emergent-security/docs/decisions/compatibility-matrix-2026-10-04.md

Compatibility matrix — 2026-10-04

Version: emergent.compatibility-matrix.v1. Status: local map, owner ratification open. This file does not amend owner contracts, reseal knowledge 0.2.6, or close EMERGENT-WP-0002.

The founder accepted knowledge 0.2.6, digest 8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02, as non-normative orientation on 2026-10-04T00:16:08Z. Hub decision d20a9750-2b29-534e-8227-fb866581a6ca stays open because that packet resolves never. Source pins are knowledge/sources.yaml, verified 2026-10-03 as documents. The sealed profile still pins informed-decision at b4f6373; that checkout has since moved, and this matrix does not treat the moved tree as a new sealed pin.

Rows map each generic rule in specs/emergent-security-0.8.md G1–G12 to an estate route, the evidence that route requires, and the gap that blocks normative distribution. Operational seams stay in docs/operational-contracts.md. Local dispositions stay in EMERGENT-DEC-2026-001.

Rule	Local disposition	Estate route	Evidence before a protected effect	Open gap
G1 Authority hierarchy	L0–L4 is reference scope vocabulary. A level is not a privilege rank.	security-canon vocabulary; gate-house doctrine.	Owner mapping of each level to an estate claim or an explicit non-mapping.	Security-canon and gate-house have not ratified the mapping.
G2 Trust	Identity, decision, and outcome trust stay separate. Trust is not global and not transitive.	key-cape and user-engine for identity claims; access-engine for a decision; the effect owner for outcome evidence.	Authenticated identity, an access-engine DecisionEnvelope, and the owner's effect evidence.	No estate trust product is declared by this package.
G3 Decision-class maturity	D0–D4 describes who decides a class. Meeting a reference checklist does not create a delegation.	informed-decision for a human answer; access-engine for a policy decision inside an admitted policy.	The class owner's envelope, tests, and recall conditions.	No decision-class registry is adopted.
G4 Temperature	Temperature is local change cost. It is separate from zone identity, tenant, and runtime environment.	zone-engine offline conformance for an explicit membership declaration.	Declaration, manifest or profile, and source lineage.	No live zone authorization endpoint. Temperature never becomes permission.
G5 Build mode	The generic HOT posture is illustrative. The founder's build directive, the task delegation, and owner change gates apply.	the-custodian orientation and the task owner.	Resolved scope and the owner's production-change record when the target is not disposable.	Per-zone end of build mode remains an owner or human decision.
G6 Platform-root	Agents emit the need for root authorization. They do not hold or exercise root.	Human root steward, recorded through the-custodian orientation.	A bounded recovery case, failed lower-scope paths, expiry, and independent evidence.	The reference single_steward mode is not verified here as the estate's current governance mode.
G7 Tenant governance	A tenant envelope only narrows the platform envelope. Tenant admins are not root.	tenant-engine for tenant facts. Authorization stays at access-engine.	Tenant identifier, lifecycle, role, guardrail source, and freshness.	The reference tenant-envelope service is not an estate service operated here. TEN-WP-0012 remains the owner's dependency record.
G8 Detection and response	Innate reference controls are review guidance. Containment budgets are future architecture.	kings-guard for a posture proposal; whitehat-security and risk-nexus for a finding; the defect owner for repair.	Source events and their completeness limits, or an authorized engagement for a live probe.	No automatic containment path exists. RISK-F-0015 stays open.
G9 Components and seams	decide.py is offline reference conformance. The historic "Gate-House" broker label is not the current Gate House role.	access-engine is the operational PDP. gate-house owns doctrine. secrets-engine owns credential lifecycle over OpenBao. ops-warden routes the need.	A current access-engine decision, the credential owner's lifecycle record, and the route the operator actually used.	Gate House, NetKingdom, and access-engine have not ratified this wording or any promotion of reference rules into policy.
G10 Bootstrap	Stages 0–5 are a reference sequence. The A6 default envelope is a reference fixture.	The class owner and the human who authorizes an immature class.	Identities, intent, deterministic policy tests, and an escalation path before any class is treated as routine.	Stage promotion is not an estate procedure.
G11 Failure modes	The checklist marks findings. It does not install a detector.	risk-nexus and the owner of the affected contract.	A sourced finding with its limitation.	No automated control is claimed from this table.
G12 Long-run direction	Direction is non-normative. It does not lower a current gate.	The owner of each guarantee that is actually owed.	That owner's published guarantee and recovery evidence.	No rollout metric in this row is accepted.

Normative distribution stays blocked until the owner named in each open gap records assent, rejection, or a narrower dependency. Silence is not assent. Settled rows, and only those rows, may later change the canon, the agent extract, policy data, and fixtures together.