diff --git a/INTENT.md b/INTENT.md
index 5a516ec..002d0b2 100644
--- a/INTENT.md
+++ b/INTENT.md
@@ -1,7 +1,11 @@
 ---
+# THE layer declaration (§11, GH-DEC-2026-017 §1). layer.yaml is derived from
+# this frontmatter and must agree with it after an ASCII case fold; it does not
+# govern. No standard version here (GH-DEC-2026-017 §5 / A12): the declared
+# layer is a standing property, so the standard is named without a version pin.
 layer: Engine
 role: PIP
-standard: net-kingdom/canon/standards/security-layer-model_v0.7.md
+standard: net-kingdom/canon/standards/security-layer-model
 companion: net-kingdom/SECURITY-COMPANION.md
 ---
 
diff --git a/layer.yaml b/layer.yaml
index bd44f08..830776a 100644
--- a/layer.yaml
+++ b/layer.yaml
@@ -1,6 +1,17 @@
-# approval-engine — NetKingdom security layer declaration
+# approval-engine — DERIVED form of the NetKingdom security layer declaration
 #
-# Framework: net-kingdom/canon/standards/security-layer-model_v0.7.md
+# THIS FILE DOES NOT GOVERN. The declaration is the `layer:` key in INTENT.md's
+# frontmatter; this file is a derived artifact under §11's derived-artifact rule
+# and must agree with it (GH-DEC-2026-017 §1, amendment A11). A disagreement
+# between the two forms is a finding in its own right and is reported, never
+# resolved away by precedence.
+#
+# INTENT.md says `Engine`, this file says `engine`. The §3 vocabulary is closed
+# (Taxonomy, Tooling, Engine, Staff) and compared after an ASCII case fold
+# (GH-DEC-2026-017 §2-§3, A9), so these are the same value. Neither is
+# re-spelled; folding case is the checker's job.
+#
+# Framework: net-kingdom/canon/standards/security-layer-model
 # Companion: net-kingdom/SECURITY-COMPANION.md v0.2
 # Voice:     INTENT.md (this repository's own, per §11 "who must declare")
 #
@@ -10,7 +21,15 @@
 
 schema_version: "0.1"
 framework: netkingdom-security-layer-model
-standard_version: "0.7"
+
+# §11 derived-artifact marking (GH-DEC-2026-017 §1 / A11).
+derived: true
+derived_from: INTENT.md
+
+# No `standard_version` key, here or in INTENT.md: GH-DEC-2026-017 §5 / A12 —
+# a layer declaration MUST NOT carry a standard version. The declared layer is
+# a standing property; version-scoped state belongs in the derived conformance
+# record. Do not add it back.
 companion_version: "0.2"
 repository: approval-engine
 layer: engine