coulomb/emergent-security
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record the unratified G1-G12 compatibility matrix.

Browse source 
Assistant: grok
Assistant-Session: 01a10286-9185-7bb2-b411-89cf6ab4c0c6
This commit is contained in:
tegwick 2026-10-04 02:26:54 +02:00
parent e229bb54e3
commit e25faf02d9
5 changed files with 59 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

6
docs/adoption-review.md
View file

@ -8,9 +8,11 @@ package for its remaining gates; it is not an approval or a completed rollout.
Requested reviewers: gate-house, net-kingdom, access-engine, security-canon;
tenant/zone/credential/observation owners for their respective mappings.
Review `docs/decisions/EMERGENT-DEC-2026-001-integration-profile.md`,
Review `docs/decisions/compatibility-matrix-2026-10-04.md`,
`docs/decisions/EMERGENT-DEC-2026-001-integration-profile.md`,
`docs/operational-contracts.md`, `docs/netkingdom-integration-map.md`, and the
14 cards. Decide whether these are an accurate orientation profile of current
14 cards. The matrix records the founder's 0.2.6 orientation acceptance and
leaves every G1–G12 row unratified. Decide whether these are an accurate orientation profile of current
owner boundaries and where the profile should be published/linked long term.
Specifically settle the reference-evaluator boundary, historical Gate-House
broker label, unavailable containment, build-mode limits and orthogonal scope

4
docs/decisions/EMERGENT-DEC-2026-001-integration-profile.md
View file

@ -34,6 +34,8 @@ must not be injected as live operational procedures. Code and envelope semantics
are unchanged, so existing policy fixtures continue to express the same model.
Sources: `knowledge/sources.yaml`, `knowledge/cards/compatibility.md`, and the
owner contracts linked in `docs/netkingdom-integration-map.md`.
owner contracts linked in `docs/netkingdom-integration-map.md`. The rule map is
`docs/decisions/compatibility-matrix-2026-10-04.md`. Its rows are local and
unratified.
Statehub adoption decision: `d20a9750-2b29-534e-8227-fb866581a6ca` stays open. The packet resolves never, so this acceptance does not close it. The founder accepted informed-decision memo `emergent-profile-adoption-0-2-6` at `2026-10-04T00:16:08Z` as non-normative orientation of knowledge 0.2.6. Evidence: `informed-decision/docs/evidence/2026-10-04-emergent-profile-acceptance.json`. That answer is not cross-owner approval.

40
docs/decisions/compatibility-matrix-2026-10-04.md Normal file
View file

@ -0,0 +1,40 @@
# Compatibility matrix — 2026-10-04
Version: `emergent.compatibility-matrix.v1`. Status: local map, owner
ratification open. This file does not amend owner contracts, reseal knowledge
0.2.6, or close EMERGENT-WP-0002.
The founder accepted knowledge 0.2.6, digest
`8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02`, as
non-normative orientation on 2026-10-04T00:16:08Z. Hub decision
`d20a9750-2b29-534e-8227-fb866581a6ca` stays open because that packet resolves
never. Source pins are `knowledge/sources.yaml`, verified 2026-10-03 as
documents. The sealed profile still pins informed-decision at `b4f6373`; that
checkout has since moved, and this matrix does not treat the moved tree as a
new sealed pin.
Rows map each generic rule in `specs/emergent-security-0.8.md` G1–G12 to an
estate route, the evidence that route requires, and the gap that blocks
normative distribution. Operational seams stay in
`docs/operational-contracts.md`. Local dispositions stay in
`EMERGENT-DEC-2026-001`.
| Rule | Local disposition | Estate route | Evidence before a protected effect | Open gap |
| --- | --- | --- | --- | --- |
| G1 Authority hierarchy | L0–L4 is reference scope vocabulary. A level is not a privilege rank. | security-canon vocabulary; gate-house doctrine. | Owner mapping of each level to an estate claim or an explicit non-mapping. | Security-canon and gate-house have not ratified the mapping. |
| G2 Trust | Identity, decision, and outcome trust stay separate. Trust is not global and not transitive. | key-cape and user-engine for identity claims; access-engine for a decision; the effect owner for outcome evidence. | Authenticated identity, an access-engine DecisionEnvelope, and the owner's effect evidence. | No estate trust product is declared by this package. |
| G3 Decision-class maturity | D0–D4 describes who decides a class. Meeting a reference checklist does not create a delegation. | informed-decision for a human answer; access-engine for a policy decision inside an admitted policy. | The class owner's envelope, tests, and recall conditions. | No decision-class registry is adopted. |
| G4 Temperature | Temperature is local change cost. It is separate from zone identity, tenant, and runtime environment. | zone-engine offline conformance for an explicit membership declaration. | Declaration, manifest or profile, and source lineage. | No live zone authorization endpoint. Temperature never becomes permission. |
| G5 Build mode | The generic HOT posture is illustrative. The founder's build directive, the task delegation, and owner change gates apply. | the-custodian orientation and the task owner. | Resolved scope and the owner's production-change record when the target is not disposable. | Per-zone end of build mode remains an owner or human decision. |
| G6 Platform-root | Agents emit the need for root authorization. They do not hold or exercise root. | Human root steward, recorded through the-custodian orientation. | A bounded recovery case, failed lower-scope paths, expiry, and independent evidence. | The reference `single_steward` mode is not verified here as the estate's current governance mode. |
| G7 Tenant governance | A tenant envelope only narrows the platform envelope. Tenant admins are not root. | tenant-engine for tenant facts. Authorization stays at access-engine. | Tenant identifier, lifecycle, role, guardrail source, and freshness. | The reference tenant-envelope service is not an estate service operated here. TEN-WP-0012 remains the owner's dependency record. |
| G8 Detection and response | Innate reference controls are review guidance. Containment budgets are future architecture. | kings-guard for a posture proposal; whitehat-security and risk-nexus for a finding; the defect owner for repair. | Source events and their completeness limits, or an authorized engagement for a live probe. | No automatic containment path exists. RISK-F-0015 stays open. |
| G9 Components and seams | `decide.py` is offline reference conformance. The historic "Gate-House" broker label is not the current Gate House role. | access-engine is the operational PDP. gate-house owns doctrine. secrets-engine owns credential lifecycle over OpenBao. ops-warden routes the need. | A current access-engine decision, the credential owner's lifecycle record, and the route the operator actually used. | Gate House, NetKingdom, and access-engine have not ratified this wording or any promotion of reference rules into policy. |
| G10 Bootstrap | Stages 0–5 are a reference sequence. The A6 default envelope is a reference fixture. | The class owner and the human who authorizes an immature class. | Identities, intent, deterministic policy tests, and an escalation path before any class is treated as routine. | Stage promotion is not an estate procedure. |
| G11 Failure modes | The checklist marks findings. It does not install a detector. | risk-nexus and the owner of the affected contract. | A sourced finding with its limitation. | No automated control is claimed from this table. |
| G12 Long-run direction | Direction is non-normative. It does not lower a current gate. | The owner of each guarantee that is actually owed. | That owner's published guarantee and recovery evidence. | No rollout metric in this row is accepted. |
Normative distribution stays blocked until the owner named in each open gap
records assent, rejection, or a narrower dependency. Silence is not assent.
Settled rows, and only those rows, may later change the canon, the agent
extract, policy data, and fixtures together.

5
docs/netkingdom-integration-map.md
View file

@ -44,9 +44,10 @@ All references are pinned; `knowledge/sources.yaml` also records file hashes and
## Interpretation
Use `docs/operational-contracts.md` for the request/evidence seams and
Use `docs/operational-contracts.md` for the request/evidence seams,
`docs/decisions/EMERGENT-DEC-2026-001-integration-profile.md` for compatibility
dispositions. The knowledge cards cite their sources via the retrieval receipt.
dispositions, and `docs/decisions/compatibility-matrix-2026-10-04.md` for the
G1–G12 map. The matrix is local and unratified. The knowledge cards cite their sources via the retrieval receipt.
Owner documents, reference fixtures, deployed state, and independent evidence
are different kinds of claims. Only the first two were inspected for this inventory.
No outside repository was modified by generating this map.

10
workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md
View file

@ -152,7 +152,7 @@ priority: high
state_hub_task_id: "f6b17f12-d5b0-586c-bb2a-499c566d311e"
needs_human: true
decision_id: d20a9750-2b29-534e-8227-fb866581a6ca
blocking_reason: Founder accepted memo emergent-profile-adoption-0-2-6 at 2026-10-04T00:16:08Z as non-normative orientation of knowledge 0.2.6. Cross-owner doctrine ratification and the compatibility matrix remain pending. Hub decision d20a9750 stays unresolved because the packet resolves never.
blocking_reason: Founder accepted memo emergent-profile-adoption-0-2-6 at 2026-10-04T00:16:08Z as non-normative orientation of knowledge 0.2.6. The local G1-G12 matrix is docs/decisions/compatibility-matrix-2026-10-04.md and is unratified. Cross-owner doctrine ratification remains pending. Hub decision d20a9750 stays unresolved because the packet resolves never.
```
Depends on T01. Prepare concrete owner-reviewable dispositions for the six
@ -881,6 +881,14 @@ The packet says `resolves: never`, so hub decision
ratification remains. T02, T05, T07, T08, T09, and T10 stay **wait**. The
plan stays **blocked**. No DoD-Ok is claimed.
## Compatibility matrix — 2026-10-04
Recorded `docs/decisions/compatibility-matrix-2026-10-04.md`. It maps generic
rules G1–G12 to an estate route, the evidence that route requires, and the
owner gap that blocks normative distribution. Every row is unratified. No
canon, agent extract, policy fixture, or sealed card changed. T02 stays
**wait**.
## Machine-readable remaining gates — 2026-10-04