coulomb/emergent-security
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
emergent-security/docs/netkingdom-integration-map.md
tegwick e32a9c5dfe Seal knowledge 0.2.5 on the Informed Decision delivery pin. 
Startup was withheld because the owner moved past 15c330cc. The new
seal reviews b4f6373, including local delivery limits and the
boolean-preserving dev forwarder at state-hub d61ba32. The unsigned
draft was regenerated and not submitted. EMERGENT-WP-0002 stays blocked.

Assistant: grok
Assistant-Session: 01a10286-9185-7bb2-b411-89cf6ab4c0c6
2026-10-03 22:31:14 +02:00

59 lines
12 KiB
Markdown
Raw Blame History

# NetKingdom integration map
Reviewed 2026-10-03. Source-document review only; no live health or owner assent is inferred.
All references are pinned; `knowledge/sources.yaml` also records file hashes and review dates.
| Owner | Role | Sources |
| --- | --- | --- |
| net-kingdom | canon-publication | [SECURITY-COMPANION.md](https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/89cdcae051dacae27eb1caf0dbb3e4a0b1c5b6ce/SECURITY-COMPANION.md); [canon/standards/security-layer-model_v0.7.md](https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/89cdcae051dacae27eb1caf0dbb3e4a0b1c5b6ce/canon/standards/security-layer-model_v0.7.md); [docs/secrets-engine-security-infrastructure-boundary.md](https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/89cdcae051dacae27eb1caf0dbb3e4a0b1c5b6ce/docs/secrets-engine-security-infrastructure-boundary.md) |
| gate-house | doctrine | [INTENT.md](https://forgejo.coulomb.social/coulomb/gate-house/src/commit/6f80ba860453416f44b83ff2709ee21b6e89e456/INTENT.md); [docs/contracts/authority-context.md](https://forgejo.coulomb.social/coulomb/gate-house/src/commit/6f80ba860453416f44b83ff2709ee21b6e89e456/docs/contracts/authority-context.md) |
| ops-warden | routing-and-ssh | [INTENT.md](https://forgejo.coulomb.social/coulomb/ops-warden/src/commit/f1e25c328a4456120985b28d9f5ffa802eddb036/INTENT.md); [wiki/AccessRouting.md](https://forgejo.coulomb.social/coulomb/ops-warden/src/commit/f1e25c328a4456120985b28d9f5ffa802eddb036/wiki/AccessRouting.md); [wiki/NetKingdomSecurityMap.md](https://forgejo.coulomb.social/coulomb/ops-warden/src/commit/f1e25c328a4456120985b28d9f5ffa802eddb036/wiki/NetKingdomSecurityMap.md) |
| ops-mason | construction | [INTENT.md](https://forgejo.coulomb.social/coulomb/ops-mason/src/commit/20eef043ed93bc152f5096b45d8aa9cb241ec002/INTENT.md); [docs/kubernetes-plane.md](https://forgejo.coulomb.social/coulomb/ops-mason/src/commit/20eef043ed93bc152f5096b45d8aa9cb241ec002/docs/kubernetes-plane.md) |
| access-engine | PDP | [INTENT.md](https://forgejo.coulomb.social/coulomb/access-engine/src/commit/424f1e500962470bfbe6f5ac4200ce200ecdb73e/INTENT.md); [docs/decision-record-contract.md](https://forgejo.coulomb.social/coulomb/access-engine/src/commit/424f1e500962470bfbe6f5ac4200ce200ecdb73e/docs/decision-record-contract.md); [docs/canonical-request-digest.md](https://forgejo.coulomb.social/coulomb/access-engine/src/commit/424f1e500962470bfbe6f5ac4200ce200ecdb73e/docs/canonical-request-digest.md); [docs/action-bound-authorization-contract.md](https://forgejo.coulomb.social/coulomb/access-engine/src/commit/424f1e500962470bfbe6f5ac4200ce200ecdb73e/docs/action-bound-authorization-contract.md) |
| security-canon | authority-vocabulary | [README.md](https://forgejo.coulomb.social/coulomb/security-canon/src/commit/bbd44332543e1cc40b2ebed10ec06123b9c798ea/README.md); [docs/vocabulary-card.md](https://forgejo.coulomb.social/coulomb/security-canon/src/commit/bbd44332543e1cc40b2ebed10ec06123b9c798ea/docs/vocabulary-card.md); [docs/adr-001-securitycanon-boundary.md](https://forgejo.coulomb.social/coulomb/security-canon/src/commit/bbd44332543e1cc40b2ebed10ec06123b9c798ea/docs/adr-001-securitycanon-boundary.md) |
| user-engine | identity-facts | [INTENT.md](https://forgejo.coulomb.social/coulomb/user-engine/src/commit/44ed6d58604fd0b3c31d29a00496e9c97dabbbac/INTENT.md); [docs/contracts.md](https://forgejo.coulomb.social/coulomb/user-engine/src/commit/44ed6d58604fd0b3c31d29a00496e9c97dabbbac/docs/contracts.md) |
| tenant-engine | tenant-facts | [SCOPE.md](https://forgejo.coulomb.social/coulomb/tenant-engine/src/commit/4f7fd114089f7f41cf5459a8e0caf51a3c31f4fd/SCOPE.md); [docs/tenant-guardrail-policy.md](https://forgejo.coulomb.social/coulomb/tenant-engine/src/commit/4f7fd114089f7f41cf5459a8e0caf51a3c31f4fd/docs/tenant-guardrail-policy.md); [docs/flex-auth-integration.md](https://forgejo.coulomb.social/coulomb/tenant-engine/src/commit/4f7fd114089f7f41cf5459a8e0caf51a3c31f4fd/docs/flex-auth-integration.md) |
| zone-engine | offline-zone-conformance | [SCOPE.md](https://forgejo.coulomb.social/coulomb/zone-engine/src/commit/407fa86b97ea8f76f4af8967be33c7402bc56707/SCOPE.md); [docs/pip-claim-boundary.md](https://forgejo.coulomb.social/coulomb/zone-engine/src/commit/407fa86b97ea8f76f4af8967be33c7402bc56707/docs/pip-claim-boundary.md) |
| whitehat-security | adversarial-evidence | [INTENT.md](https://forgejo.coulomb.social/coulomb/whitehat-security/src/commit/b5cc6706b95a7e639a89429aee1a4f4a4ead405f/INTENT.md); [docs/rules-of-engagement.md](https://forgejo.coulomb.social/coulomb/whitehat-security/src/commit/b5cc6706b95a7e639a89429aee1a4f4a4ead405f/docs/rules-of-engagement.md) |
| kings-guard | posture-proposals | [INTENT.md](https://forgejo.coulomb.social/coulomb/kings-guard/src/commit/200fd17ab3b06e4c2c52d8cacb17a33d4dbc822d/INTENT.md); [README.md](https://forgejo.coulomb.social/coulomb/kings-guard/src/commit/200fd17ab3b06e4c2c52d8cacb17a33d4dbc822d/README.md); [docs/AdjacentSystemBoundary.md](https://forgejo.coulomb.social/coulomb/kings-guard/src/commit/200fd17ab3b06e4c2c52d8cacb17a33d4dbc822d/docs/AdjacentSystemBoundary.md) |
| secrets-engine | credential-lifecycle | [README.md](https://forgejo.coulomb.social/coulomb/secrets-engine/src/commit/3149654609d0c738d05002d2ca08e40e774bbb30/README.md); [docs/ops-warden-routing-contract.md](https://forgejo.coulomb.social/coulomb/secrets-engine/src/commit/3149654609d0c738d05002d2ca08e40e774bbb30/docs/ops-warden-routing-contract.md); [docs/approval-consumption.md](https://forgejo.coulomb.social/coulomb/secrets-engine/src/commit/3149654609d0c738d05002d2ca08e40e774bbb30/docs/approval-consumption.md) |
| key-cape | authentication | [README.md](https://forgejo.coulomb.social/coulomb/key-cape/src/commit/672e1faf4b3401ff7bf68bb0b29f8dc50ca51ac6/README.md); [INTENT.md](https://forgejo.coulomb.social/coulomb/key-cape/src/commit/672e1faf4b3401ff7bf68bb0b29f8dc50ca51ac6/INTENT.md) |
| approval-engine | approval-facts | [README.md](https://forgejo.coulomb.social/coulomb/approval-engine/src/commit/901d569757db967a7a595b3d87953b507f002c05/README.md); [docs/approval-claim.md](https://forgejo.coulomb.social/coulomb/approval-engine/src/commit/901d569757db967a7a595b3d87953b507f002c05/docs/approval-claim.md); [docs/approval-consumption.md](https://forgejo.coulomb.social/coulomb/approval-engine/src/commit/901d569757db967a7a595b3d87953b507f002c05/docs/approval-consumption.md) |
| informed-decision | pep-shaped | [README.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/b4f637326ba3c2526f4648c4c90544948408d53f/README.md); [INTENT.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/b4f637326ba3c2526f4648c4c90544948408d53f/INTENT.md); [SCOPE.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/b4f637326ba3c2526f4648c4c90544948408d53f/SCOPE.md) |
| runbook-tutorials | guided-procedures | [INTENT.md](https://forgejo.coulomb.social/coulomb/runbook-tutorials/src/commit/df97fadf5decfcdb5c3c6ab90211226335ffdf8e/INTENT.md); [SCOPE.md](https://forgejo.coulomb.social/coulomb/runbook-tutorials/src/commit/df97fadf5decfcdb5c3c6ab90211226335ffdf8e/SCOPE.md); [docs/pack-spec-v0.2.md](https://forgejo.coulomb.social/coulomb/runbook-tutorials/src/commit/df97fadf5decfcdb5c3c6ab90211226335ffdf8e/docs/pack-spec-v0.2.md) |
| audit-core | evidence-custody | [README.md](https://forgejo.coulomb.social/coulomb/audit-core/src/commit/fdca5758e16f4eb3e0bbb9e281cf9e5bb5ad7063/README.md); [docs/audit-backend-contract.md](https://forgejo.coulomb.social/coulomb/audit-core/src/commit/fdca5758e16f4eb3e0bbb9e281cf9e5bb5ad7063/docs/audit-backend-contract.md) |
| risk-nexus | findings | [README.md](https://forgejo.coulomb.social/coulomb/risk-nexus/src/commit/0b3cfb81c65221477f17c05d0916902f690d4427/README.md); [findings/README.md](https://forgejo.coulomb.social/coulomb/risk-nexus/src/commit/0b3cfb81c65221477f17c05d0916902f690d4427/findings/README.md) |
| info-tech-canon | shared-semantics | [README.md](https://forgejo.coulomb.social/coulomb/info-tech-canon/src/commit/b30c831b387b11b41b2a4206e516fac65b84c29f/README.md) |
| ops-bridge | transport | [README.txt](https://forgejo.coulomb.social/coulomb/ops-bridge/src/commit/190ef1e188e12c606f1359325fd9fdd1dbef29e2/README.txt); [INTENT.md](https://forgejo.coulomb.social/coulomb/ops-bridge/src/commit/190ef1e188e12c606f1359325fd9fdd1dbef29e2/INTENT.md) |
| railiance-master | workload-operations | [README.md](https://forgejo.coulomb.social/coulomb/railiance-master/src/commit/a61b31396f0936ddd302b27a5222046240e413b2/README.md); [INTENT.md](https://forgejo.coulomb.social/coulomb/railiance-master/src/commit/a61b31396f0936ddd302b27a5222046240e413b2/INTENT.md) |
| glas-harness | session-execution | [README.md](https://forgejo.coulomb.social/coulomb/glas-harness/src/commit/5ce4f38aedfd27cc783131f18480df02e2951514/README.md); [docs/harness-contract.md](https://forgejo.coulomb.social/coulomb/glas-harness/src/commit/5ce4f38aedfd27cc783131f18480df02e2951514/docs/harness-contract.md); [docs/execution-profiles.md](https://forgejo.coulomb.social/coulomb/glas-harness/src/commit/5ce4f38aedfd27cc783131f18480df02e2951514/docs/execution-profiles.md) |
| the-custodian | estate-orientation | [docs/agent-environment-orientation.md](https://forgejo.coulomb.social/coulomb/the-custodian/src/commit/f303bdaff1a7f3f2305a375a3b5870cb0262e70c/docs/agent-environment-orientation.md); [docs/agent-autonomy-decision.md](https://forgejo.coulomb.social/coulomb/the-custodian/src/commit/f303bdaff1a7f3f2305a375a3b5870cb0262e70c/docs/agent-autonomy-decision.md); [docs/security-close-down-checklist.md](https://forgejo.coulomb.social/coulomb/the-custodian/src/commit/f303bdaff1a7f3f2305a375a3b5870cb0262e70c/docs/security-close-down-checklist.md) |
| emergent-security | offline-reference | [specs/emergent-security-0.8.md](https://forgejo.coulomb.social/coulomb/emergent-security/src/commit/caa7da2397ff860dba4de2824da998ed8c045ef2/specs/emergent-security-0.8.md); [envelopes/default-envelope.yaml](https://forgejo.coulomb.social/coulomb/emergent-security/src/commit/caa7da2397ff860dba4de2824da998ed8c045ef2/envelopes/default-envelope.yaml) |
## Capability findings and dependencies
- zone-engine remains offline conformance; its live API is intentionally absent (ZONE-WP-0002), not a deployment to invent.
- kings-guard offers observation/posture scaffolding and a real-event input pilot; continuous production observation is unverified and containment is proposal-only.
- ops-mason declares its founder-approved structure-only plan exception. Do not advertise it as consulting access-engine.
- tenant-engine SCOPE contains old gaps beside newer shipped entries. TEN-WP-0012 tracks outstanding external custody/canon dependencies; treat runtime readiness separately.
- access-engine decision-record documentation contains old unsigned-channel prose beside newer signature fields; actual consumer authentication/enforcement requires current owner proof.
- the-custodian CUST-WP-0073 tracks agent credential separation. Loading this knowledge does not close that work.
- glas-harness GLAS-WP-0008 is finished: operational readiness is separate from profile selection. GLAS-WP-0012 owns remaining runtime/provider acceptance and continuity proof; blocked/unverified profiles remain so.
- gate-house GH-WP-0004 holds layer-declaration work. This repo declares its own boundary; it does not declare conformance on behalf of another owner.
- OpenBao is referenced through secrets-engine and the net-kingdom infrastructure boundary; it is not a new repository or credential route owned here.
## Interpretation
Use `docs/operational-contracts.md` for the request/evidence seams and
`docs/decisions/EMERGENT-DEC-2026-001-integration-profile.md` for compatibility
dispositions. The knowledge cards cite their sources via the retrieval receipt.
Owner documents, reference fixtures, deployed state, and independent evidence
are different kinds of claims. Only the first two were inspected for this inventory.
No outside repository was modified by generating this map.
The detailed decision/procedure integration is in `docs/decision-runbook-integration.md`.
INFD-WP-0005 has a local intake service with empty registries. Its listener,
custody, admission, and rollout remain that owner's blocked work. Dev
forwarding preserves governed booleans and does not admit a submitter.
Runbook execution and index (RBT-WP-0006) likewise remain owner work. This
package creates neither capability.
Reference in a new issue View git blame Copy permalink