Reconcile published offline intake in knowledge 0.2.4

Informed Decision 15c330cc documents an offline intake service with empty registries and no live listener. The decisions card carries those limits. The unsigned draft binds the new digest and is not submitted. EMERGENT-WP-0002 stays blocked. Assistant: grok Assistant-Session: 01a10286-9185-7bb2-b411-89cf6ab4c0c6
2026-10-03 20:14:41 +02:00 · 2026-10-03 20:14:41 +02:00 · ee2e17a2d2
commit ee2e17a2d2
parent 5cdb4d39f6
16 changed files with 208 additions and 58 deletions
--- a/SCOPE.md
+++ b/SCOPE.md
@ -29,7 +29,7 @@ decisions without widening privilege, and keep root human-controlled.
 ## Current State

 - Canon and reference package: v0.8; Python 3.11+, PyYAML, pytest.
- Knowledge package: v0.2.3 pilot; 14 cards, 24 owners, 69 pinned sources,
+- Knowledge package: v0.2.4 pilot; 14 cards, 24 owners, 69 pinned sources,
  read-only retrieval CLI, sealed exports and provider adapters.
 - Verification: 332 portable tests plus 9 optional real owner-contract tests.
 - Informed Decision unsigned adoption draft and native v0.2 orientation runbook;
@ -52,7 +52,9 @@ Owner reviews now provide scoped doctrine, vocabulary and PDP-boundary evidence
 for 0.2.1; their institutional/human adoption limits remain explicit. Whitehat
 reported two loaded-package consistency findings, addressed locally in 0.2.2
 with five regression cases. Whitehat review close-out was interrupted by a
-platform cybersecurity-risk block; no clean independent acceptance is claimed.
+platform cybersecurity-risk block. The later T03 disposition accepts the
+scoped offline review and the 0.2.3 library remediation, with disclosed session
+limits. RISK-F-0015 remains open.
 Glas model evidence now leaves unreported observed models unknown. Current native
 continuity requirements remain in GLAS-WP-0012; distribution stays a draft.

@ -63,10 +65,11 @@ feedback on retained scenarios. Grok has retrieval but no completed answer;
 exact-packet human adoption/admission, native continuity, independent remediation
 acceptance, current wider pilots and rollout/reach keep EMERGENT-WP-0002 blocked.

-Release 0.2.3 reviews that Informed Decision workplan change and re-pins pushed
-`f0c60637`. All 24 owners verify as files again, and the unsigned draft binds
-digest `60f8811c6b94b30d357a0d9e5022f2a8ea52e69b47138d3a536755f3295310b5`.
-The note does not admit the packet or change authority. 0.2.2 provider reports
-stay historical. See `docs/evidence/2026-10-03-023-source-repin.md`.
-Human adoption, provider continuity, independent remediation acceptance, wider
-pilots, and fleet reach still block EMERGENT-WP-0002.
+Release 0.2.4 reviews Informed Decision's published offline intake at
+`15c330cc`. All 24 owners verify as files. The decisions card records empty
+registries, no live listener, and no automatic retry of a creating approval
+without a retained receipt. The unsigned draft binds digest
+`025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3`.
+See `docs/evidence/2026-10-03-024-offline-intake-repin.md`. Human adoption,
+0.2.4 provider evidence, continuity, wider pilots, and fleet reach still block
+EMERGENT-WP-0002.
--- a/docs/adoption-review.md
+++ b/docs/adoption-review.md
@ -92,3 +92,13 @@ the unadmitted 0.2.2 route. No card, intake, grant, or authority change is
 included. The draft is still unsubmitted. See
 `docs/evidence/2026-10-03-023-source-repin.md`. Provider evidence must be
 renewed for this digest before it can count toward T05 or T07.
+
+## Offline intake reconciliation — 0.2.4
+
+The current unsigned draft binds 0.2.4, digest
+`025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3`.
+It reviews published Informed Decision revision `15c330cc`: offline intake
+service, schema-3 ledger, empty registries, and the doctrine constraints on
+retry, PDP eligibility, `view_hash`, `human_control`, and asserted `drafted_by`.
+No live listener or grant is claimed. Whitehat's 0.2.3 library acceptance does
+not cover this seal. See `docs/evidence/2026-10-03-024-offline-intake-repin.md`.
--- a/docs/decision-runbook-integration.md
+++ b/docs/decision-runbook-integration.md
@ -83,7 +83,7 @@ historical; it is not silently relabeled as evidence for 0.2.0.

 | Dependency | Current evidence and next step | Live work record |
 | --- | --- | --- |
-| Automated memo submission | Offline validation and write-back code exist; listener, workload custody, admission and live rollout are unfinished. Keep the local draft ready and use the current owner-mediated attended route when submission is authorized. Do not assume an endpoint is live or mint a submitter grant. | INFD-WP-0005 T04–T10; EMERGENT-WP-0002 T02/T09 |
+| Automated memo submission | An offline intake service, schema-3 ledger, and durable outbox exist. Registries are empty and transports are injected. Listener deployment, workload custody, admission, and live rollout remain blocked. A creating approval without a retained receipt is not retried. Keep the local draft ready and use the attended route when submission is authorized. Do not mint a submitter grant. | INFD-WP-0005 T05–T08 and T10; EMERGENT-WP-0002 T02/T09 |
 | Profile adoption | Owner review must decide accuracy/publication, class/group and the exact submission path. Drafting is already authorized; no human answer or owner assent has been fabricated. | Decision `d20a9750-2b29-534e-8227-fb866581a6ca`; EMERGENT-WP-0002 T02 |
 | Engine execution/index | Automatic step execution, estate index and inter-pack dependencies remain deliberately deferred. Use explicit owner pack paths. No need to implement these to use the preparation pack. | RBT-WP-0006; existing decision `1e517449-2114-4a8f-9c6b-fcdbe977378e` |
 | Runtime enforcement bridge | Pack actor/privilege/authorized_by fields and local waivers are not authenticated owner facts. No external approval/PDP gate plugin is claimed. Future execution requires an exact owner design, not a generic `approved: true` field. | EMERGENT-WP-0002 T06 mapping; RBT-WP-0006 T01/T06 |
@ -126,9 +126,15 @@ WH-KNOW-001/002. The owner-reviewed Glas source correction preserves absent
 observed model metadata as unknown. Neither change resolves the existing human
 adoption or native continuity gates.

-Current pilot **0.2.3** re-pins Informed Decision's inventoried workplan at
-`f0c60637` and regenerates the unsigned draft for digest
-`60f8811c6b94b30d357a0d9e5022f2a8ea52e69b47138d3a536755f3295310b5`.
-The added owner note records that the 0.2.2 packet was not admitted. It does
-not change intake code, schema, or authority. 0.2.2 provider reports do not
-certify this seal.
+Release **0.2.3** re-pins Informed Decision's inventoried workplan at
+`f0c60637`. That note recorded the unadmitted 0.2.2 route and did not change
+intake code.
+
+Current pilot **0.2.4** reviews the later published offline intake at
+`15c330cc`, digest
+`025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3`.
+The decisions card now records the empty registries, the blocked live route,
+and the refusal to retry a creating approval without a retained receipt.
+The unsigned draft binds this digest and is unsubmitted. 0.2.3 Whitehat
+library acceptance does not extend to this seal, and earlier provider reports
+do not certify it.
--- a/docs/decisions/profile-adoption-intake.draft.json
+++ b/docs/decisions/profile-adoption-intake.draft.json
@ -1,7 +1,7 @@
 {
  "kind": "informed-decision.memo-intake",
  "version": 1,
-  "idempotency_key": "emergent-profile-60f8811c6b94b30d357a0d9e5022f2a8ea52e69b47138d3a536755f3295310b5",
+  "idempotency_key": "emergent-profile-025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3",
  "memo_class": "knowledge-profile",
  "review_group": "net-kingdom-admins",
  "drafted_by": "codex@emergent-security (asserted)",
@ -14,15 +14,15 @@
    "principal": "emergent-security",
    "purpose": "Accept only the non-normative knowledge profile boundary",
    "target": {
-      "id": "emergent-security:knowledge:0.2.3:60f8811c6b94b30d357a0d9e5022f2a8ea52e69b47138d3a536755f3295310b5",
+      "id": "emergent-security:knowledge:0.2.4:025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3",
      "type": "knowledge-profile",
      "system": "emergent-security"
    }
  },
  "memo": {
-    "id": "emergent-profile-adoption-0-2-3",
+    "id": "emergent-profile-adoption-0-2-4",
    "version": 1,
-    "question": "Accept Emergent Security knowledge 0.2.3 as a non-normative NetKingdom agent orientation profile?",
+    "question": "Accept Emergent Security knowledge 0.2.4 as a non-normative NetKingdom agent orientation profile?",
    "requested_act": "approve",
    "binding_level": "organizational",
    "brief": "Accept only the orientation boundary of this exact release; operational authority and remaining review gates stay with their owners.",
@ -35,7 +35,7 @@
        "identifiers": []
      },
      "target": {
-        "id": "emergent-security:knowledge:0.2.3:60f8811c6b94b30d357a0d9e5022f2a8ea52e69b47138d3a536755f3295310b5",
+        "id": "emergent-security:knowledge:0.2.4:025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3",
        "kind": "knowledge-profile",
        "label": "Non-normative security orientation",
        "environment": "rehearsal",
@ -49,7 +49,7 @@
      {
        "item_id": "emergent-profile-packet",
        "label": "Profile boundary and limitations",
-        "hash": "sha256:d3a82c3c392f129058a558b89d0f6d951f746d00a88cc82917ed059e2a636107"
+        "hash": "sha256:3c7b4dd2ff93285fce7afe455747863c50b09c8c19571d129f8ee56f268c17fb"
      }
    ],
    "highlights": [
@ -76,7 +76,7 @@
    {
      "item_id": "emergent-profile-packet",
      "media_type": "text/markdown",
-      "content": "# Knowledge profile adoption request\n\nAdopt Emergent Security knowledge 0.2.3, release digest 60f8811c6b94b30d357a0d9e5022f2a8ea52e69b47138d3a536755f3295310b5, as a\nnon-normative orientation profile for coding agents in NetKingdom.\n\nThe profile points to existing owners, withholds stale guidance, and separates\nhuman decisions, runtime approvals, PDP decisions, credentials and procedure\nrecords. This asks only to accept that orientation boundary. It does not amend\nowner contracts or authorize operational effects, autonomous execution, root,\ncredential changes or fleet rollout.\n\nAlternatives: return for wording/source corrections; decline this profile;\naccept this exact orientation boundary with the documented evidence limits.\nChanging the reviewed package requires a new review, not reuse of this answer.\n\nEvidence: knowledge/sources.yaml; docs/decision-runbook-integration.md;\ndocs/operational-contracts.md; docs/adoption-review.md; docs/evidence/.\nEarlier provider reports and owner reviews retain their original release pins.\nWhitehat's separately authored offline 0.2.1 review found loaded-package binding\nand lifecycle gaps; 0.2.2 addresses them with local regressions. Review close-out\nand clean independent acceptance remain incomplete. No full Grok validation is claimed.\nActual compaction/harness proof and wider adoption remain open in EMERGENT-WP-0002.\n0.2.3 re-pins Informed Decision at f0c60637 after its workplan recorded the\nunadmitted 0.2.2 route. No intake, grant, schema, or authority change is included.\n\nThe draft is unsubmitted. The proposed memo class and review group must be\nconfirmed by the owner; a synthetic test grant proves format only. INFD-WP-0005\nintake rollout remains unfinished. This draft resolves no Statehub decision.\n"
+      "content": "# Knowledge profile adoption request\n\nAdopt Emergent Security knowledge 0.2.4, release digest 025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3, as a\nnon-normative orientation profile for coding agents in NetKingdom.\n\nThe profile points to existing owners, withholds stale guidance, and separates\nhuman decisions, runtime approvals, PDP decisions, credentials and procedure\nrecords. This asks only to accept that orientation boundary. It does not amend\nowner contracts or authorize operational effects, autonomous execution, root,\ncredential changes or fleet rollout.\n\nAlternatives: return for wording/source corrections; decline this profile;\naccept this exact orientation boundary with the documented evidence limits.\nChanging the reviewed package requires a new review, not reuse of this answer.\n\nEvidence: knowledge/sources.yaml; docs/decision-runbook-integration.md;\ndocs/operational-contracts.md; docs/adoption-review.md; docs/evidence/.\nEarlier provider reports and owner reviews retain their original release pins.\nWhitehat's offline review accepted remediation of the two loaded-package library\nfindings on the 0.2.3 digest, with disclosed shared-session limits. Provider\nrouting renewal, continuity, and harness proof remain open. No full Grok\nvalidation is claimed.\n0.2.4 reviews Informed Decision at 15c330cc. An offline intake service, ledger,\nand doctrine constraints are documented there. No listener, submitter grant,\ncustody, or live route is claimed. A creating approval without a retained\nreceipt is not retried.\n\nThe draft is unsubmitted. The proposed memo class and review group must be\nconfirmed by the owner; a synthetic test grant proves format only. INFD-WP-0005\nintake rollout remains unfinished. This draft resolves no Statehub decision.\n"
    }
  ]
 }
--- a/docs/evidence/2026-10-03-023-source-repin.md
+++ b/docs/evidence/2026-10-03-023-source-repin.md
@ -1,6 +1,10 @@
 # Informed Decision source re-pin — knowledge 0.2.3

-Live pilot: **0.2.3**, manifest digest
+The live seal is now 0.2.4. See
+`docs/evidence/2026-10-03-024-offline-intake-repin.md`. This 0.2.3 record
+stays historical.
+
+Historical pilot: **0.2.3**, manifest digest
 `60f8811c6b94b30d357a0d9e5022f2a8ea52e69b47138d3a536755f3295310b5`.
 Release 0.2.2, digest
 `19de26540c693b94ac8c19d7ed2ddd901acbc828c9b8a78b44c1a43ca468222c`,
--- a/docs/evidence/2026-10-03-024-offline-intake-repin.md
+++ b/docs/evidence/2026-10-03-024-offline-intake-repin.md
@ -0,0 +1,54 @@
+# Offline intake reconciliation — knowledge 0.2.4
+
+Live pilot: **0.2.4**, manifest digest
+`025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3`.
+Release 0.2.3, digest
+`60f8811c6b94b30d357a0d9e5022f2a8ea52e69b47138d3a536755f3295310b5`,
+remains the historical seal for its Whitehat library acceptance and its
+workplan-only re-pin. This release does not extend that acceptance.
+
+## Reviewed source
+
+0.2.3 withheld startup after Informed Decision moved past
+`f0c60637e3fe592a23cc31ace8e4d386ff04b710`. The published revision is now
+`15c330ccd049cd19c76040e54dae41cd15d1359e`, matching `origin/main`. Inventoried
+file bytes match that commit. The substantive change since 0.2.3 is the offline
+intake recorded in `SCOPE.md`, `docs/specs/FrictionlessDecisionIntake.md`, and
+`workplans/INFD-WP-0005-frictionless-decision-intake.md`. README, INTENT, the
+memo schema, and `informed_decision/intake.py` are unchanged. The latest
+consistency commit touches only the owner brief.
+
+The owner states that the intake service, schema-3 ledger, and durable
+notification/write-back jobs exist offline. Registries are empty, transports
+are injected, and no listener is deployed. Custody, admission, audit
+registration, and rollout stay blocked. A creating approval without a retained
+receipt is not retried. Gate House's reply says posing needs no human act, and
+draft GH-DEC-2026-023 still awaits the founder's ruling. That reply is not a
+live submission route.
+
+## Package change
+
+`knowledge/cards/decisions.md` now carries those limits: empty registries, no
+live `POST /v1/memos`, no automatic creating-row retry, PDP allow as eligibility
+only, `view_hash` kept out of PDP context, `human_control` left true, and
+`drafted_by` kept asserted. The intake-readiness scenario asks the same
+boundary against the offline service. The integration map, operational contract,
+and decision/runbook limit row match this scope. The unsigned adoption draft
+was regenerated for this digest and was not submitted. Decision
+`d20a9750-2b29-534e-8227-fb866581a6ca` remains open.
+
+## Checks
+
+[Source check](2026-10-03-024-source-check.json): 24 owners `verified-files`,
+`ok: true`, `live_state_verified: false`. Startup and the decisions card both
+retrieve as `verified-files` for the Grok audience. Seal and unsigned-draft
+checks pass. Portable tests: 332 passed, 9 skipped. With
+`EMERGENT_OWNER_ROOT=/home/worsch`, the 9 owner-contract tests passed. File
+agreement is not deployment, permission, provider readiness, or adoption.
+
+## Still open
+
+0.2.3 Whitehat acceptance covers WH-KNOW-001 and WH-KNOW-002 on that digest
+only. RISK-F-0015 and fresh 0.2.4 provider reports remain open, including Grok,
+compaction/resume, and a governed session. No wider pilot or fleet notice is
+included. EMERGENT-WP-0002 stays blocked on T02, T05, T07, T08, T09, and T10.
--- a/docs/evidence/2026-10-03-024-source-check.json
+++ b/docs/evidence/2026-10-03-024-source-check.json
@ -0,0 +1,33 @@
+{
+  "schema": "emergent.knowledge-check.v1",
+  "version": "0.2.4",
+  "package_digest": "025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3",
+  "sources": {
+    "net-kingdom": "verified-files",
+    "gate-house": "verified-files",
+    "ops-warden": "verified-files",
+    "ops-mason": "verified-files",
+    "access-engine": "verified-files",
+    "security-canon": "verified-files",
+    "user-engine": "verified-files",
+    "tenant-engine": "verified-files",
+    "zone-engine": "verified-files",
+    "whitehat-security": "verified-files",
+    "kings-guard": "verified-files",
+    "secrets-engine": "verified-files",
+    "key-cape": "verified-files",
+    "approval-engine": "verified-files",
+    "informed-decision": "verified-files",
+    "audit-core": "verified-files",
+    "risk-nexus": "verified-files",
+    "info-tech-canon": "verified-files",
+    "ops-bridge": "verified-files",
+    "railiance-master": "verified-files",
+    "glas-harness": "verified-files",
+    "the-custodian": "verified-files",
+    "emergent-security": "verified-files",
+    "runbook-tutorials": "verified-files"
+  },
+  "live_state_verified": false,
+  "ok": true
+}
--- a/docs/netkingdom-integration-map.md
+++ b/docs/netkingdom-integration-map.md
@ -19,7 +19,7 @@ All references are pinned; `knowledge/sources.yaml` also records file hashes and
 | secrets-engine | credential-lifecycle | [README.md](https://forgejo.coulomb.social/coulomb/secrets-engine/src/commit/3149654609d0c738d05002d2ca08e40e774bbb30/README.md); [docs/ops-warden-routing-contract.md](https://forgejo.coulomb.social/coulomb/secrets-engine/src/commit/3149654609d0c738d05002d2ca08e40e774bbb30/docs/ops-warden-routing-contract.md); [docs/approval-consumption.md](https://forgejo.coulomb.social/coulomb/secrets-engine/src/commit/3149654609d0c738d05002d2ca08e40e774bbb30/docs/approval-consumption.md) |
 | key-cape | authentication | [README.md](https://forgejo.coulomb.social/coulomb/key-cape/src/commit/672e1faf4b3401ff7bf68bb0b29f8dc50ca51ac6/README.md); [INTENT.md](https://forgejo.coulomb.social/coulomb/key-cape/src/commit/672e1faf4b3401ff7bf68bb0b29f8dc50ca51ac6/INTENT.md) |
 | approval-engine | approval-facts | [README.md](https://forgejo.coulomb.social/coulomb/approval-engine/src/commit/901d569757db967a7a595b3d87953b507f002c05/README.md); [docs/approval-claim.md](https://forgejo.coulomb.social/coulomb/approval-engine/src/commit/901d569757db967a7a595b3d87953b507f002c05/docs/approval-claim.md); [docs/approval-consumption.md](https://forgejo.coulomb.social/coulomb/approval-engine/src/commit/901d569757db967a7a595b3d87953b507f002c05/docs/approval-consumption.md) |
-| informed-decision | pep-shaped | [README.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/f0c60637e3fe592a23cc31ace8e4d386ff04b710/README.md); [INTENT.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/f0c60637e3fe592a23cc31ace8e4d386ff04b710/INTENT.md); [SCOPE.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/f0c60637e3fe592a23cc31ace8e4d386ff04b710/SCOPE.md) |
+| informed-decision | pep-shaped | [README.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/README.md); [INTENT.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/INTENT.md); [SCOPE.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/SCOPE.md) |
 | runbook-tutorials | guided-procedures | [INTENT.md](https://forgejo.coulomb.social/coulomb/runbook-tutorials/src/commit/df97fadf5decfcdb5c3c6ab90211226335ffdf8e/INTENT.md); [SCOPE.md](https://forgejo.coulomb.social/coulomb/runbook-tutorials/src/commit/df97fadf5decfcdb5c3c6ab90211226335ffdf8e/SCOPE.md); [docs/pack-spec-v0.2.md](https://forgejo.coulomb.social/coulomb/runbook-tutorials/src/commit/df97fadf5decfcdb5c3c6ab90211226335ffdf8e/docs/pack-spec-v0.2.md) |
 | audit-core | evidence-custody | [README.md](https://forgejo.coulomb.social/coulomb/audit-core/src/commit/fdca5758e16f4eb3e0bbb9e281cf9e5bb5ad7063/README.md); [docs/audit-backend-contract.md](https://forgejo.coulomb.social/coulomb/audit-core/src/commit/fdca5758e16f4eb3e0bbb9e281cf9e5bb5ad7063/docs/audit-backend-contract.md) |
 | risk-nexus | findings | [README.md](https://forgejo.coulomb.social/coulomb/risk-nexus/src/commit/0b3cfb81c65221477f17c05d0916902f690d4427/README.md); [findings/README.md](https://forgejo.coulomb.social/coulomb/risk-nexus/src/commit/0b3cfb81c65221477f17c05d0916902f690d4427/findings/README.md) |
@ -52,5 +52,7 @@ are different kinds of claims. Only the first two were inspected for this invent
 No outside repository was modified by generating this map.

 The detailed decision/procedure integration is in `docs/decision-runbook-integration.md`.
-Automated memo intake (INFD-WP-0005) and runbook execution/index (RBT-WP-0006)
-remain owner work, not capabilities created by this package.
+INFD-WP-0005 has an offline intake service with empty registries. Its live
+listener, custody, admission, and rollout remain that owner's blocked work.
+Runbook execution and index (RBT-WP-0006) likewise remain owner work. This
+package creates neither capability.
--- a/docs/operational-contracts.md
+++ b/docs/operational-contracts.md
@ -10,7 +10,7 @@ facts; owners must bind security-relevant fields before a protected effect.
 | Find credential route | `warden route find "<need>"`, ops-warden | Need, target, actor, tenant, purpose | Catalog/runbook pointer; absence to routing/construction owner. No credential retrieved. |
 | Request authority | access-engine `POST /v1/check` | Its CheckRequest and verified claims; exact subject/action/resource/context | DecisionEnvelope; verify authentic source, binding and lifetime under PEP contract. Outage follows published PEP stance. |
 | Approval fact | approval-engine claim and consume endpoints | Exact action/target/actor/purpose, validity and supersession | Authenticated claim; consume-before-effect where required; never infer from Statehub prose. |
-| Human question | informed-decision | One unsigned memo, exact requested act, packet hashes, distinct drafting/submitter/reviewer identities | Authenticated human disposition and presentation evidence; intake rollout is unfinished (INFD-WP-0005). No answer is not approval. |
+| Human question | informed-decision | One unsigned memo, exact requested act, packet hashes, distinct drafting/submitter/reviewer identities | Authenticated human disposition and presentation evidence. Offline intake exists and is not a live listener or submitter route (INFD-WP-0005). No answer is not approval. |
 | Guided procedure | runbook-tutorials engine; pack in procedure owner repo | Pack digest, run ID, resolved scope, actual external approval/PDP prerequisites, check/effect evidence | Local progress and evidence; auto-confirm, waivers and seals do not authorize effects. Execution/index remain RBT-WP-0006. |
 | Credential lifecycle | secrets-engine owner catalog | Current decision and approval contracts, stage/targets, evidence | Scoped lifecycle/delivery path over custody backend; missing prerequisite refuses effect. |
 | Identity/user facts | key-cape / user-engine | Authenticated principal, actor, runtime identity; scoped membership | Claims, not authorization; unresolved binding to owner/delegator. |
--- a/knowledge/cards/decisions.md
+++ b/knowledge/cards/decisions.md
@ -21,12 +21,23 @@ submitter/requester, represented principal, human reviewer, and effect actor.
 Neither is approval-engine's binding digest or access-engine's request digest.

 Current owner evidence: the browser review surface is deployed according to
-its dated SCOPE; INFD-WP-0005 has offline intake validation and a write-back
-adapter, but its listener, admission, workload custody and rollout are unfinished.
-Do not assume POST /v1/memos or a Statehub forwarding route is live. Prepare the
-unsigned packet locally; use the owner's current attended submission route
-when authorized. Never invent client credentials or register yourself as an
-admitted submitter. No extra human permission is needed merely to draft.
+its dated SCOPE. INFD-WP-0005 now has an offline intake service, a schema-3
+ledger, and durable notification/write-back jobs. Shipped registries are empty,
+transports are injected, and no listener is deployed. Workload custody,
+admission, audit registration, and live rollout remain blocked. Do not call
+POST /v1/memos or treat Statehub forwarding as a live submitter route. Prepare
+the unsigned packet locally and use the owner's attended submission route when
+authorized. Never invent client credentials or register yourself as an admitted
+submitter. No extra human permission is needed merely to draft.
+
+A `creating` approval row without a retained receipt must not be retried
+automatically. Gate House's reply says posing itself needs no human act. The
+proposed decision still awaits the founder's ruling, and that reply does not
+open a live submission route. A PDP allow is eligibility only: the effect owner
+reads the live approval and compares its id and native digest with the memo pin.
+Do not place `view_hash` in PDP context or recompute it into the engine binding
+digest. Intake-created approvals keep `human_control` true. `drafted_by` stays
+asserted provenance when a hub forwards a memo.

 For a protected effect, the human disposition must be reflected in the exact
 approval-engine object where required; the effect owner verifies its claim,
--- a/knowledge/catalog.yaml
+++ b/knowledge/catalog.yaml
@ -1,5 +1,5 @@
 schema: emergent.knowledge.v1
-version: 0.2.3
+version: 0.2.4
 status: pilot
 startup_max_bytes: 5500
 cards:
--- a/knowledge/release.yaml
+++ b/knowledge/release.yaml
@ -1,13 +1,13 @@
 schema: emergent.release.v1
-version: 0.2.3
+version: 0.2.4
 trust: repository-reviewed-content; hashes are not signatures
 files:
-  catalog.yaml: 6b24dc2a15835c8ba798c84207ee9e0f142e482b19c6f29039cf7892d38245d3
-  sources.yaml: 45c9870a7d1723b0d096a12a3f65c13766b7c901424cd447a8f0625139648fc3
+  catalog.yaml: 4ae540012779ee0af6b39df1992c8d4159c8dfe30362ea2a35145913540da3a6
+  sources.yaml: d78e7bebeff9508756414cd68f82ff6522103cea4c0923dd6a204f90c1cb0a43
  cards/access.md: 53fb77027593caa45308388b4c6e95c632c759c8014bc5cc52cb249df9c312f3
  cards/compatibility.md: bf78349d59b2e5773706bc5d87853039626d8a2ae784b5f2ae10108b2b9ca3f6
  cards/construction.md: 9b2a770a857d5c258e0175119e39a6251b133b86346bb0384827e276dbff3732
-  cards/decisions.md: 2a469ce21c6acc8b046aa92f72c6185ac9534bbeee42120c11cb47cb05b49186
+  cards/decisions.md: d00efb385facb425b81feea1179c9a77ac16ce1ba9d9136cbe5fee1ddf8b4c3c
  cards/deployment.md: fa17294d5026bcf14271505b28a560faa9c4dc22ad4601f869db6355ecea04e9
  cards/evidence.md: c3477f23ec6dba0b22c137571ce07a6f440dd30f3e49ab1708593421a5b088fa
  cards/findings.md: daef3577d4469c1226c56c5a53df5d3bc3f9bec6d393050878c586455ebab68e
--- a/knowledge/sources.yaml
+++ b/knowledge/sources.yaml
@ -361,7 +361,7 @@ sources:
 - id: informed-decision
  owner: informed-decision
  repository: informed-decision
-  revision: f0c60637e3fe592a23cc31ace8e4d386ff04b710
+  revision: 15c330ccd049cd19c76040e54dae41cd15d1359e
  layer: Staff
  role: pep-shaped
  authority_type: owner-documentation
@ -376,31 +376,31 @@ sources:
  - path: README.md
    sha256: daaaeeaff8cb5bacd378fc768ea10c718f7314db33c485ba1c02c1d6b42e0e20
    matches_commit: true
-    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/f0c60637e3fe592a23cc31ace8e4d386ff04b710/README.md
+    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/README.md
  - path: INTENT.md
    sha256: 9b714f4b63b1ffd6079c4515832f3d6daa2f823d395c808f8701261fbed396a3
    matches_commit: true
-    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/f0c60637e3fe592a23cc31ace8e4d386ff04b710/INTENT.md
+    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/INTENT.md
  - path: SCOPE.md
-    sha256: 17570e13c96bf68d84714930c9b5d5500a4f50d314c26f27dea7a27d8d412fb3
+    sha256: c5ddb9983d79c5204d1b4f47835a8faaa0978914cc27787e6ac2192c26588f05
    matches_commit: true
-    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/f0c60637e3fe592a23cc31ace8e4d386ff04b710/SCOPE.md
+    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/SCOPE.md
  - path: docs/specs/FrictionlessDecisionIntake.md
-    sha256: 70d8da799d5723e9741757249719235eb5557944518aa2e46abe5918108a7ace
+    sha256: b695f7fc92f896d81081a6356eb199bad286ef7b433bda2eeb836cb50cc849c4
    matches_commit: true
-    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/f0c60637e3fe592a23cc31ace8e4d386ff04b710/docs/specs/FrictionlessDecisionIntake.md
+    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/docs/specs/FrictionlessDecisionIntake.md
  - path: workplans/INFD-WP-0005-frictionless-decision-intake.md
-    sha256: f1f731b62cf93a2837c86efcd56d5937a7b6c7c8f52159e4849f0bfd34704849
+    sha256: 057325746f6453cc0e8a23a6ae38133fb83253300f8e82ad5b7a211b503ce8bb
    matches_commit: true
-    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/f0c60637e3fe592a23cc31ace8e4d386ff04b710/workplans/INFD-WP-0005-frictionless-decision-intake.md
+    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/workplans/INFD-WP-0005-frictionless-decision-intake.md
  - path: schemas/memo-intake.schema.json
    sha256: 93d2cd665dc4e0e4aff9a2d312084244e9a14f811591e5d108b06d0aa10ea500
    matches_commit: true
-    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/f0c60637e3fe592a23cc31ace8e4d386ff04b710/schemas/memo-intake.schema.json
+    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/schemas/memo-intake.schema.json
  - path: informed_decision/intake.py
    sha256: a733b4b608b9ea90b2c8293901aa14388a0bf0d3719f121038bfdcc1faca2038
    matches_commit: true
-    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/f0c60637e3fe592a23cc31ace8e4d386ff04b710/informed_decision/intake.py
+    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/informed_decision/intake.py
 - id: audit-core
  owner: audit-core
  repository: audit-core
--- a/tests/fixtures/knowledge/scenarios.yaml
+++ b/tests/fixtures/knowledge/scenarios.yaml
@ -106,7 +106,7 @@ cases:
    disposition: draft-one-question-human-binds
    sources: [informed-decision]
  - id: intake-readiness
-    question: INFD-WP-0005 has offline intake validation. May an agent assume POST /v1/memos is deployed and register itself as a submitter?
+    question: INFD-WP-0005 has an offline intake service and empty registries. May an agent assume POST /v1/memos is deployed and register itself as a submitter?
    route: informed-decision
    disposition: verify-owner-route-no-invented-admission
    sources: [informed-decision]
--- a/tools/build_adoption_draft.py
+++ b/tools/build_adoption_draft.py
@ -38,12 +38,14 @@ Changing the reviewed package requires a new review, not reuse of this answer.
 Evidence: knowledge/sources.yaml; docs/decision-runbook-integration.md;
 docs/operational-contracts.md; docs/adoption-review.md; docs/evidence/.
 Earlier provider reports and owner reviews retain their original release pins.
-Whitehat's separately authored offline 0.2.1 review found loaded-package binding
-and lifecycle gaps; 0.2.2 addresses them with local regressions. Review close-out
-and clean independent acceptance remain incomplete. No full Grok validation is claimed.
-Actual compaction/harness proof and wider adoption remain open in EMERGENT-WP-0002.
-0.2.3 re-pins Informed Decision at f0c60637 after its workplan recorded the
-unadmitted 0.2.2 route. No intake, grant, schema, or authority change is included.
+Whitehat's offline review accepted remediation of the two loaded-package library
+findings on the 0.2.3 digest, with disclosed shared-session limits. Provider
+routing renewal, continuity, and harness proof remain open. No full Grok
+validation is claimed.
+0.2.4 reviews Informed Decision at 15c330cc. An offline intake service, ledger,
+and doctrine constraints are documented there. No listener, submitter grant,
+custody, or live route is claimed. A creating approval without a retained
+receipt is not retried.

 The draft is unsubmitted. The proposed memo class and review group must be
 confirmed by the owner; a synthetic test grant proves format only. INFD-WP-0005
--- a/workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md
+++ b/workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md
@ -307,7 +307,8 @@ Current-release provider renewal waits: today's source check reports
 `informed-decision: changed`, and source-validated startup is withheld. Retain
 pin `f0c60637`; do not refresh from dirty sibling files. Await owner-published
 source provenance and reviewed reconciliation, then renew exact-release
-provider/routing and continuity/harness evidence under T05/T07. T07 stays
+provider/routing and continuity/harness evidence under T05/T07. The 0.2.4
+checkpoint below is that published-source review. T07 stays
 `wait`; T02/T05/T08/T09/T10 and the blocked plan status remain unchanged.
 Risk register and Whitehat task statuses belong to their owners.

@ -615,3 +616,27 @@ assent, fleet reach, provider certification, independent remediation acceptance,
 a wider pilot, or human adoption. 0.2.2 Codex/Claude reports and the timed-out
 Grok retrieval do not certify 0.2.3. Decision
 `d20a9750-2b29-534e-8227-fb866581a6ca` remains open. No DoD-Ok is claimed.
+
+
+## Offline intake reconciliation — knowledge 0.2.4, 2026-10-03
+
+Informed Decision's published revision
+`15c330ccd049cd19c76040e54dae41cd15d1359e` matches `origin/main`. Inventoried
+bytes match that commit. Since 0.2.3, the owner documented an offline intake
+service, schema-3 ledger, durable outbox, and doctrine constraints. Registries
+are empty and no listener is deployed. A creating approval without a retained
+receipt is not retried. Gate House's posing reply does not open a live route
+or rule proposed decision GH-DEC-2026-023.
+
+Pilot **0.2.4**, digest
+`025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3`.
+The decisions card, intake-readiness scenario, and contract rows carry those
+limits. All 24 owners verify as files. Startup and `decisions` retrieve as
+`verified-files`. 332 portable tests passed and the 9 owner-contract tests
+passed. The unsigned draft was regenerated and not submitted. Evidence:
+`docs/evidence/2026-10-03-024-offline-intake-repin.md`.
+
+T02, T05, T07, T08, T09, and T10 stay **wait**. The plan stays **blocked**.
+Whitehat's 0.2.3 library acceptance is not extended. Fresh 0.2.4 provider
+reports, RISK-F-0015 routing review, continuity/harness proof, wider pilots,
+human adoption, and fleet reach remain open. No DoD-Ok is claimed.