coulomb/emergent-security
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record owner slices that leave EMERGENT-WP-0002 blocked

Browse source 
risk-nexus kept RISK-F-0015 open after the 0.2.4 probes. audit-core
registered the posed-memo class locally, and state-hub added a dev
forwarding fixture. Neither deploys a listener or a submitter.

Assistant: grok
Assistant-Session: 01a10286-9185-7bb2-b411-89cf6ab4c0c6
This commit is contained in:
tegwick 2026-10-03 21:59:21 +02:00
parent 54240a6670
commit 4c11caa1aa
2 changed files with 31 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/decision-runbook-integration.md
View file

@ -83,7 +83,7 @@ historical; it is not silently relabeled as evidence for 0.2.0.
| Dependency | Current evidence and next step | Live work record |
| --- | --- | --- |
| Automated memo submission | An offline intake service, schema-3 ledger, and durable outbox exist. Registries are empty and transports are injected. Listener deployment, workload custody, admission, and live rollout remain blocked. A creating approval without a retained receipt is not retried. Keep the local draft ready and use the attended route when submission is authorized. Do not mint a submitter grant. | INFD-WP-0005 T05–T08 and T10; EMERGENT-WP-0002 T02/T09 |
| Automated memo submission | An offline intake service, schema-3 ledger, and durable outbox exist. Registries are empty and transports are injected. audit-core `70e4044` registers `informed-decision.memo.posed` locally and is not deployed. state-hub `49eeddb` adds a dev forwarding fixture and a deduplicated notification; no live submitter is registered and the write-back flag stays unset. Listener deployment, workload custody, admission activation, and live rollout remain blocked. A creating approval without a retained receipt is not retried. Keep the local draft ready and use the attended route when submission is authorized. Do not mint a submitter grant. | INFD-WP-0005 T05–T08 and T10; EMERGENT-WP-0002 T02/T09 |
| Profile adoption | Owner review must decide accuracy/publication, class/group and the exact submission path. Drafting is already authorized; no human answer or owner assent has been fabricated. | Decision `d20a9750-2b29-534e-8227-fb866581a6ca`; EMERGENT-WP-0002 T02 |
| Engine execution/index | Automatic step execution, estate index and inter-pack dependencies remain deliberately deferred. Use explicit owner pack paths. No need to implement these to use the preparation pack. | RBT-WP-0006; existing decision `1e517449-2114-4a8f-9c6b-fcdbe977378e` |
| Runtime enforcement bridge | Pack actor/privilege/authorized_by fields and local waivers are not authenticated owner facts. No external approval/PDP gate plugin is claimed. Future execution requires an exact owner design, not a generic `approved: true` field. | EMERGENT-WP-0002 T06 mapping; RBT-WP-0006 T01/T06 |

30
workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md
View file

@ -700,3 +700,33 @@ Context compaction was not exercised. Claude's autocompact floor is 100k
tokens, and these sessions stayed below it. No governed harness session was
available. T05 stays **wait**. T02, T07, T08, T09, and T10 stay **wait**. The
plan stays **blocked**. No DoD-Ok is claimed.
## Owner slices for the open gates — 2026-10-03
No subagent was started in glas-harness, sand-boxer, secrets-engine, or
the-custodian. GLAS-WP-0012, SAND-WP-0014-T05, and SECRETS-WP-0009-T03 still
wait on a separately authorized runtime retry, recipient pins, and the held
EUR 10 reconciliation. No credential was read and no paid provider call was made.
CUST-WP-0073-T02 stays behind that proof.
risk-nexus reviewed RISK-F-0015 against the sealed 0.2.4 probes and kept the
finding open (`30182ec`). Claude zones now names zone-engine and denies a live
API. model-switch names delegator rather than the fixture route session-owner,
and EMERGENT-WP-0002-T07 has not accepted the evidence. This is not a Whitehat
retest.
audit-core `70e4044` registers `informed-decision.memo.posed` for
`tenant:platform` on the existing sender (AUDIT-WP-0011). The body is withheld
on packet, brief, or secret-shaped content. The sink is not connected and the
registration is not deployed.
state-hub `49eeddb` adds a dev-only forwarding fixture and a notification
limited to id, question, class, and submitter. No service account was admitted,
no live submitter was registered, and the write-back flag stays unset.
The access-engine attribute branch was still an uncommitted working tree when
this note was written. It is not admission and it is not deployed.
T02, T05, T07, T08, T09, and T10 stay **wait**. The plan stays **blocked**.
No DoD-Ok is claimed.