. . . . "Lists the non-approved role claims of a given space ref (space IRI + root definition): agents who hold a higher-tier role instantiation (admin/maintainer/member) that is NOT in the trust-validated current state, i.e. a self-assigned or otherwise ungranted claim awaiting approval by an equal-or-higher-tier member. Pass the ref's root nanopub (root_np). Observer-tier roles are excluded: they are self-assignable, so a self-declared observer needs no approval and is shown by list-space-observers instead. The higher-tier test is generic — the built-in admin property (gen:hasAdmin) OR a RoleDeclaration whose npa:hasRoleType is gen:AdminRole/gen:MaintainerRole/gen:MemberRole — but because the live spaces repo currently materialises every declaration as gen:ObserverRole, only admin claims are detectable today; maintainer/member claims appear automatically once real tier subclasses exist. Per (member, role) only the latest role-instantiation nanopub is returned (by dct:created). Also returns the claimed tier, the role IRI, and the role-assignment template (for the approve action, which re-asserts the same triple), plus a hidden agent_iri column the approve action maps into the template's agent placeholder." . . . "List space non-approved role claims (ref-scoped)" . . "prefix rdfs: \nprefix dct: \nprefix np: \nprefix npa: \nprefix npx: \nprefix gen: \nprefix schema: \n\nselect ?member\n (sample(?agentX) as ?agent_iri)\n (sample(?tierX) as ?tier)\n (sample(?rtmplX) as ?roleAssignmentTemplate)\n (strafter(max(concat(coalesce(str(?dateX),\"\"), \" \", str(?latestNp))), \" \") as ?np)\nwhere {\n {\n select ?member ?roleProp\n (max(?val0) as ?val)\n (strafter(max(concat(coalesce(str(?dateNp),\"\"), \" \", str(?grantNp))), \" \") as ?latestNp)\n (max(?dateNp) as ?dateX)\n (sample(?member) as ?agentX)\n (sample(?tier0) as ?tierX)\n (sample(?rtmpl0) as ?rtmplX)\n where {\n values ?_root_np_multi_iri {}\n graph npa:spacesGraph { ?ref npa:rootNanopub ?_root_np_multi_iri ; npa:spaceIri ?spaceIri . }\n graph npa:graph { npa:thisRepo npa:hasCurrentSpaceState ?g . }\n graph npa:spacesGraph {\n ?ri a gen:RoleInstantiation ; npa:forSpace ?spaceIri ; npa:forAgent ?member ; npa:viaNanopub ?grantNp ;\n (npa:regularProperty|npa:inverseProperty) ?roleProp .\n }\n bind(?roleProp = gen:hasAdmin as ?isAdminProp)\n bind(exists { graph npa:spacesGraph { ?rdA a npa:RoleDeclaration ; npa:hasRoleType gen:AdminRole ; (gen:hasRegularProperty|gen:hasInverseProperty) ?roleProp } } as ?isAdminDecl)\n bind(exists { graph npa:spacesGraph { ?rdM a npa:RoleDeclaration ; npa:hasRoleType gen:MaintainerRole ; (gen:hasRegularProperty|gen:hasInverseProperty) ?roleProp } } as ?isMaint)\n bind(exists { graph npa:spacesGraph { ?rdMe a npa:RoleDeclaration ; npa:hasRoleType gen:MemberRole ; (gen:hasRegularProperty|gen:hasInverseProperty) ?roleProp } } as ?isMemb)\n filter(?isAdminProp || ?isAdminDecl || ?isMaint || ?isMemb)\n filter not exists { graph npa:graph { ?invNp npx:invalidates ?grantNp . } }\n bind(if(exists { graph ?g { ?vri npa:forSpaceRef ?ref ; npa:forAgent ?member ; (npa:regularProperty|npa:inverseProperty) ?roleProp } }, 1, 0) as ?val0)\n optional { graph npa:graph { ?grantNp dct:created ?dateNp } }\n bind(if(?isAdminProp || ?isAdminDecl, \"Admin\", if(?isMaint, \"Maintainer\", \"Member\")) as ?tier0)\n bind(if(?isAdminProp, , ?undefTmpl) as ?rtmpl0)\n }\n group by ?member ?roleProp\n having (max(?val0) = 0)\n }\n}\ngroup by ?member\norder by ?member" . . "Tobias Kuhn" . "2026-06-16T14:39:09Z"^^ . . . . "RSA" . "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCwUtewGCpT5vIfXYE1bmf/Uqu1ojqnWdYxv+ySO80ul8Gu7m8KoyPAwuvaPj0lvPtHrg000qMmkxzKhYknEjq8v7EerxZNYp5B3/3+5ZpuWOYAs78UnQVjbHSmDdmryr4D4VvvNIiUmd0yxci47dTFUj4DvfHnGd6hVe5+goqdcwIDAQAB" . "nipu5BfXro8KfHO7Ons9pDj4L82ATixAKmdEdQCGSPAm7qHemkOFxkCuN+Wcly327uHxk+7YT/0hg0pXTS8sXqb+Q5X6f2s8pxsUAxeylYwv+Shszmq9ZOBbKQJevHyZlCrcqIiailNZyG71wJY5pC5BF6dYlm2oxsqZ92OZsF4=" . . .