coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: review Emergent orientation PDP boundary
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
Details
CI Smoke / container-smoke (push) Waiting to run
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a10238-7ecc-78e2-903d-075f50e913cc
This commit is contained in:
tegwick 2026-10-03 17:34:40 +02:00
parent 424f1e5009
commit d7f85a7dde
1 changed files with 29 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

29
docs/evidence/2026-10-03-emergent-profile-boundary-review.md Normal file
View file

@ -0,0 +1,29 @@
# EMERGENT-WP-0002: Access Engine scoped boundary review
Review date: 2026-10-03. Author: delegated Codex repository worker, using hub
identity `flex-auth` for this checkout. Disposition: accepts the reviewed access
mapping as non-normative orientation within Access Engine's existing boundary.
This is a scoped technical review, not human adoption or live authorization.
Knowledge 0.2.1; package digest d8ef41bacd2c6551ae3b87628004a5df6943928be1c93eb01e09efc6ad782767; emergent-security commit f9cba6fb35425f74e34401b1baf09f6057ace493.
The source-backed `access` retrieval returned `verified-files` using
`PYTHONPATH=src python3 -m emergent_security.knowledge --repositories /home/worsch show access --audience codex`.
That checks source files, not runtime service health. Reviewed adoption-review,
closure-attempt, operational-contracts and EMERGENT-DEC-2026-001.
| Concern | Disposition and owner contract |
| --- | --- |
| Reference versus PDP | Accept: offline AUTONOMOUS cannot authorize estate effects. Access Engine remains sole operational PDP (`INTENT.md`). No automatic policy compiler or reference decision cache is introduced. |
| Claims | Accept: principal, actor, runtime identity, tenant and authority context are owner-bound facts, not provider names or permission grants. Gate House authors ceilings; decision-relevant ceilings must be reconstructable claims or versioned policy. |
| Request binding | Accept: consumer replay compares `binding.submitted_request_digest`, not enriched `binding.request_digest`. Lifetime and authentic source are independent checks (`docs/canonical-request-digest.md`). |
| Approval | Accept: approval-engine owns the object/consume protocol. `approval_binding_digest` excludes the attached approval claim and is not replay identity. State Hub notes and informed-decision presentation are not runtime approvals. The deferred ActionAuthorization draft remains deferred. |
| Routes | Accept: POST /v1/check is the owner's decision entry; discovery through ops-warden routes to owners. Outage behavior is each PEP's published stance, not an agent-selected fallback. |
| Source authenticity | Qualified: Ed25519 signed and explicitly unsigned modes are implemented locally (FLEX-WP-0024-T03); stale unsigned-channel prose does not prove deployed signing. Verify the actual pin/key evidence before effects. No deployed verification was attempted. |
No owner policy, claims schema, service deployment or authority envelope changes.
Any future operational rule/claim mapping requires a separate exact policy and
negative fixtures in this owner; no such implementation is requested by this
orientation review. Existing deployment gates remain in their work records.
T02 can consume this limited technical acceptance; it does not close doctrine,
other-owner publication agreement, human adoption, provider continuity or fleet
assurance gates. Access Engine's historical `flex-auth` runtime identity remains.