emergent-security/docs/netkingdom-integration-map.md
tegwick ee2e17a2d2 Reconcile published offline intake in knowledge 0.2.4
Informed Decision 15c330cc documents an offline intake service with empty
registries and no live listener. The decisions card carries those limits.
The unsigned draft binds the new digest and is not submitted.
EMERGENT-WP-0002 stays blocked.

Assistant: grok
Assistant-Session: 01a10286-9185-7bb2-b411-89cf6ab4c0c6
2026-10-03 20:14:41 +02:00

12 KiB

NetKingdom integration map

Reviewed 2026-10-03. Source-document review only; no live health or owner assent is inferred. All references are pinned; knowledge/sources.yaml also records file hashes and review dates.

Owner Role Sources
net-kingdom canon-publication SECURITY-COMPANION.md; canon/standards/security-layer-model_v0.7.md; docs/secrets-engine-security-infrastructure-boundary.md
gate-house doctrine INTENT.md; docs/contracts/authority-context.md
ops-warden routing-and-ssh INTENT.md; wiki/AccessRouting.md; wiki/NetKingdomSecurityMap.md
ops-mason construction INTENT.md; docs/kubernetes-plane.md
access-engine PDP INTENT.md; docs/decision-record-contract.md; docs/canonical-request-digest.md; docs/action-bound-authorization-contract.md
security-canon authority-vocabulary README.md; docs/vocabulary-card.md; docs/adr-001-securitycanon-boundary.md
user-engine identity-facts INTENT.md; docs/contracts.md
tenant-engine tenant-facts SCOPE.md; docs/tenant-guardrail-policy.md; docs/flex-auth-integration.md
zone-engine offline-zone-conformance SCOPE.md; docs/pip-claim-boundary.md
whitehat-security adversarial-evidence INTENT.md; docs/rules-of-engagement.md
kings-guard posture-proposals INTENT.md; README.md; docs/AdjacentSystemBoundary.md
secrets-engine credential-lifecycle README.md; docs/ops-warden-routing-contract.md; docs/approval-consumption.md
key-cape authentication README.md; INTENT.md
approval-engine approval-facts README.md; docs/approval-claim.md; docs/approval-consumption.md
informed-decision pep-shaped README.md; INTENT.md; SCOPE.md
runbook-tutorials guided-procedures INTENT.md; SCOPE.md; docs/pack-spec-v0.2.md
audit-core evidence-custody README.md; docs/audit-backend-contract.md
risk-nexus findings README.md; findings/README.md
info-tech-canon shared-semantics README.md
ops-bridge transport README.txt; INTENT.md
railiance-master workload-operations README.md; INTENT.md
glas-harness session-execution README.md; docs/harness-contract.md; docs/execution-profiles.md
the-custodian estate-orientation docs/agent-environment-orientation.md; docs/agent-autonomy-decision.md; docs/security-close-down-checklist.md
emergent-security offline-reference specs/emergent-security-0.8.md; envelopes/default-envelope.yaml

Capability findings and dependencies

  • zone-engine remains offline conformance; its live API is intentionally absent (ZONE-WP-0002), not a deployment to invent.
  • kings-guard offers observation/posture scaffolding and a real-event input pilot; continuous production observation is unverified and containment is proposal-only.
  • ops-mason declares its founder-approved structure-only plan exception. Do not advertise it as consulting access-engine.
  • tenant-engine SCOPE contains old gaps beside newer shipped entries. TEN-WP-0012 tracks outstanding external custody/canon dependencies; treat runtime readiness separately.
  • access-engine decision-record documentation contains old unsigned-channel prose beside newer signature fields; actual consumer authentication/enforcement requires current owner proof.
  • the-custodian CUST-WP-0073 tracks agent credential separation. Loading this knowledge does not close that work.
  • glas-harness GLAS-WP-0008 is finished: operational readiness is separate from profile selection. GLAS-WP-0012 owns remaining runtime/provider acceptance and continuity proof; blocked/unverified profiles remain so.
  • gate-house GH-WP-0004 holds layer-declaration work. This repo declares its own boundary; it does not declare conformance on behalf of another owner.
  • OpenBao is referenced through secrets-engine and the net-kingdom infrastructure boundary; it is not a new repository or credential route owned here.

Interpretation

Use docs/operational-contracts.md for the request/evidence seams and docs/decisions/EMERGENT-DEC-2026-001-integration-profile.md for compatibility dispositions. The knowledge cards cite their sources via the retrieval receipt. Owner documents, reference fixtures, deployed state, and independent evidence are different kinds of claims. Only the first two were inspected for this inventory. No outside repository was modified by generating this map.

The detailed decision/procedure integration is in docs/decision-runbook-integration.md. INFD-WP-0005 has an offline intake service with empty registries. Its live listener, custody, admission, and rollout remain that owner's blocked work. Runbook execution and index (RBT-WP-0006) likewise remain owner work. This package creates neither capability.