emergent-security/docs/netkingdom-integration-map.md

# NetKingdom integration map

Reviewed 2026-10-03. Source-document review only; no live health or owner assent is inferred.
All references are pinned; `knowledge/sources.yaml` also records file hashes and review dates.

| Owner | Role | Sources |
| --- | --- | --- |
| net-kingdom | canon-publication | [SECURITY-COMPANION.md](https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/89cdcae051dacae27eb1caf0dbb3e4a0b1c5b6ce/SECURITY-COMPANION.md); [canon/standards/security-layer-model_v0.7.md](https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/89cdcae051dacae27eb1caf0dbb3e4a0b1c5b6ce/canon/standards/security-layer-model_v0.7.md); [docs/secrets-engine-security-infrastructure-boundary.md](https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/89cdcae051dacae27eb1caf0dbb3e4a0b1c5b6ce/docs/secrets-engine-security-infrastructure-boundary.md) |
| gate-house | doctrine | [INTENT.md](https://forgejo.coulomb.social/coulomb/gate-house/src/commit/6f80ba860453416f44b83ff2709ee21b6e89e456/INTENT.md); [docs/contracts/authority-context.md](https://forgejo.coulomb.social/coulomb/gate-house/src/commit/6f80ba860453416f44b83ff2709ee21b6e89e456/docs/contracts/authority-context.md) |
| ops-warden | routing-and-ssh | [INTENT.md](https://forgejo.coulomb.social/coulomb/ops-warden/src/commit/f1e25c328a4456120985b28d9f5ffa802eddb036/INTENT.md); [wiki/AccessRouting.md](https://forgejo.coulomb.social/coulomb/ops-warden/src/commit/f1e25c328a4456120985b28d9f5ffa802eddb036/wiki/AccessRouting.md); [wiki/NetKingdomSecurityMap.md](https://forgejo.coulomb.social/coulomb/ops-warden/src/commit/f1e25c328a4456120985b28d9f5ffa802eddb036/wiki/NetKingdomSecurityMap.md) |
| ops-mason | construction | [INTENT.md](https://forgejo.coulomb.social/coulomb/ops-mason/src/commit/20eef043ed93bc152f5096b45d8aa9cb241ec002/INTENT.md); [docs/kubernetes-plane.md](https://forgejo.coulomb.social/coulomb/ops-mason/src/commit/20eef043ed93bc152f5096b45d8aa9cb241ec002/docs/kubernetes-plane.md) |
| access-engine | PDP | [INTENT.md](https://forgejo.coulomb.social/coulomb/access-engine/src/commit/424f1e500962470bfbe6f5ac4200ce200ecdb73e/INTENT.md); [docs/decision-record-contract.md](https://forgejo.coulomb.social/coulomb/access-engine/src/commit/424f1e500962470bfbe6f5ac4200ce200ecdb73e/docs/decision-record-contract.md); [docs/canonical-request-digest.md](https://forgejo.coulomb.social/coulomb/access-engine/src/commit/424f1e500962470bfbe6f5ac4200ce200ecdb73e/docs/canonical-request-digest.md); [docs/action-bound-authorization-contract.md](https://forgejo.coulomb.social/coulomb/access-engine/src/commit/424f1e500962470bfbe6f5ac4200ce200ecdb73e/docs/action-bound-authorization-contract.md) |
| security-canon | authority-vocabulary | [README.md](https://forgejo.coulomb.social/coulomb/security-canon/src/commit/bbd44332543e1cc40b2ebed10ec06123b9c798ea/README.md); [docs/vocabulary-card.md](https://forgejo.coulomb.social/coulomb/security-canon/src/commit/bbd44332543e1cc40b2ebed10ec06123b9c798ea/docs/vocabulary-card.md); [docs/adr-001-securitycanon-boundary.md](https://forgejo.coulomb.social/coulomb/security-canon/src/commit/bbd44332543e1cc40b2ebed10ec06123b9c798ea/docs/adr-001-securitycanon-boundary.md) |
| user-engine | identity-facts | [INTENT.md](https://forgejo.coulomb.social/coulomb/user-engine/src/commit/44ed6d58604fd0b3c31d29a00496e9c97dabbbac/INTENT.md); [docs/contracts.md](https://forgejo.coulomb.social/coulomb/user-engine/src/commit/44ed6d58604fd0b3c31d29a00496e9c97dabbbac/docs/contracts.md) |
| tenant-engine | tenant-facts | [SCOPE.md](https://forgejo.coulomb.social/coulomb/tenant-engine/src/commit/4f7fd114089f7f41cf5459a8e0caf51a3c31f4fd/SCOPE.md); [docs/tenant-guardrail-policy.md](https://forgejo.coulomb.social/coulomb/tenant-engine/src/commit/4f7fd114089f7f41cf5459a8e0caf51a3c31f4fd/docs/tenant-guardrail-policy.md); [docs/flex-auth-integration.md](https://forgejo.coulomb.social/coulomb/tenant-engine/src/commit/4f7fd114089f7f41cf5459a8e0caf51a3c31f4fd/docs/flex-auth-integration.md) |
| zone-engine | offline-zone-conformance | [SCOPE.md](https://forgejo.coulomb.social/coulomb/zone-engine/src/commit/407fa86b97ea8f76f4af8967be33c7402bc56707/SCOPE.md); [docs/pip-claim-boundary.md](https://forgejo.coulomb.social/coulomb/zone-engine/src/commit/407fa86b97ea8f76f4af8967be33c7402bc56707/docs/pip-claim-boundary.md) |
| whitehat-security | adversarial-evidence | [INTENT.md](https://forgejo.coulomb.social/coulomb/whitehat-security/src/commit/b5cc6706b95a7e639a89429aee1a4f4a4ead405f/INTENT.md); [docs/rules-of-engagement.md](https://forgejo.coulomb.social/coulomb/whitehat-security/src/commit/b5cc6706b95a7e639a89429aee1a4f4a4ead405f/docs/rules-of-engagement.md) |
| kings-guard | posture-proposals | [INTENT.md](https://forgejo.coulomb.social/coulomb/kings-guard/src/commit/200fd17ab3b06e4c2c52d8cacb17a33d4dbc822d/INTENT.md); [README.md](https://forgejo.coulomb.social/coulomb/kings-guard/src/commit/200fd17ab3b06e4c2c52d8cacb17a33d4dbc822d/README.md); [docs/AdjacentSystemBoundary.md](https://forgejo.coulomb.social/coulomb/kings-guard/src/commit/200fd17ab3b06e4c2c52d8cacb17a33d4dbc822d/docs/AdjacentSystemBoundary.md) |
| secrets-engine | credential-lifecycle | [README.md](https://forgejo.coulomb.social/coulomb/secrets-engine/src/commit/3149654609d0c738d05002d2ca08e40e774bbb30/README.md); [docs/ops-warden-routing-contract.md](https://forgejo.coulomb.social/coulomb/secrets-engine/src/commit/3149654609d0c738d05002d2ca08e40e774bbb30/docs/ops-warden-routing-contract.md); [docs/approval-consumption.md](https://forgejo.coulomb.social/coulomb/secrets-engine/src/commit/3149654609d0c738d05002d2ca08e40e774bbb30/docs/approval-consumption.md) |
| key-cape | authentication | [README.md](https://forgejo.coulomb.social/coulomb/key-cape/src/commit/672e1faf4b3401ff7bf68bb0b29f8dc50ca51ac6/README.md); [INTENT.md](https://forgejo.coulomb.social/coulomb/key-cape/src/commit/672e1faf4b3401ff7bf68bb0b29f8dc50ca51ac6/INTENT.md) |
| approval-engine | approval-facts | [README.md](https://forgejo.coulomb.social/coulomb/approval-engine/src/commit/901d569757db967a7a595b3d87953b507f002c05/README.md); [docs/approval-claim.md](https://forgejo.coulomb.social/coulomb/approval-engine/src/commit/901d569757db967a7a595b3d87953b507f002c05/docs/approval-claim.md); [docs/approval-consumption.md](https://forgejo.coulomb.social/coulomb/approval-engine/src/commit/901d569757db967a7a595b3d87953b507f002c05/docs/approval-consumption.md) |
| informed-decision | pep-shaped | [README.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/README.md); [INTENT.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/INTENT.md); [SCOPE.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/SCOPE.md) |
| runbook-tutorials | guided-procedures | [INTENT.md](https://forgejo.coulomb.social/coulomb/runbook-tutorials/src/commit/df97fadf5decfcdb5c3c6ab90211226335ffdf8e/INTENT.md); [SCOPE.md](https://forgejo.coulomb.social/coulomb/runbook-tutorials/src/commit/df97fadf5decfcdb5c3c6ab90211226335ffdf8e/SCOPE.md); [docs/pack-spec-v0.2.md](https://forgejo.coulomb.social/coulomb/runbook-tutorials/src/commit/df97fadf5decfcdb5c3c6ab90211226335ffdf8e/docs/pack-spec-v0.2.md) |
| audit-core | evidence-custody | [README.md](https://forgejo.coulomb.social/coulomb/audit-core/src/commit/fdca5758e16f4eb3e0bbb9e281cf9e5bb5ad7063/README.md); [docs/audit-backend-contract.md](https://forgejo.coulomb.social/coulomb/audit-core/src/commit/fdca5758e16f4eb3e0bbb9e281cf9e5bb5ad7063/docs/audit-backend-contract.md) |
| risk-nexus | findings | [README.md](https://forgejo.coulomb.social/coulomb/risk-nexus/src/commit/0b3cfb81c65221477f17c05d0916902f690d4427/README.md); [findings/README.md](https://forgejo.coulomb.social/coulomb/risk-nexus/src/commit/0b3cfb81c65221477f17c05d0916902f690d4427/findings/README.md) |
| info-tech-canon | shared-semantics | [README.md](https://forgejo.coulomb.social/coulomb/info-tech-canon/src/commit/b30c831b387b11b41b2a4206e516fac65b84c29f/README.md) |
| ops-bridge | transport | [README.txt](https://forgejo.coulomb.social/coulomb/ops-bridge/src/commit/190ef1e188e12c606f1359325fd9fdd1dbef29e2/README.txt); [INTENT.md](https://forgejo.coulomb.social/coulomb/ops-bridge/src/commit/190ef1e188e12c606f1359325fd9fdd1dbef29e2/INTENT.md) |
| railiance-master | workload-operations | [README.md](https://forgejo.coulomb.social/coulomb/railiance-master/src/commit/a61b31396f0936ddd302b27a5222046240e413b2/README.md); [INTENT.md](https://forgejo.coulomb.social/coulomb/railiance-master/src/commit/a61b31396f0936ddd302b27a5222046240e413b2/INTENT.md) |
| glas-harness | session-execution | [README.md](https://forgejo.coulomb.social/coulomb/glas-harness/src/commit/5ce4f38aedfd27cc783131f18480df02e2951514/README.md); [docs/harness-contract.md](https://forgejo.coulomb.social/coulomb/glas-harness/src/commit/5ce4f38aedfd27cc783131f18480df02e2951514/docs/harness-contract.md); [docs/execution-profiles.md](https://forgejo.coulomb.social/coulomb/glas-harness/src/commit/5ce4f38aedfd27cc783131f18480df02e2951514/docs/execution-profiles.md) |
| the-custodian | estate-orientation | [docs/agent-environment-orientation.md](https://forgejo.coulomb.social/coulomb/the-custodian/src/commit/f303bdaff1a7f3f2305a375a3b5870cb0262e70c/docs/agent-environment-orientation.md); [docs/agent-autonomy-decision.md](https://forgejo.coulomb.social/coulomb/the-custodian/src/commit/f303bdaff1a7f3f2305a375a3b5870cb0262e70c/docs/agent-autonomy-decision.md); [docs/security-close-down-checklist.md](https://forgejo.coulomb.social/coulomb/the-custodian/src/commit/f303bdaff1a7f3f2305a375a3b5870cb0262e70c/docs/security-close-down-checklist.md) |
| emergent-security | offline-reference | [specs/emergent-security-0.8.md](https://forgejo.coulomb.social/coulomb/emergent-security/src/commit/caa7da2397ff860dba4de2824da998ed8c045ef2/specs/emergent-security-0.8.md); [envelopes/default-envelope.yaml](https://forgejo.coulomb.social/coulomb/emergent-security/src/commit/caa7da2397ff860dba4de2824da998ed8c045ef2/envelopes/default-envelope.yaml) |

## Capability findings and dependencies

- zone-engine remains offline conformance; its live API is intentionally absent (ZONE-WP-0002), not a deployment to invent.
- kings-guard offers observation/posture scaffolding and a real-event input pilot; continuous production observation is unverified and containment is proposal-only.
- ops-mason declares its founder-approved structure-only plan exception. Do not advertise it as consulting access-engine.
- tenant-engine SCOPE contains old gaps beside newer shipped entries. TEN-WP-0012 tracks outstanding external custody/canon dependencies; treat runtime readiness separately.
- access-engine decision-record documentation contains old unsigned-channel prose beside newer signature fields; actual consumer authentication/enforcement requires current owner proof.
- the-custodian CUST-WP-0073 tracks agent credential separation. Loading this knowledge does not close that work.
- glas-harness GLAS-WP-0008 is finished: operational readiness is separate from profile selection. GLAS-WP-0012 owns remaining runtime/provider acceptance and continuity proof; blocked/unverified profiles remain so.
- gate-house GH-WP-0004 holds layer-declaration work. This repo declares its own boundary; it does not declare conformance on behalf of another owner.
- OpenBao is referenced through secrets-engine and the net-kingdom infrastructure boundary; it is not a new repository or credential route owned here.

## Interpretation

Use `docs/operational-contracts.md` for the request/evidence seams and
`docs/decisions/EMERGENT-DEC-2026-001-integration-profile.md` for compatibility
dispositions. The knowledge cards cite their sources via the retrieval receipt.
Owner documents, reference fixtures, deployed state, and independent evidence
are different kinds of claims. Only the first two were inspected for this inventory.
No outside repository was modified by generating this map.

The detailed decision/procedure integration is in `docs/decision-runbook-integration.md`.
INFD-WP-0005 has an offline intake service with empty registries. Its live
listener, custody, admission, and rollout remain that owner's blocked work.
Runbook execution and index (RBT-WP-0006) likewise remain owner work. This
package creates neither capability.