From d7f85a7dde28a120a635b748aa64805a2f7fdf84 Mon Sep 17 00:00:00 2001 From: tegwick Date: Sat, 3 Oct 2026 17:34:40 +0200 Subject: [PATCH] docs: review Emergent orientation PDP boundary Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10238-7ecc-78e2-903d-075f50e913cc --- ...-10-03-emergent-profile-boundary-review.md | 29 +++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 docs/evidence/2026-10-03-emergent-profile-boundary-review.md diff --git a/docs/evidence/2026-10-03-emergent-profile-boundary-review.md b/docs/evidence/2026-10-03-emergent-profile-boundary-review.md new file mode 100644 index 0000000..a6c79a0 --- /dev/null +++ b/docs/evidence/2026-10-03-emergent-profile-boundary-review.md @@ -0,0 +1,29 @@ +# EMERGENT-WP-0002: Access Engine scoped boundary review + +Review date: 2026-10-03. Author: delegated Codex repository worker, using hub +identity `flex-auth` for this checkout. Disposition: accepts the reviewed access +mapping as non-normative orientation within Access Engine's existing boundary. +This is a scoped technical review, not human adoption or live authorization. + +Knowledge 0.2.1; package digest d8ef41bacd2c6551ae3b87628004a5df6943928be1c93eb01e09efc6ad782767; emergent-security commit f9cba6fb35425f74e34401b1baf09f6057ace493. +The source-backed `access` retrieval returned `verified-files` using +`PYTHONPATH=src python3 -m emergent_security.knowledge --repositories /home/worsch show access --audience codex`. +That checks source files, not runtime service health. Reviewed adoption-review, +closure-attempt, operational-contracts and EMERGENT-DEC-2026-001. + +| Concern | Disposition and owner contract | +| --- | --- | +| Reference versus PDP | Accept: offline AUTONOMOUS cannot authorize estate effects. Access Engine remains sole operational PDP (`INTENT.md`). No automatic policy compiler or reference decision cache is introduced. | +| Claims | Accept: principal, actor, runtime identity, tenant and authority context are owner-bound facts, not provider names or permission grants. Gate House authors ceilings; decision-relevant ceilings must be reconstructable claims or versioned policy. | +| Request binding | Accept: consumer replay compares `binding.submitted_request_digest`, not enriched `binding.request_digest`. Lifetime and authentic source are independent checks (`docs/canonical-request-digest.md`). | +| Approval | Accept: approval-engine owns the object/consume protocol. `approval_binding_digest` excludes the attached approval claim and is not replay identity. State Hub notes and informed-decision presentation are not runtime approvals. The deferred ActionAuthorization draft remains deferred. | +| Routes | Accept: POST /v1/check is the owner's decision entry; discovery through ops-warden routes to owners. Outage behavior is each PEP's published stance, not an agent-selected fallback. | +| Source authenticity | Qualified: Ed25519 signed and explicitly unsigned modes are implemented locally (FLEX-WP-0024-T03); stale unsigned-channel prose does not prove deployed signing. Verify the actual pin/key evidence before effects. No deployed verification was attempted. | + +No owner policy, claims schema, service deployment or authority envelope changes. +Any future operational rule/claim mapping requires a separate exact policy and +negative fixtures in this owner; no such implementation is requested by this +orientation review. Existing deployment gates remain in their work records. +T02 can consume this limited technical acceptance; it does not close doctrine, +other-owner publication agreement, human adoption, provider continuity or fleet +assurance gates. Access Engine's historical `flex-auth` runtime identity remains.