Artifacts & datasets

Ground truth documents, IoI rules, instantiators, and templates available at github.com/ioi-framework/ioi-framework.

Repository structure

ioi-framework/
├── CASES/
│   ├── AF-002/
│   │   ├── snippets/             # JSON-LD test graphs + sample data
│   │   ├── ground_truth.md
│   │   ├── mapping.md
│   │   └── README.md
│   └── AF-012/  ...
│
├── instantiators/
│   ├── mft_instantiator.py
│   ├── usn_instantiator.py
│   ├── lnk_instantiator.py
│   ├── evtx_instantiator.py
│   ├── history_instantiator.py
│   ├── office_xml_instantiator.py
│   └── templates/
│       ├── mft/  usn/  lnk/  evtx/  browser_history/  office_xml/
│
├── RULES/
│   ├── semantic/  structural/  temporal/
│
├── registry.json                 # Single source of truth for artifact metadata
├── SCRIPTS/
│   ├── convert_to_ntriples.py
│   └── export_chrome_history.py  # Manual Chrome History SQLite → framework JSON
├── scripts/
│   ├── validate_registry.py
│   ├── validate_sparql.py
│   └── validate_jsonld.py
├── playground/
└── ontologies/
    └── ioi-ext.ttl

What each folder contains

CASES/

Scenario datasets

Artifact exports (CSV/JSON) for all five scenarios, instantiated JSON-LD knowledge graphs ready for loading into Virtuoso, and per-scenario ground truth documents.

instantiators/templates/

CASE/UCO templates

Case-agnostic JSON-LD templates defining the facet structures referenced by IoI rules. They now live under `instantiators/templates/` and serve as the starting point for new instantiators and artifact types.

instantiators/

Template Instantiators

Python scripts that map artifact-specific parser output to CASE/UCO template structures, producing case-specific JSON-LD graphs for each scenario. This now includes the browser-history flow plus a manual Chrome History SQLite exporter under SCRIPTS/.

RULES/

IoI SPARQL rules

All five IoI signatures as .rq files, organised by category (semantic, structural, temporal). Substitute named graph IRIs and execute via isql or any SPARQL 1.1 endpoint.

CASES/*/ground_truth.md

Ground-truth documents

Per-scenario specifications describing affected artifacts, expected invariants, and violation predicates as pseudo-query logic — the human-readable counterpart to each IoI rule.

ontologies/

ioi-ext ontology

Turtle definitions for the ioi-ext: namespace, covering artifact-specific properties not expressible in the core CASE/UCO vocabulary (e.g., MFT entry numbers, USN update reasons, LNK target metadata).

Per-scenario artifact summary

Case	Artifacts	Total triples	JSON-LD graphs	Ground truth	Reproducibility bundle
AF-002	$MFT, $UsnJrnl, Chrome History	24,042,852	3	ground_truth.md ↗	Zenodo DOI ↗
AF-004	$MFT, $UsnJrnl	21,004,830	2	ground_truth.md ↗	Zenodo DOI ↗
AF-007	Security.evtx, $UsnJrnl	5,922,784	2	ground_truth.md ↗	Zenodo DOI ↗
AF-011	LNK, $MFT	18,385,659	2	ground_truth.md ↗	Zenodo DOI ↗
AF-012	Office core.xml, $MFT	18,383,783	2	ground_truth.md ↗	Zenodo DOI ↗

Repository. Ground truth documents, IoI rules, instantiators, and templates are publicly available at github.com/ioi-framework/ioi-framework. See the Executing Rules page for setup and execution instructions, including the manual Chrome History SQLite export path. Published per-case reproducibility bundles will appear in the table above as they become available.