emergent-security/docs/netkingdom-integration-map.md
tegwick e32a9c5dfe Seal knowledge 0.2.5 on the Informed Decision delivery pin.
Startup was withheld because the owner moved past 15c330cc. The new
seal reviews b4f6373, including local delivery limits and the
boolean-preserving dev forwarder at state-hub d61ba32. The unsigned
draft was regenerated and not submitted. EMERGENT-WP-0002 stays blocked.

Assistant: grok
Assistant-Session: 01a10286-9185-7bb2-b411-89cf6ab4c0c6
2026-10-03 22:31:14 +02:00

12 KiB

NetKingdom integration map

Reviewed 2026-10-03. Source-document review only; no live health or owner assent is inferred. All references are pinned; knowledge/sources.yaml also records file hashes and review dates.

Owner Role Sources
net-kingdom canon-publication SECURITY-COMPANION.md; canon/standards/security-layer-model_v0.7.md; docs/secrets-engine-security-infrastructure-boundary.md
gate-house doctrine INTENT.md; docs/contracts/authority-context.md
ops-warden routing-and-ssh INTENT.md; wiki/AccessRouting.md; wiki/NetKingdomSecurityMap.md
ops-mason construction INTENT.md; docs/kubernetes-plane.md
access-engine PDP INTENT.md; docs/decision-record-contract.md; docs/canonical-request-digest.md; docs/action-bound-authorization-contract.md
security-canon authority-vocabulary README.md; docs/vocabulary-card.md; docs/adr-001-securitycanon-boundary.md
user-engine identity-facts INTENT.md; docs/contracts.md
tenant-engine tenant-facts SCOPE.md; docs/tenant-guardrail-policy.md; docs/flex-auth-integration.md
zone-engine offline-zone-conformance SCOPE.md; docs/pip-claim-boundary.md
whitehat-security adversarial-evidence INTENT.md; docs/rules-of-engagement.md
kings-guard posture-proposals INTENT.md; README.md; docs/AdjacentSystemBoundary.md
secrets-engine credential-lifecycle README.md; docs/ops-warden-routing-contract.md; docs/approval-consumption.md
key-cape authentication README.md; INTENT.md
approval-engine approval-facts README.md; docs/approval-claim.md; docs/approval-consumption.md
informed-decision pep-shaped README.md; INTENT.md; SCOPE.md
runbook-tutorials guided-procedures INTENT.md; SCOPE.md; docs/pack-spec-v0.2.md
audit-core evidence-custody README.md; docs/audit-backend-contract.md
risk-nexus findings README.md; findings/README.md
info-tech-canon shared-semantics README.md
ops-bridge transport README.txt; INTENT.md
railiance-master workload-operations README.md; INTENT.md
glas-harness session-execution README.md; docs/harness-contract.md; docs/execution-profiles.md
the-custodian estate-orientation docs/agent-environment-orientation.md; docs/agent-autonomy-decision.md; docs/security-close-down-checklist.md
emergent-security offline-reference specs/emergent-security-0.8.md; envelopes/default-envelope.yaml

Capability findings and dependencies

  • zone-engine remains offline conformance; its live API is intentionally absent (ZONE-WP-0002), not a deployment to invent.
  • kings-guard offers observation/posture scaffolding and a real-event input pilot; continuous production observation is unverified and containment is proposal-only.
  • ops-mason declares its founder-approved structure-only plan exception. Do not advertise it as consulting access-engine.
  • tenant-engine SCOPE contains old gaps beside newer shipped entries. TEN-WP-0012 tracks outstanding external custody/canon dependencies; treat runtime readiness separately.
  • access-engine decision-record documentation contains old unsigned-channel prose beside newer signature fields; actual consumer authentication/enforcement requires current owner proof.
  • the-custodian CUST-WP-0073 tracks agent credential separation. Loading this knowledge does not close that work.
  • glas-harness GLAS-WP-0008 is finished: operational readiness is separate from profile selection. GLAS-WP-0012 owns remaining runtime/provider acceptance and continuity proof; blocked/unverified profiles remain so.
  • gate-house GH-WP-0004 holds layer-declaration work. This repo declares its own boundary; it does not declare conformance on behalf of another owner.
  • OpenBao is referenced through secrets-engine and the net-kingdom infrastructure boundary; it is not a new repository or credential route owned here.

Interpretation

Use docs/operational-contracts.md for the request/evidence seams and docs/decisions/EMERGENT-DEC-2026-001-integration-profile.md for compatibility dispositions. The knowledge cards cite their sources via the retrieval receipt. Owner documents, reference fixtures, deployed state, and independent evidence are different kinds of claims. Only the first two were inspected for this inventory. No outside repository was modified by generating this map.

The detailed decision/procedure integration is in docs/decision-runbook-integration.md. INFD-WP-0005 has a local intake service with empty registries. Its listener, custody, admission, and rollout remain that owner's blocked work. Dev forwarding preserves governed booleans and does not admit a submitter. Runbook execution and index (RBT-WP-0006) likewise remain owner work. This package creates neither capability.