diff --git a/docs/adoption-review.md b/docs/adoption-review.md
index e9dc7b6..6a6e4f9 100644
--- a/docs/adoption-review.md
+++ b/docs/adoption-review.md
@@ -8,9 +8,11 @@ package for its remaining gates; it is not an approval or a completed rollout.
 Requested reviewers: gate-house, net-kingdom, access-engine, security-canon;
 tenant/zone/credential/observation owners for their respective mappings.
 
-Review `docs/decisions/EMERGENT-DEC-2026-001-integration-profile.md`,
+Review `docs/decisions/compatibility-matrix-2026-10-04.md`,
+`docs/decisions/EMERGENT-DEC-2026-001-integration-profile.md`,
 `docs/operational-contracts.md`, `docs/netkingdom-integration-map.md`, and the
-14 cards. Decide whether these are an accurate orientation profile of current
+14 cards. The matrix records the founder's 0.2.6 orientation acceptance and
+leaves every G1–G12 row unratified. Decide whether these are an accurate orientation profile of current
 owner boundaries and where the profile should be published/linked long term.
 Specifically settle the reference-evaluator boundary, historical Gate-House
 broker label, unavailable containment, build-mode limits and orthogonal scope
diff --git a/docs/decisions/EMERGENT-DEC-2026-001-integration-profile.md b/docs/decisions/EMERGENT-DEC-2026-001-integration-profile.md
index 3166110..5ae0d1e 100644
--- a/docs/decisions/EMERGENT-DEC-2026-001-integration-profile.md
+++ b/docs/decisions/EMERGENT-DEC-2026-001-integration-profile.md
@@ -34,6 +34,8 @@ must not be injected as live operational procedures. Code and envelope semantics
 are unchanged, so existing policy fixtures continue to express the same model.
 
 Sources: `knowledge/sources.yaml`, `knowledge/cards/compatibility.md`, and the
-owner contracts linked in `docs/netkingdom-integration-map.md`.
+owner contracts linked in `docs/netkingdom-integration-map.md`. The rule map is
+`docs/decisions/compatibility-matrix-2026-10-04.md`. Its rows are local and
+unratified.
 
 Statehub adoption decision: `d20a9750-2b29-534e-8227-fb866581a6ca` stays open. The packet resolves never, so this acceptance does not close it. The founder accepted informed-decision memo `emergent-profile-adoption-0-2-6` at `2026-10-04T00:16:08Z` as non-normative orientation of knowledge 0.2.6. Evidence: `informed-decision/docs/evidence/2026-10-04-emergent-profile-acceptance.json`. That answer is not cross-owner approval.
diff --git a/docs/decisions/compatibility-matrix-2026-10-04.md b/docs/decisions/compatibility-matrix-2026-10-04.md
new file mode 100644
index 0000000..4dff38b
--- /dev/null
+++ b/docs/decisions/compatibility-matrix-2026-10-04.md
@@ -0,0 +1,40 @@
+# Compatibility matrix — 2026-10-04
+
+Version: `emergent.compatibility-matrix.v1`. Status: local map, owner
+ratification open. This file does not amend owner contracts, reseal knowledge
+0.2.6, or close EMERGENT-WP-0002.
+
+The founder accepted knowledge 0.2.6, digest
+`8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02`, as
+non-normative orientation on 2026-10-04T00:16:08Z. Hub decision
+`d20a9750-2b29-534e-8227-fb866581a6ca` stays open because that packet resolves
+never. Source pins are `knowledge/sources.yaml`, verified 2026-10-03 as
+documents. The sealed profile still pins informed-decision at `b4f6373`; that
+checkout has since moved, and this matrix does not treat the moved tree as a
+new sealed pin.
+
+Rows map each generic rule in `specs/emergent-security-0.8.md` G1–G12 to an
+estate route, the evidence that route requires, and the gap that blocks
+normative distribution. Operational seams stay in
+`docs/operational-contracts.md`. Local dispositions stay in
+`EMERGENT-DEC-2026-001`.
+
+| Rule | Local disposition | Estate route | Evidence before a protected effect | Open gap |
+| --- | --- | --- | --- | --- |
+| G1 Authority hierarchy | L0–L4 is reference scope vocabulary. A level is not a privilege rank. | security-canon vocabulary; gate-house doctrine. | Owner mapping of each level to an estate claim or an explicit non-mapping. | Security-canon and gate-house have not ratified the mapping. |
+| G2 Trust | Identity, decision, and outcome trust stay separate. Trust is not global and not transitive. | key-cape and user-engine for identity claims; access-engine for a decision; the effect owner for outcome evidence. | Authenticated identity, an access-engine DecisionEnvelope, and the owner's effect evidence. | No estate trust product is declared by this package. |
+| G3 Decision-class maturity | D0–D4 describes who decides a class. Meeting a reference checklist does not create a delegation. | informed-decision for a human answer; access-engine for a policy decision inside an admitted policy. | The class owner's envelope, tests, and recall conditions. | No decision-class registry is adopted. |
+| G4 Temperature | Temperature is local change cost. It is separate from zone identity, tenant, and runtime environment. | zone-engine offline conformance for an explicit membership declaration. | Declaration, manifest or profile, and source lineage. | No live zone authorization endpoint. Temperature never becomes permission. |
+| G5 Build mode | The generic HOT posture is illustrative. The founder's build directive, the task delegation, and owner change gates apply. | the-custodian orientation and the task owner. | Resolved scope and the owner's production-change record when the target is not disposable. | Per-zone end of build mode remains an owner or human decision. |
+| G6 Platform-root | Agents emit the need for root authorization. They do not hold or exercise root. | Human root steward, recorded through the-custodian orientation. | A bounded recovery case, failed lower-scope paths, expiry, and independent evidence. | The reference `single_steward` mode is not verified here as the estate's current governance mode. |
+| G7 Tenant governance | A tenant envelope only narrows the platform envelope. Tenant admins are not root. | tenant-engine for tenant facts. Authorization stays at access-engine. | Tenant identifier, lifecycle, role, guardrail source, and freshness. | The reference tenant-envelope service is not an estate service operated here. TEN-WP-0012 remains the owner's dependency record. |
+| G8 Detection and response | Innate reference controls are review guidance. Containment budgets are future architecture. | kings-guard for a posture proposal; whitehat-security and risk-nexus for a finding; the defect owner for repair. | Source events and their completeness limits, or an authorized engagement for a live probe. | No automatic containment path exists. RISK-F-0015 stays open. |
+| G9 Components and seams | `decide.py` is offline reference conformance. The historic "Gate-House" broker label is not the current Gate House role. | access-engine is the operational PDP. gate-house owns doctrine. secrets-engine owns credential lifecycle over OpenBao. ops-warden routes the need. | A current access-engine decision, the credential owner's lifecycle record, and the route the operator actually used. | Gate House, NetKingdom, and access-engine have not ratified this wording or any promotion of reference rules into policy. |
+| G10 Bootstrap | Stages 0–5 are a reference sequence. The A6 default envelope is a reference fixture. | The class owner and the human who authorizes an immature class. | Identities, intent, deterministic policy tests, and an escalation path before any class is treated as routine. | Stage promotion is not an estate procedure. |
+| G11 Failure modes | The checklist marks findings. It does not install a detector. | risk-nexus and the owner of the affected contract. | A sourced finding with its limitation. | No automated control is claimed from this table. |
+| G12 Long-run direction | Direction is non-normative. It does not lower a current gate. | The owner of each guarantee that is actually owed. | That owner's published guarantee and recovery evidence. | No rollout metric in this row is accepted. |
+
+Normative distribution stays blocked until the owner named in each open gap
+records assent, rejection, or a narrower dependency. Silence is not assent.
+Settled rows, and only those rows, may later change the canon, the agent
+extract, policy data, and fixtures together.
diff --git a/docs/netkingdom-integration-map.md b/docs/netkingdom-integration-map.md
index 9dcac18..9276f8e 100644
--- a/docs/netkingdom-integration-map.md
+++ b/docs/netkingdom-integration-map.md
@@ -44,9 +44,10 @@ All references are pinned; `knowledge/sources.yaml` also records file hashes and
 
 ## Interpretation
 
-Use `docs/operational-contracts.md` for the request/evidence seams and
+Use `docs/operational-contracts.md` for the request/evidence seams,
 `docs/decisions/EMERGENT-DEC-2026-001-integration-profile.md` for compatibility
-dispositions. The knowledge cards cite their sources via the retrieval receipt.
+dispositions, and `docs/decisions/compatibility-matrix-2026-10-04.md` for the
+G1–G12 map. The matrix is local and unratified. The knowledge cards cite their sources via the retrieval receipt.
 Owner documents, reference fixtures, deployed state, and independent evidence
 are different kinds of claims. Only the first two were inspected for this inventory.
 No outside repository was modified by generating this map.
diff --git a/workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md b/workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md
index 183217b..6931db2 100644
--- a/workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md
+++ b/workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md
@@ -152,7 +152,7 @@ priority: high
 state_hub_task_id: "f6b17f12-d5b0-586c-bb2a-499c566d311e"
 needs_human: true
 decision_id: d20a9750-2b29-534e-8227-fb866581a6ca
-blocking_reason: Founder accepted memo emergent-profile-adoption-0-2-6 at 2026-10-04T00:16:08Z as non-normative orientation of knowledge 0.2.6. Cross-owner doctrine ratification and the compatibility matrix remain pending. Hub decision d20a9750 stays unresolved because the packet resolves never.
+blocking_reason: Founder accepted memo emergent-profile-adoption-0-2-6 at 2026-10-04T00:16:08Z as non-normative orientation of knowledge 0.2.6. The local G1-G12 matrix is docs/decisions/compatibility-matrix-2026-10-04.md and is unratified. Cross-owner doctrine ratification remains pending. Hub decision d20a9750 stays unresolved because the packet resolves never.
 ```
 
 Depends on T01. Prepare concrete owner-reviewable dispositions for the six
@@ -881,6 +881,14 @@ The packet says `resolves: never`, so hub decision
 ratification remains. T02, T05, T07, T08, T09, and T10 stay **wait**. The
 plan stays **blocked**. No DoD-Ok is claimed.
 
+## Compatibility matrix — 2026-10-04
+
+Recorded `docs/decisions/compatibility-matrix-2026-10-04.md`. It maps generic
+rules G1–G12 to an estate route, the evidence that route requires, and the
+owner gap that blocks normative distribution. Every row is unratified. No
+canon, agent extract, policy fixture, or sealed card changed. T02 stays
+**wait**.
+
 
 ## Machine-readable remaining gates — 2026-10-04