tegwick
54240a6670
Codex and Claude each resumed the same session after the startup marker changed, reported package 0.2.4, and refused effect authority. Compaction, harness proof, and the human gates stay open. EMERGENT-WP-0002 stays blocked. Assistant: grok Assistant-Session: 01a10286-9185-7bb2-b411-89cf6ab4c0c6
83 lines
4.2 KiB
Markdown
83 lines
4.2 KiB
Markdown
# SCOPE
|
|
|
|
> Repository boundary reviewed 2026-10-03. See `INTENT.md` for purpose and
|
|
> `workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md`
|
|
> for the active ecosystem integration.
|
|
|
|
## One-liner
|
|
|
|
Security governance canon, reference decisions, and source-backed NetKingdom security knowledge for coding agents.
|
|
|
|
## Core Idea
|
|
|
|
Delegate understood decisions within explicit envelopes, escalate unresolved
|
|
decisions without widening privilege, and keep root human-controlled.
|
|
|
|
## In Scope
|
|
|
|
- Maintain the versioned canon, agent extract, YAML envelopes and risk scales.
|
|
- Maintain the pure Python reference evaluator and decision/governance fixtures.
|
|
- Publish source-backed agent knowledge and explicit mappings to existing
|
|
NetKingdom owners under EMERGENT-WP-0002.
|
|
|
|
## Out of Scope
|
|
|
|
- Operate a second estate authorization decision point or credential broker.
|
|
- Take over another repository's canon, operational routes, or enforcement.
|
|
- Treat reference decisions or knowledge loading as operational authority.
|
|
|
|
## Current State
|
|
|
|
- Canon and reference package: v0.8; Python 3.11+, PyYAML, pytest.
|
|
- Knowledge package: v0.2.4 pilot; 14 cards, 24 owners, 69 pinned sources,
|
|
read-only retrieval CLI, sealed exports and provider adapters.
|
|
- Verification: 332 portable tests plus 9 optional real owner-contract tests.
|
|
- Informed Decision unsigned adoption draft and native v0.2 orientation runbook;
|
|
no live submission or execution bridge. See docs/decision-runbook-integration.md.
|
|
- Thin pointers installed in four pilot repositories; fresh 0.2.0 pilot evidence
|
|
and 0.2.1 Codex/Claude scenario evidence are retained. Release 0.2.1 clarifies
|
|
withdrawn-procedure and missing-event recipients after repeat routing defects.
|
|
Independent review, context compaction, and broader adoption remain live
|
|
tasks in EMERGENT-WP-0002.
|
|
- No running service, credential issuer or runtime enforcement is provided.
|
|
|
|
## Getting Oriented
|
|
|
|
- Start with: INTENT.md
|
|
- Agent instructions: AGENTS.md
|
|
- Workplans: workplans/
|
|
|
|
|
|
Owner reviews now provide scoped doctrine, vocabulary and PDP-boundary evidence
|
|
for 0.2.1; their institutional/human adoption limits remain explicit. Whitehat
|
|
reported two loaded-package consistency findings, addressed locally in 0.2.2
|
|
with five regression cases. Whitehat review close-out was interrupted by a
|
|
platform cybersecurity-risk block. The later T03 disposition accepts the
|
|
scoped offline review and the 0.2.3 library remediation, with disclosed session
|
|
limits. RISK-F-0015 remains open.
|
|
Glas model evidence now leaves unreported observed models unknown. Current native
|
|
continuity requirements remain in GLAS-WP-0012; distribution stays a draft.
|
|
|
|
Fresh final 0.2.2 Codex and Claude runs each answered 28 scenarios and preserved
|
|
all substantive authority/evidence boundaries in implementing-worker review;
|
|
recipient qualifications remain. All four pilot owners supplied documentary
|
|
feedback on retained scenarios. Grok has retrieval but no completed answer;
|
|
exact-packet human adoption/admission, native continuity, independent remediation
|
|
acceptance, current wider pilots and rollout/reach keep EMERGENT-WP-0002 blocked.
|
|
|
|
Release 0.2.4 reviews Informed Decision's published offline intake at
|
|
`15c330cc`. All 24 owners verify as files. The decisions card records empty
|
|
registries, no live listener, and no automatic retry of a creating approval
|
|
without a retained receipt. The unsigned draft binds digest
|
|
`025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3`.
|
|
See `docs/evidence/2026-10-03-024-offline-intake-repin.md`. Fresh 0.2.4 Codex,
|
|
Claude, and Grok fixture probes answered all 28 scenarios; implementing review
|
|
found no unsafe recommendation, with recipient qualifications retained. See
|
|
`docs/evidence/2026-10-03-024-provider-probes.md`. Current-release Claude pilots
|
|
in the four retained repositories preserve those boundaries, and one Grok
|
|
session reloaded startup after resume. See
|
|
`docs/evidence/2026-10-03-024-current-release-pilots.md`. Codex, Claude, and
|
|
Grok each resumed after the startup marker changed and refused effect authority.
|
|
See `docs/evidence/2026-10-03-024-provider-resume.md`. Compaction, harness
|
|
proof, owner feedback, human adoption, and fleet reach still block
|
|
EMERGENT-WP-0002.
|