emergent-security/SCOPE.md

# SCOPE

> Repository boundary reviewed 2026-10-03. See `INTENT.md` for purpose and
> `workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md`
> for the active ecosystem integration.

## One-liner

Security governance canon, reference decisions, and source-backed NetKingdom security knowledge for coding agents.

## Core Idea

Delegate understood decisions within explicit envelopes, escalate unresolved
decisions without widening privilege, and keep root human-controlled.

## In Scope

- Maintain the versioned canon, agent extract, YAML envelopes and risk scales.
- Maintain the pure Python reference evaluator and decision/governance fixtures.
- Publish source-backed agent knowledge and explicit mappings to existing
  NetKingdom owners under EMERGENT-WP-0002.

## Out of Scope

- Operate a second estate authorization decision point or credential broker.
- Take over another repository's canon, operational routes, or enforcement.
- Treat reference decisions or knowledge loading as operational authority.

## Current State

- Canon and reference package: v0.8; Python 3.11+, PyYAML, pytest.
- Knowledge package: v0.1.1 pilot; 12 cards, 23 owners, 55 pinned sources,
  read-only retrieval CLI, sealed exports and provider adapters.
- Verification: 325 tests pass in the checkout and built source distribution.
- Thin pointers installed in four pilot repositories; fresh Codex/Claude scenario
  evidence is retained. Grok retrieval is proven; corrected routing validation
  timed out. Independent review, actual compaction/resume and broader adoption
  remain live tasks in EMERGENT-WP-0002.
- No running service, credential issuer or runtime enforcement is provided.

## Getting Oriented

- Start with: INTENT.md
- Agent instructions: AGENTS.md
- Workplans: workplans/