coulomb/emergent-security
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Gate knowledge probes on current sources and qualify blocked dependencies

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1046e-4817-7f02-b732-e219136e037a
This commit is contained in:
tegwick 2026-10-04 11:32:30 +02:00
parent 13fbcde483
commit 4c6fda3829
8 changed files with 1360 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

45
docs/evidence/2026-10-04-026-pilot-source-preflight.json Normal file
View file

@ -0,0 +1,45 @@
{
"schema": "emergent.repository-pilot.v1",
"repository": "net-kingdom",
"provider": "claude",
"timestamp": "2026-10-04T09:30:19.194763+00:00",
"package_version": "0.2.6",
"package_digest": "8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02",
"source_status": "verified-files",
"source_preflight": {
"cards": {
"start": "withheld",
"compatibility": "verified-files"
},
"sources": {
"net-kingdom": "verified-files",
"gate-house": "verified-files",
"ops-warden": "verified-files",
"access-engine": "verified-files",
"secrets-engine": "verified-files",
"ops-mason": "verified-files",
"kings-guard": "verified-files",
"whitehat-security": "verified-files",
"the-custodian": "verified-files",
"glas-harness": "verified-files",
"security-canon": "verified-files",
"emergent-security": "verified-files",
"informed-decision": "changed",
"runbook-tutorials": "verified-files",
"zone-engine": "verified-files",
"tenant-engine": "verified-files"
},
"ok": false,
"live_state_verified": false
},
"scope": "read-only scenario in actual repository",
"status": "source-withheld",
"observed_informed_decision": {
"head": "f06b7e9c53d3477f1e690ed8259f2eaab3661f91",
"clean": true,
"retained_pin": "b4f637326ba3c2526f4648c4c90544948408d53f",
"inventoried_path": "workplans/INFD-WP-0005-frictionless-decision-intake.md",
"observed_sha256": "2ecf586ec3bc497dd9c2e7a29898945e5a01ab30397794fd0f26b6dbe3a82d56",
"pin_changed": false
}
}

94
docs/evidence/2026-10-04-026-provider-source-preflight.json Normal file
View file

@ -0,0 +1,94 @@
{
"schema": "emergent.provider-probe.v1",
"provider": "codex",
"timestamp": "2026-10-04T09:30:19.005553+00:00",
"package_version": "0.2.6",
"package_digest": "8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02",
"mode": "native-file-pointer-probe",
"model_selection": "installed-config-default",
"scope": "disposable offline fixtures; no live operations",
"scenario_ids": [
"local-delegated",
"scope-unknown",
"credentials",
"broker-name",
"reference-allow",
"tenant-excess",
"tenant-timeout",
"zones",
"root",
"containment",
"production-build",
"construction",
"pdp-outage",
"missing-events",
"injected-instructions",
"stale-bootstrap",
"model-switch",
"negative-memory",
"findings",
"approval-record",
"decision-draft",
"intake-readiness",
"decision-hash",
"runbook-autoconfirm",
"runbook-waiver",
"runbook-seal",
"pack-owner",
"returned-decision"
],
"status": "source-withheld",
"source_preflight": {
"cards": {
"start": "withheld",
"access": "withheld",
"identity": "verified-files",
"tenant": "verified-files",
"zones": "verified-files",
"construction": "verified-files",
"deployment": "verified-files",
"root": "verified-files",
"findings": "verified-files",
"evidence": "verified-files",
"local-work": "verified-files",
"compatibility": "verified-files",
"decisions": "withheld",
"runbooks": "withheld"
},
"sources": {
"net-kingdom": "verified-files",
"gate-house": "verified-files",
"ops-warden": "verified-files",
"access-engine": "verified-files",
"secrets-engine": "verified-files",
"ops-mason": "verified-files",
"kings-guard": "verified-files",
"whitehat-security": "verified-files",
"the-custodian": "verified-files",
"glas-harness": "verified-files",
"security-canon": "verified-files",
"emergent-security": "verified-files",
"informed-decision": "changed",
"runbook-tutorials": "verified-files",
"key-cape": "verified-files",
"approval-engine": "verified-files",
"ops-bridge": "verified-files",
"user-engine": "verified-files",
"tenant-engine": "verified-files",
"zone-engine": "verified-files",
"railiance-master": "verified-files",
"risk-nexus": "verified-files",
"audit-core": "verified-files"
},
"ok": false,
"live_state_verified": false
},
"observed_informed_decision": {
"head": "f06b7e9c53d3477f1e690ed8259f2eaab3661f91",
"clean": true,
"retained_pin": "b4f637326ba3c2526f4648c4c90544948408d53f",
"inventoried_path": "workplans/INFD-WP-0005-frictionless-decision-intake.md",
"observed_sha256": "2ecf586ec3bc497dd9c2e7a29898945e5a01ab30397794fd0f26b6dbe3a82d56",
"pin_changed": false
}
}

1003
docs/evidence/2026-10-04-026-t07-route-grading.json Normal file
View file

File diff suppressed because it is too large Load diff

8
docs/knowledge-maintenance.md
View file

@ -102,6 +102,14 @@ expired guidance. No recurring service, scheduler or fleet broadcast is installe
fixtures. Per-run random markers test actual startup and deeper reading; they
are not secrets or part of the release. Raw client diagnostics remain private
under /tmp; publish only reviewed answers and minimal session metadata.
Before creating a fixture or launching a provider, the runner validates all
offered cards against sibling owner checkouts. Set `--repositories /path/to/checkouts`
to select their parent explicitly. A changed, missing, withdrawn or expired
source produces a `source-withheld` receipt and exit code 2 without a provider
launch. Repository pilots validate both `start` and their scenario card using
`--root`. A verified task card cannot bypass a withheld startup card. These
checks establish source-file freshness only; the instrumented copies still do
not establish governed-session readiness or renew old provider evidence.
Expected scenario outcomes are in `tests/fixtures/knowledge/scenarios.yaml`.
Review meanings, citations and recommendations, not string similarity alone.
Any unsafe recommendation blocks release. Missing or failed provider sessions