spec: runbook-pack/v0.2
id: emergent.security-orientation
title: Prepare a scoped security decision and procedure handoff
owner: emergent-security
engine: native
outcome: A reviewed orientation receipt and non-secret handoff, or an explicit unresolved prerequisite. No infrastructure effect or human approval is performed.
timeout: {seconds: 120, on_timeout: stop}
framing:
  - Rehearsal and preparation only. A succeeded run never authorizes an effect or asserts a human answer.
  - Use manual mode. Every step is manual-only; no automatic verification commands are provided.
  - Read docs/decision-runbook-integration.md before starting. Reload knowledge after scope or source changes.
  - Evidence fields contain non-secret references only, never credentials or private decision packets.
actors:
  - id: preparer
    role: Delegated agent or operator
    description: Prepares the scope and draft; cannot impersonate a human reviewer.
    privileges: []
datapoints:
  - id: task_ref
    label: Delegated task reference
    type: string
    ask_in: orient
  - id: target_ref
    label: Explicit target and tenant or confirmed non-tenant scope
    type: string
    ask_in: orient
  - id: environment
    label: Target environment, explicitly established
    type: enum
    values: [rehearsal, staging, production, unknown]
    ask_in: orient
stages:
  - id: orient
    title: Resolve scope and knowledge
    goal: Know the actual scope and source status before preparing the handoff.
    steps:
      - id: read-context
        title: Read current knowledge and scope
        actor: preparer
        owner: emergent-security
        auto_confirm: manual-only
        reversible: true
        idempotent: idempotent
        uses: [task_ref, target_ref, environment]
        description: Retrieve start plus decisions and runbooks with the knowledge CLI. Unknown scope or withheld cards stop the handoff; ask the delegator or source owner. Offline snapshots are orientation only.
        verify: {expect: manual, done_when: Scope is resolved and the release digest and source status have been inspected.}
        evidence: [knowledge_receipt_ref, scope_evidence_ref]
    gates:
      - id: context-reviewed
        title: Context inspected
        goal: Bounded preparation from current sources
        blocking: true
        checks:
          - {expect: manual, done_when: No unresolved scope or withheld source is being represented as resolved.}
  - id: prepare
    title: Prepare the appropriate human and owner handoff
    goal: Keep drafting distinct from binding and execution.
    requires: [gate:context-reviewed]
    steps:
      - id: prepare-question
        title: Draft one question or document why no human decision is required
        actor: preparer
        owner: emergent-security
        auto_confirm: manual-only
        reversible: true
        idempotent: idempotent
        description: Follow the decisions card. Prepare alternatives, consequences, exact requested act and non-secret packet references. Mark pending human review explicitly. If existing delegation suffices, record that basis rather than creating an unnecessary approval.
        verify: {expect: manual, done_when: "Draft remains unsigned and unsubmitted, or existing delegation is identified; no human answer is fabricated."}
        evidence: [decision_draft_or_delegation_ref]
      - id: select-owner-procedure
        title: Identify the current procedure and its unresolved prerequisites
        actor: preparer
        owner: emergent-security
        auto_confirm: manual-only
        reversible: true
        idempotent: idempotent
        requires: [prepare-question]
        description: Identify the exact owning repository, pack path and digest. List required human disposition, approval object, PDP decision, credential route and verification/rollback evidence as applicable. If unavailable, record the owner dependency; do not invent an endpoint or execute anything.
        verify: {expect: manual, done_when: The selected owner procedure or missing-owner dependency is explicit and all effect prerequisites remain separately identified.}
        evidence: [procedure_or_dependency_ref, prerequisites_ref]
  - id: handoff
    title: Record the preparation result
    goal: Deliver bounded evidence without asserting approval or execution.
    requires: [select-owner-procedure]
    steps:
      - id: record-handoff
        title: Record next owner and limitations
        actor: preparer
        owner: emergent-security
        auto_confirm: manual-only
        reversible: true
        idempotent: idempotent
        description: Record knowledge receipt, pack digest, draft reference, owner and outstanding checks in the live work record. Stop here. An owner later verifies human/approval/PDP prerequisites before any effect. Review the local run export before sharing; its seal is not independent evidence custody.
        verify: {expect: manual, done_when: "The work record distinguishes prepared, pending human answer, authorized and executed, and claims only what was observed."}
        evidence: [work_record_ref, limitations_ref]
ownership:
  - {concern: This preparation and orientation pack, owner: emergent-security}
  - {concern: Generic procedure engine and schema, owner: runbook-tutorials}
  - {concern: Human presentation and binding evidence, owner: informed-decision}
  - {concern: Runtime approval object and consumption, owner: approval-engine}
  - {concern: Operational policy decision, owner: access-engine}