Reject duty-only properties on non-Duty rules

[jgeluk]

Addresses #239.

This is intentionally stacked on #234 because the acceptance criteria require the Schedule model introduced there. Once #234 is merged, this branch can be rebased onto develop and the PR base changed.

Changes

• add regression tests for Permission and Prohibition misuse of every surviving duty-only property
• remove OWL domains that silently inferred an additional odrl:Duty type
• enforce Duty subject scope through fail-closed SHACL
• retain global rejection of obsolete dprod:recurrence
• verify generic dprod:schedule remains valid on non-Duty resources
• document SHACL as the enforceable source of Duty-only scope

Verification

• python -m unittest discover -s dprod-contracts/tests (48 tests)
• python -m unittest discover -s tests (2 tests)
• python dprod-contracts/validate.py
• python spec-generator/main.py
• git diff --check

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
dprod	Ready	Preview	Aug 19, 2026 5:11pm