tegwick
f9cba6fb35
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10238-7ecc-78e2-903d-075f50e913cc
48 lines
2 KiB
Markdown
48 lines
2 KiB
Markdown
# SCOPE
|
|
|
|
> Repository boundary reviewed 2026-10-03. See `INTENT.md` for purpose and
|
|
> `workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md`
|
|
> for the active ecosystem integration.
|
|
|
|
## One-liner
|
|
|
|
Security governance canon, reference decisions, and source-backed NetKingdom security knowledge for coding agents.
|
|
|
|
## Core Idea
|
|
|
|
Delegate understood decisions within explicit envelopes, escalate unresolved
|
|
decisions without widening privilege, and keep root human-controlled.
|
|
|
|
## In Scope
|
|
|
|
- Maintain the versioned canon, agent extract, YAML envelopes and risk scales.
|
|
- Maintain the pure Python reference evaluator and decision/governance fixtures.
|
|
- Publish source-backed agent knowledge and explicit mappings to existing
|
|
NetKingdom owners under EMERGENT-WP-0002.
|
|
|
|
## Out of Scope
|
|
|
|
- Operate a second estate authorization decision point or credential broker.
|
|
- Take over another repository's canon, operational routes, or enforcement.
|
|
- Treat reference decisions or knowledge loading as operational authority.
|
|
|
|
## Current State
|
|
|
|
- Canon and reference package: v0.8; Python 3.11+, PyYAML, pytest.
|
|
- Knowledge package: v0.2.1 pilot; 14 cards, 24 owners, 69 pinned sources,
|
|
read-only retrieval CLI, sealed exports and provider adapters.
|
|
- Verification: 327 portable tests plus 9 optional real owner-contract tests.
|
|
- Informed Decision unsigned adoption draft and native v0.2 orientation runbook;
|
|
no live submission or execution bridge. See docs/decision-runbook-integration.md.
|
|
- Thin pointers installed in four pilot repositories; fresh 0.2.0 pilot evidence
|
|
and 0.2.1 Codex/Claude scenario evidence are retained. Release 0.2.1 clarifies
|
|
withdrawn-procedure and missing-event recipients after repeat routing defects.
|
|
Independent review, full provider validation, actual compaction/resume and
|
|
broader adoption remain live tasks in EMERGENT-WP-0002.
|
|
- No running service, credential issuer or runtime enforcement is provided.
|
|
|
|
## Getting Oriented
|
|
|
|
- Start with: INTENT.md
|
|
- Agent instructions: AGENTS.md
|
|
- Workplans: workplans/
|