coulomb/emergent-security
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Seal knowledge 0.2.5 on the Informed Decision delivery pin.

Browse source 
Startup was withheld because the owner moved past 15c330cc. The new
seal reviews b4f6373, including local delivery limits and the
boolean-preserving dev forwarder at state-hub d61ba32. The unsigned
draft was regenerated and not submitted. EMERGENT-WP-0002 stays blocked.

Assistant: grok
Assistant-Session: 01a10286-9185-7bb2-b411-89cf6ab4c0c6
This commit is contained in:
tegwick 2026-10-03 22:31:14 +02:00
parent 51c7b69417
commit e32a9c5dfe
15 changed files with 217 additions and 46 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/operational-contracts.md
View file

@ -10,7 +10,7 @@ facts; owners must bind security-relevant fields before a protected effect.
| Find credential route | `warden route find "<need>"`, ops-warden | Need, target, actor, tenant, purpose | Catalog/runbook pointer; absence to routing/construction owner. No credential retrieved. |
| Request authority | access-engine `POST /v1/check` | Its CheckRequest and verified claims; exact subject/action/resource/context | DecisionEnvelope; verify authentic source, binding and lifetime under PEP contract. Outage follows published PEP stance. |
| Approval fact | approval-engine claim and consume endpoints | Exact action/target/actor/purpose, validity and supersession | Authenticated claim; consume-before-effect where required; never infer from Statehub prose. |
| Human question | informed-decision | One unsigned memo, exact requested act, packet hashes, distinct drafting/submitter/reviewer identities | Authenticated human disposition and presentation evidence. Offline intake exists and is not a live listener or submitter route (INFD-WP-0005). No answer is not approval. |
| Human question | informed-decision | One unsigned memo, exact requested act, packet hashes, distinct drafting/submitter/reviewer identities | Authenticated human disposition and presentation evidence. Local intake and boolean-preserving dev forwarding exist and are not a live listener or submitter route (INFD-WP-0005). No answer is not approval. |
| Guided procedure | runbook-tutorials engine; pack in procedure owner repo | Pack digest, run ID, resolved scope, actual external approval/PDP prerequisites, check/effect evidence | Local progress and evidence; auto-confirm, waivers and seals do not authorize effects. Execution/index remain RBT-WP-0006. |
| Credential lifecycle | secrets-engine owner catalog | Current decision and approval contracts, stage/targets, evidence | Scoped lifecycle/delivery path over custody backend; missing prerequisite refuses effect. |
| Identity/user facts | key-cape / user-engine | Authenticated principal, actor, runtime identity; scoped membership | Claims, not authorization; unresolved binding to owner/delegator. |