P2: onto_action_policy_check — ARGOS-style governance for state-changing actions (ISWC 2025 WOP)

## Why ISWC 2025 WOP/HAIBRIDGE workshop paper **ARGOS** by Pathirage, Seneviratne, McGuinness (RPI) — Ontology Design Pattern for governing dynamic data operations in LLM-RAG. ARGOS defines a vocabulary for actions (read/write/aggregate/delete) over RAG-connected data, enforced by SHACL-style policy. Paper at [CEUR Vol-4093/paper4.pdf](https://ceur-ws.org/Vol-4093/paper4.pdf). Pairs directly with `onto_certify_action` (#32, CIVeX scaffold) — CIVeX gates ACTIONS by causal-effect identifiability; ARGOS gates ACTIONS by policy compliance. Together they implement two complementary governance layers: causal safety (don't execute when effect is unidentifiable) + policy compliance (don't execute when prohibited by org policy). ## Scope New MCP tool `onto_action_policy_check(action_frame, policy_shapes_ttl)`: - **Input:** - The action frame (same shape as CIVeX `onto_certify_action`) - A SHACL-style policy graph specifying allowed actions per role/context - **Server work:** 1. Identify the action class (read / write / aggregate / delete / whatever ARGOS extends) 2. Match against the policy graph: is this action class allowed for the actor's role under the current data classification? 3. Return verdict: ALLOWED / DENIED / REQUIRES_REVIEW + the matched policy rule + rationale - **Integration:** can be wired as a pre-check inside `onto_certify_action` so a CIVeX certificate is only issued for policy-compliant actions Adopt ARGOS' action vocabulary directly (with attribution) and propose it as a sub-rule-pack of the IES4 enforce rule pack (#24). ## Reference - Paper: https://ceur-ws.org/Vol-4093/paper4.pdf - Workshop: ISWC 2025 WOP + HAIBRIDGE joint volume ## Priority **P2** — meaningful governance primitive that complements CIVeX (#32). Modest scope: extends existing SHACL machinery.