services.

specialises
AI system
  • REGMAS AIRGfn 10 (definition); 4.2 and fn 21 (embedded AI); 5.10, 5.11 (management)

model provider

pwm:ModelProvider

Organisation that supplies AI models or AI services, tracked for concentration, change notification and exit.

specialises
service providerOMG Commons

model card

pwm:ModelCardslow context

Record of an approved model: provider, name and version, intended use, known limitations, the evaluation relied on, approval date and approver.

specialises
documentOMG Commons
  • REGMAS AIRG5.10: documentation of how third-party AI was tested
  • KOGKognita roadmap0.4 item 8: model card per approved model

tool

pwm:Toolslow context

Capability an agent can invoke, such as an MCP tool or API, declaring the action verb it performs, the autonomy level it requires and a maximum duration.

specialises
EntityPROV-O
properties
requiredAutonomyLevel
  • REGMAS AIRG5.16(c): govern plugins and APIs
  • KOGKognita roadmap0.5 item 3 (per-verb permissions), item 5 (allow-lists), item 16 (maximum duration)

risk materiality assessment

pwm:RiskMaterialityAssessmentslow context

Assessment of an AI use case on impact, complexity and reliance, including the autonomy granted, recorded before controls (inherent) and after them (residual), and approved by the designated control function.

Residual materiality must be within risk appetite before deployment. Kognita's six axes (business criticality, client-impact class, decision consequence, data sensitivity, autonomy, complexity) roll up into the three MAS dimensions.

specialises
assessment
properties
impactcomplexityrelianceinherentMaterialityresidualMaterialitybusinessCriticalityclientImpactClassdecisionConsequenceautonomyAxis

AI risk appetite

pwm:AIRiskAppetiteslow context

Board-approved statement of the AI uses the institution will and will not accept, with quantitative measures such as AI incident counts, material use cases depending on one provider, and use cases breaching performance thresholds.

specialises
EntityPROV-O
  • REGMAS AIRG3.4(b) and fn 18
  • KOGKognita roadmap0.4 item 8: AI risk appetite as top-level policy; quantitative measures

business owner

pwm:BusinessOwner

Accountability role answerable for an AI use case's business outcome and residual risk acceptance. Every decision under the use case cites this person.

specialises
accountability role
also called
accountable owner
  • REGMAS AIRG5.23(c): accountable person for monitoring and incidents
  • KOGKognita roadmap0.4 item 8: a use case with no current owner is a DENY

Knowledge Lead

pwm:KnowledgeLead

Named owner of an AI workflow's quality standard: defines the standard and primary metric, approves consequential outputs, receives escalations of ambiguity and exceptions, and approves changes to the standard, including those learned from operations.

specialises
accountability role

designated control function

pwm:DesignatedControlFunction

Control function, independent of a use case's business and technology owners, that is final arbiter of whether a use constitutes AI, owns inventory policy, and approves risk materiality ratings.

specialises
accountability role

independent validator

pwm:IndependentValidator

Person or function, independent of development and deployment, that validates a high-materiality AI use case before deployment and periodically afterwards.

specialises
accountability role
  • REGMAS AIRG5.18 to 5.21 (pre-deployment review); 5.24 (re-validation)
  • KOGKognita roadmap0.4 item 8: independent validation as separation of duties

delegated authority

pwm:DelegatedAuthorityfast contextC2

Authorisation that binds a person, an agent, a purpose, a client, permitted actions, permitted data, a period and limits. Specific, temporary, revocable, and ended by task completion as well as by time.

A request is allowed only if the person holds the entitlement and the agent holds a live delegation for it.

specialises
authorizationOMG Commons
properties
delegatedBydelegatedTopermitsDataClassendsOnTaskCompletionapprovalThreshold

autonomy promotion gate

pwm:AutonomyPromotionGateslow context

Evidence thresholds an agent must meet over a minimum sample and window before its autonomy level may rise, and below which it steps down automatically.

specialises
EntityPROV-O
properties
qualityThresholdexceptionRateThresholdrequiresFullTraceability

purpose

pwm:Purposeslow context

Declared reason for processing data or invoking AI. Access is bound to it; a request without a registered purpose is refused.

close match
PurposeDPV

kill switch

pwm:KillSwitchfast context

Mechanism that deactivates an AI system expeditiously when it exceeds risk tolerances, effective on the next decision, with a tested activation protocol and fallback.

kill-switch drill

pwm:KillSwitchDrill

Test activation of a kill switch, recording who activated it, how long until the next decision was denied, and how the fallback was reached.

specialises
ActivityPROV-O

Properties

has purpose

pwm:hasPurposeobject property

Registered purpose of a use case, delegation or request.

domain → range
anypurpose

uses data class

pwm:usesDataClassobject property

Data classification a use case is permitted to process.

domain → code list
anydata classifications
  • REGMAS AIRG4.7: data used; 5.4(d): data classification

depends on

pwm:dependsOnobject property

AI system, model, provider or other use case that a use case relies on.

domain → range
anyany

risk tier

pwm:riskTierobject property

Risk tier derived from a use case's classification, which sets its minimum controls and maximum autonomy.

domain → code list
AI use caseuse-case risk tiers

impact

pwm:impactobject property

Impact rating: consequence of failure or poor performance for the institution, its customers and stakeholders, including the sensitivity of the data processed.

domain → code list
risk materiality assessmentrating levels

complexity

pwm:complexityobject property

Complexity rating: from the technology, novelty, data and explainability, and for third-party AI the visibility into it.

domain → code list
risk materiality assessmentrating levels

reliance

pwm:relianceobject property

Reliance rating: how far the decision or output rests on AI, including the autonomy granted and the degree of human oversight.

domain → code list
risk materiality assessmentrating levels

has accountability role

pwm:hasAccountabilityRoleobject property

Links a use case or agent to an accountability role held for it. The person holding the role is given on the role, with is played by.

domain → range
anyaccountability role

registered for use case

pwm:registeredForUseCaseobject property

Use case an agent is registered to act under.

domain → range
AI agentAI use case

maximum autonomy level

pwm:maxAutonomyLevelobject property

Highest autonomy level an agent may operate at, capped by its use case's risk tier.

domain → code list
AI agentagent autonomy levels

required autonomy level

pwm:requiredAutonomyLevelobject property

Autonomy level a tool requires. A call above the agent's level is refused; a call at L4 routes to human approval.

domain → code list
toolagent autonomy levels

action verb

pwm:actionVerbobject property

Action a tool performs, or a delegation permits.

domain → code list
anyaction verbs

permitted tool

pwm:permittedToolobject property

Tool on an agent's allow-list.

domain → range
AI agenttool

boundary tier

pwm:boundaryTierobject property

Whether an action is always permitted, needs asking first, or is never permitted for an agent.

domain → code list
anyboundary tiers

delegated by

pwm:delegatedByobject property

Person who grants a delegated authority. They must hold the entitlement themselves.

domain → range
delegated authorityany

about client

pwm:aboutClientobject property

Client a delegation, claim or fact is about.

domain → range
anyclient

approved jurisdiction

pwm:approvedJurisdictiondatatype property

Jurisdiction in which a use case is approved for use, as an ISO 3166-1 alpha-2 code.

domain → range
AI use casestringXSD
  • REGMAS AIRG4.7: approved scope of use (e.g., jurisdiction)

model type

pwm:modelTypedatatype property

Kind of model a use case relies on, such as a classifier, ranking model or large language model.

domain → range
AI use casestringXSD

is mediated

pwm:isMediateddatatype property

Whether a use case runs through the institution's AI control plane. Unmediated entries record the assurance gap and compensating control.

domain → range
AI use casebooleanXSD

agent identifier

pwm:agentIdentifierdatatype property

Readable, unique identifier of an agent, such as AGENT-RM-PRECALL-01.

domain → range
AI agentstringXSD

deployment version

pwm:deploymentVersiondatatype property

Hash over an agent's system prompt, instructions, tools, permissions, data sources, orchestration and memory behaviour. Any change needs re-approval before the agent can act.

domain → range
AI agentstringXSD

ends on task completion

pwm:endsOnTaskCompletiondatatype property

Whether a delegation is revoked when its task completes, not only when its period ends.

domain → range
delegated authoritybooleanXSD

approval threshold

pwm:approvalThresholddatatype property

Statement of which actions under a delegation require human approval.

domain → range
delegated authoritystringXSD

quality threshold

pwm:qualityThresholddatatype property

Minimum share of outputs meeting the agreed standard, as a fraction from 0 to 1.

domain → range
autonomy promotion gatedecimalXSD
  • AMEVOLVEQuality at least 95 percent

exception rate threshold

pwm:exceptionRateThresholddatatype property

Maximum share of runs that leave the always-do path, as a fraction from 0 to 1.

domain → range
autonomy promotion gatedecimalXSD
  • AMEVOLVEException rate below 5 percent

requires full traceability

pwm:requiresFullTraceabilitydatatype property

Whether every action in the evaluation window must be reconstructable for the gate to pass.

domain → range
autonomy promotion gatebooleanXSD
  • AMEVOLVEEvidence fully traceable

baseline value

pwm:baselineValuedatatype property

Measured value of an outcome metric before the use case.

domain → range
outcome metricdecimalXSD

target value

pwm:targetValuedatatype property

Agreed target for an outcome metric.

domain → range
outcome metricdecimalXSD
  • AMEVOLVETargets agreed with the process owner

Code lists

agent autonomy levels

pwm:AutonomyLevelScheme

Early private-banking deployments are expected at L1 to L4. Raising a level is a governed change needing the accountable owner and independent validation. The four-step gate in the Filing Cabinet talk (suggest, draft, act with approval, act alone) corresponds to L2, L3, L4 and L5 or above.

Used by maxAutonomyLevel, requiredAutonomyLevel

CodeConceptDefinition
L0retrievepwm:L0RetrieveFetch authorised information.
L1explainpwm:L1ExplainSummarise or explain retrieved information.
L2recommendpwm:L2RecommendPropose an option. Recommending never implies permission to execute.
L3draftpwm:L3DraftPrepare an artefact a person reviews before use.
L4act after approvalpwm:L4ActAfterApprovalTake an action once a named person, not the requester, has approved that exact action.
L5bounded autonomous actionpwm:L5BoundedAutonomyAct without per-action approval inside explicit limits.
L6broad autonomypwm:L6BroadAutonomyAct across tasks with broad discretion.

boundary tiers

pwm:BoundaryTierScheme

Set per action for each agent, independently of the autonomy-level scale. As a rule of thumb, internal work at L0 to L3 sits in always do, and L4 in ask first.

Used by boundaryTier

CodeConceptDefinition
always dopwm:AlwaysDoSafe, reversible, inside the mandate and already authorised, such as retrieving authorised data or drafting an internal briefing.
ask firstpwm:AskFirstConsequential or client-facing; the agent prepares and a person decides.
never dopwm:NeverDoOutside this agent's scope, whatever it is asked, enforced in its permissions rather than by asking. Which actions sit here is set per agent, for example sending client communications for an agent that only drafts.

action verbs

pwm:ActionVerbScheme

Used by actionVerb

CodeConceptDefinition
readpwm:VerbReadRead information.
analysepwm:VerbAnalyseDerive insight from information.
recommendpwm:VerbRecommendPropose an option.
draftpwm:VerbDraftPrepare an artefact.
queuepwm:VerbQueuePlace an artefact for release by a person.
sendpwm:VerbSendRelease an artefact outside the institution.
executepwm:VerbExecuteChange a system of record or move value.
  • KOGKognita roadmap0.5 item 3: read, analyse, recommend, draft, queue, send and execute

use-case lifecycle statuses

pwm:UseCaseStatusScheme

Used by lifecycleStatus

CodeConceptDefinition
pilotpwm:StatusPilotLimited by end date, named users and success criteria.close match: Deployment StageDPV-AI
livepwm:StatusLiveIn production use.close match: Operation StageDPV-AI
suspendedpwm:StatusSuspendedStopped pending review; decisions are refused.
retiredpwm:StatusRetiredDecommissioned; its agents are stopped and retention applies.close match: Decommission StageDPV-AI

use-case risk tiers

pwm:RiskTierScheme

Used by riskTier

CodeConceptDefinition
1tier 1pwm:Tier1Research summarisation.
2tier 2pwm:Tier2Client intelligence and meeting preparation.
3tier 3pwm:Tier3KYC, suitability and recommendations.
4tier 4pwm:Tier4Financial execution.

client-impact classes

pwm:ClientImpactClassScheme

Used by clientImpactClass

CodeConceptDefinition
1internal productivitypwm:ImpactInternalProductivityStaff productivity with no client reach.
2RM assistancepwm:ImpactRMAssistanceHelps a relationship manager prepare.
3client influencepwm:ImpactClientInfluenceShapes what a client is told or offered.
4client communicationpwm:ImpactClientCommunicationProduces content that reaches a client.
5advicepwm:ImpactAdviceContributes to a personal recommendation.
6executionpwm:ImpactExecutionContributes to executing a transaction.

decision consequences

pwm:DecisionConsequenceScheme

Used by decisionConsequence

CodeConceptDefinition
informationalpwm:ConsequenceInformationalInforms only.
operationalpwm:ConsequenceOperationalChanges an internal operation.
client communicationpwm:ConsequenceClientCommunicationDetermines what reaches a client.
suitabilitypwm:ConsequenceSuitabilityBears on whether advice is suitable.
financial actionpwm:ConsequenceFinancialActionMoves value or changes a position.

use-case autonomy axis

pwm:AutonomyAxisScheme

Used by autonomyAxis

CodeConceptDefinition
nonepwm:AutonomyNoneNo autonomous action.
assistedpwm:AutonomyAssistedAssists a person who acts.
conditionalpwm:AutonomyConditionalActs under conditions or approval.
highpwm:AutonomyHighActs with little human involvement.

primary outcome metrics

pwm:PrimaryMetricScheme

Used by primaryMetric

CodeConceptDefinition
cycle timepwm:MetricCycleTimeTime to complete the workflow; breaches above target.
decision qualitypwm:MetricDecisionQualityShare of outputs meeting the standard; breaches below target.
reliabilitypwm:MetricReliabilityShare of runs completing without failure; breaches below target.
knowledge retentionpwm:MetricKnowledgeRetentionCapability that remains when people leave. An EVOLVE measure; not a Kognita primary metric.

agentic governance risks

pwm:GovernanceRiskScheme

Five risks that sit on top of model risk when AI moves from assistance to action.

CodeConceptDefinition
accesspwm:RiskAccessAn agent inherits whatever its tools can reach.
evidencepwm:RiskEvidenceThe chain of retrievals, judgements and actions is not kept.
operationalpwm:RiskOperationalAgents loop, stall, call the wrong tool or keep moving when they should stop.
changepwm:RiskChangeBehaviour changes with a prompt, tool, source or silent model update.
ownershippwm:RiskOwnershipNo named person is accountable for what the agent did.

Module 9

Information governance, claims and evidence

Governed documents and definitions, facts and claims, policy decisions and the evidence that reconstructs them.

Classes

governed information asset

pwm:GovernedInformationAssetslow context

Document, record or dataset carrying the minimum governance labels that make it safe to give to AI: owner, approval status, effective date, what it supersedes, classification per section, version identifier or content hash, and retention date.

When content is deleted, keep its hash and record the deletion.

specialises
documentOMG Commons
properties
hasSection

document section

pwm:DocumentSectionslow context

Section of a governed information asset with its own classification, so entitlements apply per section rather than per document.

specialises
documentOMG Commons

approved source

pwm:ApprovedSourceslow context

Source registered as approved for a use case's regulated claims, such as CIO research, product documentation, permitted market data or policy. A model's own knowledge is never an approved source.

specialises
EntityPROV-O
properties
approvedForUseCase

governed definition

pwm:GovernedDefinitionslow contextC1

Authoritative, versioned definition of a business term, such as assets under management, net new money or concentration, with an owner. Figures using the term must cite it.

specialises
EntityPROV-O
properties
definesTerm
  • KOGKognita roadmap0.6 item 12: governed business definitions
  • AMEVOLVEStage 5: define truth once (one definition of AUM)

calculation service

pwm:CalculationService

Registered service that produces authoritative figures, such as performance, valuation, concentration, exposure or suitability scores. A model may explain a calculation; it may not invent one.

specialises
SoftwareAgentPROV-O

fact

pwm:Factmedium contextC2

Authoritative value from a system of record, carrying its source, owner, as-of time, classification, entitlement and freshness threshold. Stale facts are refreshed, suppressed or flagged, never silently used.

specialises
EntityPROV-O
properties
freshnessThreshold

claim

pwm:Claimmedium contextC2

Material statement an agent produces for a person or client, typed as verified fact, inference, conversation hypothesis or possible provider capability, with its sources, calculation method, model and prompt versions and validator status.

Unlabelled claims cannot be shown. An inference cannot be relabelled as fact without a cited source and verification.

specialises
EntityPROV-O
properties
validatorStatus

policy rule

pwm:PolicyRuleslow contextC1

Effective-dated, citable rule evaluated outside the model before data moves or an action runs. Rules are versioned, never edited in place.

specialises
EntityPROV-O
properties
ruleCitation

policy decision

pwm:PolicyDecisionfast contextC1

Deterministic outcome of evaluating every applicable rule for a request, allow, deny, escalate or hold for human approval, citing the deciding rule and its version, the use case and any delegation relied on. One failing rule denies.

specialises
EntityPROV-O
properties
decisionOutcomedecidedByRule

evidence record

pwm:EvidenceRecordfast contextC1

Append-only, hash-chained record of an event, such as a policy decision, model call, tool call, retrieval, approval or communication, holding hashes and references rather than content, from which an interaction can be reconstructed.

Record a model refusal separately from a policy denial. Otherwise the evidence shows only that the model usually behaves, not that the controls work.

specialises
EntityPROV-O
properties
eventTypeevidenceForrecordHashpreviousRecordHashchainStart

human review

pwm:HumanReview

Review of AI output or a proposed action by a competent person with authority to intervene, given a complete packet of action, reason, evidence, risks, alternatives and checks run.

specialises
ActivityPROV-O
  • REGMAS AIRG5.9(a) to (d): human oversight; automation bias and decision fatigue
  • KOGKognita roadmap0.4 item 11 (approval packet); item 13 (risk-based review)

AI incident

pwm:AIIncidentC2

Incident involving a failure, malfunction or poor performance of an AI system or model, escalated, tracked and linked to the clients affected.

specialises
EntityPROV-O
  • REGMAS AIRGfn 20 (definition); 3.5(e) escalation; 5.23(b) incident management
  • KOGKognita roadmap0.4 item 14 (affected-client query); 0.7 (incident evidence and report)

near miss

pwm:NearMissC1

Event where harm was avoided, such as a blocked action, a verifier block, a reviewer rejection, an unsafe draft or unusual agent behaviour, aggregated to find weak controls before harm occurs.

specialises
EntityPROV-O

memory record

pwm:MemoryRecordmedium contextC2

Item an agent retains beyond a single step, scoped as working, relationship or institutional memory and typed like a claim, with retention, a correction path and expiry.

An inference becomes a relationship record only after verification by a person. Client data never enters institutional memory.

specialises
EntityPROV-O
properties
memoryScope
  • KOGKognita roadmap0.6 item 8: memory governance
  • AMEVOLVEClosed-loop learning; human expertise becomes institutional capability

Properties

information owner

pwm:informationOwnerobject property

Role accountable for a governed information asset or definition.

domain → range
anyparty roleOMG Commons

approval status

pwm:approvalStatusobject property

Approval status of a governed information asset: draft, current, superseded or withdrawn.

domain → code list
anyinformation asset statuses

approved for use case

pwm:approvedForUseCaseobject property

Use case for which a source is approved.

domain → range
approved sourceAI use case
  • KOGKognita roadmap0.6 item 3: each use case has a register of approved sources

claim type

pwm:claimTypeobject property

Epistemic type of a claim or memory record.

domain → code list
anyclaim types
  • KOGKognita vocabulariesclaims: VERIFIED_FACT, INFERENCE, CONVERSATION_HYPOTHESIS, POSSIBLE_BANK_CAPABILITY

validator status

pwm:validatorStatusobject property

Verdict of an independent verifier on a claim. Policy decides what each status may reach.

domain → code list
claimvalidator statuses

cites source

pwm:citesSourceobject property

Approved source, governed asset or fact a claim relies on.

domain → range
anyany
sub-property of
wasDerivedFromPROV-O

uses definition

pwm:usesDefinitionobject property

Governed definition, at a version, that a claim or figure uses.

domain → range
anygoverned definition

under use case

pwm:underUseCaseobject property

Registered use case a decision, claim or event was produced under.

domain → range
anyAI use case
  • KOGKognita roadmap0.4 item 8: every decision must reference a registered use case

relies on delegation

pwm:reliesOnDelegationobject property

Delegated authority a decision or action relied on.

domain → range
anydelegated authority
  • KOGKognita roadmap0.5 item 2: every decision references the delegation it relied on

evidence for

pwm:evidenceForobject property

Decision, action, communication or other record that an evidence record documents. The record points to it by identifier and hash and does not copy its content.

domain → range
evidence recordany
sub-property of
ReferencesDCMI

version identifier

pwm:versionIddatatype property

Version identifier of an asset, definition, rule, model or deployment.

domain → range
anystringXSD

retention until

pwm:retentionUntildatatype property

Date until which a record must be kept. An AI record never expires before the regulatory record it supports.

domain → range
anydateXSD

as of

pwm:asOfdatatype property

Time at which a fact or valuation was true in its system of record.

domain → range
anydateTimeXSD

freshness threshold

pwm:freshnessThresholddatatype property

Maximum age at which a fact may still be used, as an xsd:duration.

domain → range
factdurationXSD

previous record hash

pwm:previousRecordHashdatatype property

Hash of the record that precedes this one in the chain. Required on every record except the first in a chain.

domain → range
evidence recordstringXSD

model version

pwm:modelVersiondatatype property

Provider model version as served for a model call, claim or evaluation.

domain → range
anystringXSD
  • REGMAS AIRG5.23(d): applicable model versions

Code lists

data classifications

pwm:DataClassificationScheme

Ordered by sensitivity. Compare by rank, never by label: entitlement filtering and egress control depend on the order.

Used by classification, permitsDataClass, usesDataClass

CodeConceptDefinition
C0publicpwm:C0Approved for public release.
C1internalpwm:C1For staff; no client identity.
C2confidentialpwm:C2Identifies a client; within banking secrecy where it applies.close match: Personal DataDPV
C3restrictedpwm:C3Need-to-know only, such as screening hits, investigations, special-category data and material non-public information.close match: Special Category Personal DataDPV

policy decision outcomes

pwm:DecisionOutcomeScheme

Resolution is fail-closed: the most severe outcome present decides, in the order deny, escalate, human approval, allow.

Used by decisionOutcome

CodeConceptDefinition
DENYdenypwm:OutcomeDenyRefused; nothing moves.
ESCALATEescalatepwm:OutcomeEscalateUncertain; referred to a person.
HUMAN_APPROVALhuman approvalpwm:OutcomeHumanApprovalHeld until a named person approves this exact action.
ALLOWallowpwm:OutcomeAllowEvery rule passed.
OBSERVEobservepwm:OutcomeObserveRecorded without gating, in monitor-only deployments.

claim types

pwm:ClaimTypeScheme

Used by claimType

CodeConceptDefinition
verified factpwm:VerifiedFactBacked by a cited source and verification.
inferencepwm:InferenceReasoned from facts; not itself verified.
conversation hypothesispwm:ConversationHypothesisSomething worth raising with the client, to be tested in conversation.
possible provider capabilitypwm:PossibleProviderCapabilitySomething the institution might be able to offer, not yet confirmed.

validator statuses

pwm:ValidatorStatusScheme

Used by validatorStatus

CodeConceptDefinition
verifiedpwm:ValidatorVerifiedVerifier confirmed it.
inferredpwm:ValidatorInferredSupported only by inference.
unverifiedpwm:ValidatorUnverifiedNot yet checked.
conflictingpwm:ValidatorConflictingSources disagree.
stalepwm:ValidatorStaleRelies on data past its freshness threshold.
blockedpwm:ValidatorBlockedMay not be released.

information asset statuses

pwm:AssetStatusScheme

Used by approvalStatus

CodeConceptDefinition
draftpwm:AssetDraftNot approved; never given to AI as authoritative.
currentpwm:AssetCurrentApproved and in force.
supersededpwm:AssetSupersededReplaced by a later version; kept for reconstruction only.
withdrawnpwm:AssetWithdrawnWithdrawn without replacement.

stale-data actions

pwm:StaleActionScheme

Used by staleAction

CodeConceptDefinition
refreshpwm:StaleRefreshFetch a current value before use.
suppresspwm:StaleSuppressDo not use the value.
warnpwm:StaleWarnUse with a visible staleness warning.

memory scopes

pwm:MemoryScopeScheme

Used by memoryScope

CodeConceptDefinition
workingpwm:MemoryWorkingTemporary context; expires with the run.
relationshippwm:MemoryRelationshipDurable client information, governed like any bank record.
institutionalpwm:MemoryInstitutionalWhat the organisation learns across clients; no client data.

evidence event types

pwm:EvidenceEventTypeScheme

Notations match Kognita EventType values. Model refusal is added from the Filing Cabinet talk so refusals and policy denials are logged apart.

Used by eventType

CodeConceptDefinition
POLICY_DECISIONpolicy decisionpwm:EventPolicyDecisionA decision was taken.
MODEL_CALLmodel callpwm:EventModelCallA model was called; provider, version and prompt and response hashes recorded.
TOOL_CALLtool callpwm:EventToolCallA tool was invoked; arguments recorded as hashes.
RETRIEVALretrievalpwm:EventRetrievalContent was retrieved, with item hashes.
APPROVALapprovalpwm:EventApprovalA person signed an approval.
EGRESSegresspwm:EventEgressData left for a provider, allowed, redacted or denied.
POLICY_CHANGEpolicy changepwm:EventPolicyChangeA rule or register entry changed.
ORIGINATIONoriginationpwm:EventOriginationA client or product was selected.
FINAL_DECISIONfinal decisionpwm:EventFinalDecisionA person decided.
CLIENT_COMMUNICATIONclient communicationpwm:EventClientCommunicationSomething was sent to a client.
INTERVENTIONinterventionpwm:EventInterventionA person paused, overrode, restricted, revoked or recovered a live run.
OUTCOMEoutcomepwm:EventOutcomeA complaint, correction or other outcome was linked to the interaction.
NEAR_MISSnear misspwm:EventNearMissA near miss was recorded.
CLAIMclaimpwm:EventClaimA claim was recorded.
INCIDENT_OPENEDincident openedpwm:EventIncidentOpenedAn AI incident was opened.
ERASUREerasurepwm:EventErasureContent was erased; the chain stays verifiable.
MODEL_REFUSALmodel refusalpwm:EventModelRefusalThe model declined, as distinct from a policy denial.

SHACL

Data rules

The shapes file checks data against the rules below. Validate together with the ontology and RDFS inference. A firm can switch a rule off in its own shapes graph and add its own thresholds there.

pyshacl -s pwm-shapes.ttl -e pwm.ttl -i rdfs your-data.ttl

Accountability role

applies to accountability role
  • An accountability role must be held by a named person (Kognita 0.4 item 8; MAS AIRG 4.7 key roles).
  • An AI agent can never be named in an accountability role (Kognita 0.4 item 8).

AI use case

applies to AI use case
  • A use case records its purpose (MAS AIRG 4.7).
  • A use case records its approved jurisdiction as an ISO 3166-1 alpha-2 code (MAS AIRG 4.7 approved scope of use).
  • A use case has one lifecycle status: pilot, live, suspended or retired (MAS AIRG 4.7; Kognita 0.4 item 8).
  • A use case has one risk tier, 1 to 4 (Kognita 0.4 item 8).
  • A use case states whether the control plane mediates it. Embedded vendor AI is registered too, marked unmediated (Kognita 0.4 item 8; MAS AIRG 4.2).
  • A use case carries a review date set by its tier; past it, the use case is refused (Kognita 0.4 item 8).
  • A use case with no business owner is refused (Kognita 0.4 item 8; MAS AIRG 4.7).
  • A use case at tier 2 or above with no named Knowledge Lead is refused (Kognita 0.4 item 8).

Live use case

applies to AI use case
  • A live use case needs a materiality assessment with inherent and residual ratings, approved by the designated control function (MAS AIRG 4.11, 4.13; Kognita 0.4 item 8).

Control function separation

applies to AI use case
  • The person who approves a use case's materiality rating for the control function cannot also be its business or technology owner (Kognita 0.4 item 8; MAS AIRG 4.13 independent oversight).

Risk materiality assessment

applies to risk materiality assessment
  • Rate impact, low to critical (MAS AIRG 4.12(a)).
  • Rate complexity, low to critical (MAS AIRG 4.12(b)).
  • Rate reliance, including the autonomy granted, low to critical (MAS AIRG 4.12(c)).
  • Record materiality before controls (MAS AIRG 4.11).
  • Record materiality after controls (MAS AIRG 4.11).

AI agent

applies to AI agent
  • An agent has one identifier (MAS AIRG footnote 25; Kognita 0.5 item 1).
  • An agent carries one maximum autonomy level, L0 to L6 (Kognita 0.5 item 3).
  • An agent is linked to at least one registered use case (Kognita 0.5 item 1).
  • An agent's deployment version covers prompt, tools, permissions and data sources, not only code (Kognita 0.5 item 1; MAS AIRG 5.25(b)).
  • An agent past its review date is refused, so it needs one (Kognita 0.5 item 1).

Agent tool level

applies to AI agent
  • An agent is permitted a tool that needs a higher autonomy level than the agent's maximum. A call above the agent's level is refused (Kognita 0.5 item 3).

Tool

applies to tool
  • Every tool declares the autonomy level it requires (Kognita 0.5 item 3).
  • A tool declares the verbs it performs, because action permissions are per verb (Kognita 0.5 item 3).

Delegated authority

applies to delegated authority
  • A delegation is granted by one named person (Kognita 0.5 item 2).
  • A delegation is granted to one registered agent (Kognita 0.5 item 2).
  • A delegation is bound to a purpose (Kognita 0.5 item 2).
  • A delegation names the actions it allows (Kognita 0.5 item 2).
  • A delegation is temporary: it has an end time, or ends when its task completes (Kognita 0.5 item 2).

Client communication

applies to client communication
  • A communication that does not trace back to a final decision is refused (Kognita 0.4 item 12).
  • Every communication is classified by communication level (Kognita 0.4 item 12).
  • Every communication carries its content provenance label (Kognita 0.4 item 11).
  • Client communication goes only through a registered, approved channel (Kognita 0.4 item 12).

AI disclosure

applies to client communication
  • When AI generated the content, the client communication must say so (Kognita private-banking pack, client-ai-disclosure; MAS AIRG 5.6).

Claim

applies to claim
  • Unlabelled claims cannot be shown to an RM or sent to a client (Kognita 0.6 item 5).
  • validator status: at most 1
  • A claim typed as verified fact must cite a source and carry the validator status verified. The model's own knowledge is never a source, and an inference cannot become a fact without verification (Kognita 0.6 items 3, 5 and 7).

Fact

applies to fact
  • A fact carries its as-of time (Kognita 0.6 item 2).
  • A fact carries a freshness threshold (Kognita 0.6 item 2).
  • A fact carries its classification (Kognita 0.6 item 2).
  • A fact names its source system (Kognita 0.6 item 2).

Valuation

applies to valuation
  • amount: exactly one, of type decimal
  • currency: exactly one
  • as of: at least 1, of type dateTime
  • A figure presented as authoritative must cite a registered calculation service (Kognita 0.6 item 6).

Suitability assessment

applies to suitability assessment
  • Name the recommendation being assessed.
  • Cite the one risk profile in force when the assessment was made (MiFID II Art. 25(2); Delegated Regulation (EU) 2017/565 Art. 54).
  • Check the recommendation against the recorded mandate (Kognita private-banking pack, mandate).
  • suitability outcome: exactly one, one of suitable, suitable with conditions, not suitable, insufficient information
  • Record how the recommendation meets the client's objectives and characteristics, not a bare score (MiFID II Art. 25(6)).
  • Record who made the assessment.

Investor risk profile

applies to investor risk profile
  • risk profile level: exactly one
  • valid from: at least 1, of type dateTime
  • wasAttributedTo: at least 1

Investor classification

applies to investor classification
  • investor category: exactly one
  • A classification is made under one jurisdiction's rules.
  • opt status: at most 1

Governed information asset

applies to governed information asset
  • Minimum label: owner (Filing Cabinet, slide 8).
  • Minimum label: approval status (Filing Cabinet, slide 8).
  • Minimum label: effective date (Filing Cabinet, slide 8).
  • Minimum label: retention date (Filing Cabinet, slide 8).
  • Minimum label: version identifier or content hash (Filing Cabinet, slide 8).

Document section

applies to document section
  • Classify per section, not per document (Filing Cabinet, slide 8).

Policy rule

applies to policy rule
  • Every rule carries a citation to what it implements (Kognita 0.4 item 3).
  • Rules are effective-dated (Kognita 0.3 item 7).
  • A change to a rule is a new version, never an edit in place (Kognita 0.3 item 7).

Cross-border rule

applies to cross-border rule
  • applies to activity: at least 1
  • permitted: exactly one, of type boolean
  • Client domicile is an ISO 3166-1 alpha-2 code.
  • Booking centre is an ISO 3166-1 alpha-2 code.

Policy decision

applies to policy decision
  • decision outcome: exactly one, one of deny, escalate, human approval, allow, observe
  • Every decision names the rule and rule version that decided it (Filing Cabinet, slide 14).
  • Every decision references a registered use case (Kognita 0.4 item 8).

Evidence record

applies to evidence record
  • event type: exactly one
  • Evidence records are hash-chained (Kognita control frameworks).
  • An evidence record states when the event happened (MAS AIRG 5.23(d)).
  • previous record hash: at most 1
  • Every evidence record names the hash of the record before it, except the first record of a chain, which is marked chain start (Kognita control frameworks: hash-chained evidence).

Currency code

applies to anything with currency
  • Currency is an ISO 4217 alphabetic code, such as SGD.

Country code

applies to anything with residence country, anything with domicile country, anything with nationality country, anything with jurisdiction code, anything with tax residence country
  • Residence is an ISO 3166-1 alpha-2 code, such as SG.
  • Domicile is an ISO 3166-1 alpha-2 code, such as SG.
  • Nationality is an ISO 3166-1 alpha-2 code, such as SG.
  • Jurisdiction is an ISO 3166-1 alpha-2 code, such as SG.
  • Tax residence is an ISO 3166-1 alpha-2 code, such as SG.

Legal Entity Identifier

applies to anything with legal entity identifier
  • An LEI is 18 letters or digits followed by two check digits (ISO 17442).

ISIN

applies to anything with ISIN
  • An ISIN is a two-letter prefix, nine letters or digits and a check digit (ISO 6166).

CFI code

applies to anything with CFI code
  • A CFI code is six letters (ISO 10962).

Code lists

applies to every coded property
  • Each of the 48 coded properties takes its values only from the code list it is bound to with pwm:valuesFrom. The shapes, named pwmsh:CodeList_ followed by the property name, are generated from the bindings. List replacement requires firm shapes and review of handwritten constraints and code-dependent rules; see https://github.com/mze3e/kognita/blob/main/docs/ontology/pwm/README.md.

For institutions

Extending PWM

Keep a firm's detail in its own ontology that imports PWM by its version IRI, which resolves to the Turtle file. Specialise PWM classes, add the firm's code lists and bind coded properties to them with pwm:valuesFrom. Keep confidential content out of public repositories.

@prefix owl:  <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix skos: <http://www.w3.org/2004/02/skos/core#> .
@prefix sh:   <http://www.w3.org/ns/shacl#> .
@prefix pwm:  <https://ahmedmuzammil.com/ontology/pwm#> .
@prefix pwmsh: <https://ahmedmuzammil.com/ontology/pwm/shapes#> .
@prefix firm: <https://example.org/firm/ontology#> .

<https://example.org/firm/ontology> a owl:Ontology ;
    owl:imports <https://ahmedmuzammil.com/ontology/pwm/0.1> .

# The firm's own risk scale, in place of the illustrative one
firm:RiskScale a skos:ConceptScheme ; skos:prefLabel "Firm risk scale"@en .
firm:R1 a skos:Concept ; skos:inScheme firm:RiskScale ; skos:notation "R1" ;
    skos:prefLabel "capital preservation"@en .

# Additional bindings do not remove the defaults; see the separate shapes below
pwm:riskProfileLevel pwm:valuesFrom firm:RiskScale .
pwm:productRiskLevel pwm:valuesFrom firm:RiskScale .
pwm:targetRiskProfile pwm:valuesFrom firm:RiskScale .

# A firm product type specialising a PWM class
firm:StructuredNote a owl:Class ;
    rdfs:subClassOf pwm:Product ;
    rdfs:label "structured note"@en .

Sources

Reference register

MarkReferenceJurisdictionStatus
ONTFIBOFinancial Industry Business Ontology (FIBO)EDM Council and Object Management Group, 2026-10-27Every FIBO IRI used here was checked against the ontology files at GitHub commit 33a92cd (27 October 2026). Each term's maturity level, Release or Provisional, is taken from the file that defines it.Globalverified
ONTOMG CommonsCommons Ontology LibraryObject Management Group, 2025-08-01PartiesAndSituations and Organizations were read at version 20250801. Jurisdiction, RegulatoryAgency, Authorization, isPlayedBy and Document are referenced by FIBO production ontologies; their module files were not opened.Globalverified
ONTPROV-OPROV-O: The PROV OntologyW3C, 2013-04-30Globalinstrument-level
ONTSKOSSKOS Simple Knowledge Organization System ReferenceW3C, 2009-08-18Globalinstrument-level
ONTDCMI TermsDCMI Metadata TermsDublin Core Metadata InitiativeGlobalinstrument-level
ONTDPVData Privacy Vocabulary (DPV) 2.3, with the AI extensionW3C Data Privacy Vocabularies and Controls Community GroupConcept IRIs checked against the DPV 2.3 Turtle files (dpv and ai) in the w3c-cg/dpv repository.Globalverified
ISOISO 17442ISO 17442-1 Financial services: Legal entity identifier (LEI)ISOGlobalinstrument-level
ISOISO 6166ISO 6166 Securities: International securities identification number (ISIN)ISOGlobalinstrument-level
ISOISO 10962ISO 10962 Securities: Classification of financial instruments (CFI)ISOGlobalinstrument-level
ISOISO 4217ISO 4217 Codes for the representation of currenciesISOGlobalinstrument-level
ISOISO 3166ISO 3166-1 Codes for the representation of names of countriesISOGlobalinstrument-level
ISOISO 20022ISO 20022 Universal financial industry message schemeISOGlobalinstrument-level
ISOISO 22222ISO 22222:2005 Personal financial planning: Requirements for personal financial plannersISO, 2005Listed as current; confirmed at review in 2023.Globalverified
ISOISO/IEC 22989ISO/IEC 22989:2022 Artificial intelligence concepts and terminologyISO/IECCited by the MAS AI Risk Management Guidelines (footnote 27) for the AI life cycle.Globalinstrument-level
ISOISO/IEC 42001ISO/IEC 42001:2023 Artificial intelligence management systemISO/IECGlobalinstrument-level
ISOISO 15489ISO 15489-1:2016 Records management: Concepts and principlesISOGlobalinstrument-level
REGFATF RecommendationsInternational Standards on Combating Money Laundering and the Financing of Terrorism and Proliferation (the FATF Recommendations)Financial Action Task Force, 2012, as updatedRecommendation 12 (politically exposed persons, including source of wealth and source of funds) was checked; other Recommendation numbers are cited from the published text.Globalinstrument-level
REGOECD CRSStandard for Automatic Exchange of Financial Account Information in Tax Matters: Common Reporting StandardOECDControlling Persons is defined in Section VIII(D)(6).Globalverified
REGIMDA agentic AI frameworkModel AI Governance Framework for Agentic AIInfocomm Media Development Authority (Singapore)Referenced by the MAS AI Risk Management Guidelines, footnote 11.SGinstrument-level
REGMAS AIRGGuidelines on Artificial Intelligence Risk ManagementMonetary Authority of Singapore, 2026-10-07Read in full from the MAS PDF. Effective 7 October 2027: Sections 3 and 4 from that date; Sections 5 and 6 by 7 October 2028 (para 1.8). MAS intends to consult in 2027 on further guidance for agentic AI.SGverified
REGMAS FEATPrinciples to Promote Fairness, Ethics, Accountability and Transparency (FEAT) in the Use of AI and Data Analytics in Singapore's Financial SectorMonetary Authority of Singapore, 2018SGverified
REGMAS FAA-N16Notice FAA-N16 Recommendations on Investment ProductsMonetary Authority of SingaporeSGverified
REGMAS SFA 04-N12Notice SFA 04-N12 Sale of Investment ProductsMonetary Authority of SingaporeSGverified
REGMAS Notice 626Notice 626 Prevention of Money Laundering and Countering the Financing of Terrorism: BanksMonetary Authority of SingaporeSGverified
REGSecurities and Futures Act (SG)Securities and Futures Act 2001, section 4A (accredited, expert and institutional investors), with the opt-in regime for accredited investorsSingapore Parliament; Monetary Authority of SingaporeSGverified
REGBanking Act (SG)Banking Act 1970, section 47 (banking secrecy) and the Third ScheduleSingapore ParliamentSGinstrument-level
REGMAS Fair Dealing GuidelinesGuidelines on Fair Dealing: Board and Senior Management Responsibilities for Delivering Fair Dealing Outcomes to CustomersMonetary Authority of SingaporeCited by the MAS AI Risk Management Guidelines, footnote 15.SGinstrument-level
REGMiFID IIDirective 2014/65/EU on markets in financial instruments (MiFID II)European Parliament and Council, 2014-05-15EUinstrument-level
REGMiFID II Delegated RegulationCommission Delegated Regulation (EU) 2017/565 supplementing MiFID II (organisational requirements and operating conditions)European CommissionEUinstrument-level
REGPRIIPs RegulationRegulation (EU) No 1286/2014 on key information documents for packaged retail and insurance-based investment products (PRIIPs)European Parliament and CouncilEUinstrument-level
REGEU AI ActRegulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI Act)European Parliament and CouncilEUinstrument-level
REGFCA COBSFCA Handbook, Conduct of Business Sourcebook (COBS 3 client categorisation; COBS 9A suitability; COBS 10A appropriateness)Financial Conduct AuthorityGBinstrument-level
REGFCA FG21/1FG21/1 Guidance for firms on the fair treatment of vulnerable customersFinancial Conduct Authority, 2021GBinstrument-level
REGSFC Code of ConductCode of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission (para 5.2 suitability; para 15 professional investors)Securities and Futures CommissionParagraph 5.2 (suitability) checked. Paragraph 15 cited from the published Code.HKverified
REGHK Professional Investor RulesSecurities and Futures (Professional Investor) Rules (Cap. 571D)Hong Kong SAR GovernmentHKinstrument-level
REGFinSAFederal Act on Financial Services (FinSA), SR 950.1Swiss ConfederationArticle 4 (client segmentation) and Article 5 (opting out and opting in) checked. Articles 10 to 14 (suitability and appropriateness) cited as a range.CHverified
REGSEC Regulation DSEC Regulation D, Rule 501(a) definition of accredited investor (17 CFR 230.501)US Securities and Exchange CommissionUSinstrument-level
REGSEC Regulation Best InterestSEC Regulation Best Interest (17 CFR 240.15l-1)US Securities and Exchange CommissionUSinstrument-level
KOGKognita roadmapKognita Roadmap: From Governance Engine to Agent Harness (docs/ROADMAP.md)Kognita (open source, MIT), 2026-09, at release 0.7.0Read at commit 9303769 (release 0.7.0). Locators name the release and roadmap item, for example 0.4 item 8.Globalverified
KOGKognita regulations libraryAI Control Frameworks: Wealth Management and Agentic AI Coverage (docs/control-frameworks.md), the Kognita regulations libraryKognita (open source, MIT), 2026-10-12Consolidates the 40-domain bank-grade framework, the 70-control wealth management framework (MAS, PDPC, SFC, FCA, Bank of England, APRA, ASIC, CSBS, BIS/FSI, ESMA), a paragraph map of the MAS AI Risk Management Guidelines, and the trust-architecture principles.Globalverified
KOGKognita vocabulariesKognita controlled vocabularies (src/kognita/vocabulary.py, usecases.py, claims.py, memory.py, origination.py)Kognita (open source, MIT), release 0.7.0Globalverified
KOGKognita private-banking packKognita private-banking policy pack 1.0.0 (src/kognita/packs/data/private-banking)Kognita (open source, MIT)Globalverified
AMEVOLVEEVOLVE: Building the AI-Native Enterprise (organisational maturity model for AI)Ahmed MuzammilGlobalverified
AMGoverning agentic AI (essay)Governing agentic AI inside a regulated bankAhmed Muzammil, 2026-09-21Globalverified
AMFiling Cabinet talkYour AI Is Only as Good as Your Filing Cabinet (AIIM ASEAN Forum, Singapore)Ahmed Muzammil, 2026-10-22Globalverified
NEWPWM practitioner definitionPractitioner definition in this ontologyAhmed MuzammilUsed where no term was found in FIBO, OMG Commons or DPV at the versions checked. Each use is a candidate for proposal to the relevant standard.Globalverified

Change log

  • 0.1 (2026-11-02): First public draft: 10 modules, reference register, SHACL shapes, example data and negative tests.

The controls this ontology supports are built in Kognita. Comments and corrections are welcome on GitHub .