# Compatibility matrix — 2026-10-04

Version: `emergent.compatibility-matrix.v1`. Status: local map, owner
ratification open. This file does not amend owner contracts, reseal knowledge
0.2.6, or close EMERGENT-WP-0002.

The founder accepted knowledge 0.2.6, digest
`8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02`, as
non-normative orientation on 2026-10-04T00:16:08Z. Hub decision
`d20a9750-2b29-534e-8227-fb866581a6ca` stays open because that packet resolves
never. Source pins are `knowledge/sources.yaml`, verified 2026-10-03 as
documents. The sealed profile still pins informed-decision at `b4f6373`; that
checkout has since moved, and this matrix does not treat the moved tree as a
new sealed pin.

Rows map each generic rule in `specs/emergent-security-0.8.md` G1–G12 to an
estate route, the evidence that route requires, and the gap that blocks
normative distribution. Operational seams stay in
`docs/operational-contracts.md`. Local dispositions stay in
`EMERGENT-DEC-2026-001`.

| Rule | Local disposition | Estate route | Evidence before a protected effect | Open gap |
| --- | --- | --- | --- | --- |
| G1 Authority hierarchy | L0–L4 is reference scope vocabulary. A level is not a privilege rank. | security-canon vocabulary; gate-house doctrine. | Owner mapping of each level to an estate claim or an explicit non-mapping. | Security-canon and gate-house have not ratified the mapping. |
| G2 Trust | Identity, decision, and outcome trust stay separate. Trust is not global and not transitive. | key-cape and user-engine for identity claims; access-engine for a decision; the effect owner for outcome evidence. | Authenticated identity, an access-engine DecisionEnvelope, and the owner's effect evidence. | No estate trust product is declared by this package. |
| G3 Decision-class maturity | D0–D4 describes who decides a class. Meeting a reference checklist does not create a delegation. | informed-decision for a human answer; access-engine for a policy decision inside an admitted policy. | The class owner's envelope, tests, and recall conditions. | No decision-class registry is adopted. |
| G4 Temperature | Temperature is local change cost. It is separate from zone identity, tenant, and runtime environment. | zone-engine offline conformance for an explicit membership declaration. | Declaration, manifest or profile, and source lineage. | No live zone authorization endpoint. Temperature never becomes permission. |
| G5 Build mode | The generic HOT posture is illustrative. The founder's build directive, the task delegation, and owner change gates apply. | the-custodian orientation and the task owner. | Resolved scope and the owner's production-change record when the target is not disposable. | Per-zone end of build mode remains an owner or human decision. |
| G6 Platform-root | Agents emit the need for root authorization. They do not hold or exercise root. | Human root steward, recorded through the-custodian orientation. | A bounded recovery case, failed lower-scope paths, expiry, and independent evidence. | The reference `single_steward` mode is not verified here as the estate's current governance mode. |
| G7 Tenant governance | A tenant envelope only narrows the platform envelope. Tenant admins are not root. | tenant-engine for tenant facts. Authorization stays at access-engine. | Tenant identifier, lifecycle, role, guardrail source, and freshness. | The reference tenant-envelope service is not an estate service operated here. TEN-WP-0012 remains the owner's dependency record. |
| G8 Detection and response | Innate reference controls are review guidance. Containment budgets are future architecture. | kings-guard for a posture proposal; whitehat-security and risk-nexus for a finding; the defect owner for repair. | Source events and their completeness limits, or an authorized engagement for a live probe. | No automatic containment path exists. RISK-F-0015 stays open. |
| G9 Components and seams | `decide.py` is offline reference conformance. The historic "Gate-House" broker label is not the current Gate House role. | access-engine is the operational PDP. gate-house owns doctrine. secrets-engine owns credential lifecycle over OpenBao. ops-warden routes the need. | A current access-engine decision, the credential owner's lifecycle record, and the route the operator actually used. | Gate House, NetKingdom, and access-engine have not ratified this wording or any promotion of reference rules into policy. |
| G10 Bootstrap | Stages 0–5 are a reference sequence. The A6 default envelope is a reference fixture. | The class owner and the human who authorizes an immature class. | Identities, intent, deterministic policy tests, and an escalation path before any class is treated as routine. | Stage promotion is not an estate procedure. |
| G11 Failure modes | The checklist marks findings. It does not install a detector. | risk-nexus and the owner of the affected contract. | A sourced finding with its limitation. | No automated control is claimed from this table. |
| G12 Long-run direction | Direction is non-normative. It does not lower a current gate. | The owner of each guarantee that is actually owed. | That owner's published guarantee and recovery evidence. | No rollout metric in this row is accepted. |

Normative distribution stays blocked until the owner named in each open gap
records assent, rejection, or a narrower dependency. Silence is not assent.
Settled rows, and only those rows, may later change the canon, the agent
extract, policy data, and fixtures together.