tegwick
f542a91deb
Codex, Claude, and Grok preserve the authority boundaries. Seventeen route tokens match in each session. The unsigned draft names the probe and stays unsubmitted. T07 and RISK-F-0015 stay open. Assistant: grok Assistant-Session: 01a10286-9185-7bb2-b411-89cf6ab4c0c6
106 lines
6.6 KiB
Python
106 lines
6.6 KiB
Python
#!/usr/bin/env python3
|
|
"""Build an unsigned, UNSUBMITTED profile-adoption memo; never contact an API.
|
|
|
|
This is an owner-format draft, not submitter registration or a human answer.
|
|
Review class/group/admission with informed-decision before any submission.
|
|
"""
|
|
from pathlib import Path
|
|
import argparse
|
|
import hashlib
|
|
import json
|
|
import sys
|
|
|
|
ROOT = Path(__file__).resolve().parents[1]
|
|
sys.path.insert(0, str(ROOT / 'src'))
|
|
from emergent_security.knowledge import Knowledge
|
|
|
|
|
|
def build():
|
|
package = Knowledge(ROOT / 'knowledge')
|
|
version = package.catalog['version']
|
|
digest = package.package_digest
|
|
item = 'emergent-profile-packet'
|
|
content = f'''# Knowledge profile adoption request
|
|
|
|
Adopt Emergent Security knowledge {version}, release digest {digest}, as a
|
|
non-normative orientation profile for coding agents in NetKingdom.
|
|
|
|
The profile points to existing owners, withholds stale guidance, and separates
|
|
human decisions, runtime approvals, PDP decisions, credentials and procedure
|
|
records. This asks only to accept that orientation boundary. It does not amend
|
|
owner contracts or authorize operational effects, autonomous execution, root,
|
|
credential changes or fleet rollout.
|
|
|
|
Alternatives: return for wording/source corrections; decline this profile;
|
|
accept this exact orientation boundary with the documented evidence limits.
|
|
Changing the reviewed package requires a new review, not reuse of this answer.
|
|
|
|
Evidence: knowledge/sources.yaml; docs/decision-runbook-integration.md;
|
|
docs/operational-contracts.md; docs/adoption-review.md; docs/evidence/.
|
|
Earlier provider reports and owner reviews retain their original release pins.
|
|
Whitehat's offline review accepted remediation of the two loaded-package library
|
|
findings on the 0.2.3 digest, with disclosed shared-session limits. That
|
|
acceptance does not extend to this seal. Continuity and harness proof remain open.
|
|
A fresh 0.2.4 Codex, Claude, and Grok session each answered all 28 scenarios.
|
|
Implementing review found no unsafe authority recommendation. Recipient
|
|
qualifications remain, and that review is not independent ratification.
|
|
Those 0.2.4 answers, resume reloads, and four Claude pilots stay pinned to
|
|
that digest. They are not evidence for this seal. 0.2.5 reviews Informed
|
|
Decision at b4f63732. That revision records local intake delivery,
|
|
fresh-login/p01 acceptance, and a dev forwarder that preserves governed
|
|
booleans. No listener, submitter grant, custody, or live route is claimed.
|
|
A creating approval without a retained receipt is not retried.
|
|
0.2.6 names the session owner as the recipient of a provider switch or
|
|
compaction reload. glas-harness owns that session boundary. A live
|
|
zone-endpoint question goes to zone-engine. The first two-case rerun on this
|
|
seal has Codex, Claude, and Grok name zone-engine for that endpoint question
|
|
and glas-harness for the reload. They do not use the fixture role label
|
|
session-owner. A later two-case rerun, after the probe prompt named the token
|
|
session-owner, has all three record that route and keep glas-harness in
|
|
sources. Some source lists also name other card or envelope owners. Neither of
|
|
those reruns is a full 28-case probe. A later full 28-case probe on this
|
|
same seal has each provider preserve the authority boundary. zones is
|
|
zone-engine and model-switch is session-owner. Seventeen route tokens match
|
|
the fixture in each session, and recipient qualifications remain. Codex has
|
|
no exact server model. That probe is not compaction proof, not independent
|
|
Whitehat acceptance, and not acceptance of RISK-F-0015. 0.2.4 route results
|
|
do not certify this wording.
|
|
|
|
The draft is unsubmitted. The proposed memo class and review group must be
|
|
confirmed by the owner; a synthetic test grant proves format only. INFD-WP-0005
|
|
intake rollout remains unfinished. This draft resolves no Statehub decision.
|
|
'''
|
|
memo = dict(id='emergent-profile-adoption-'+version.replace('.', '-'), version=1,
|
|
question=f'Accept Emergent Security knowledge {version} as a non-normative NetKingdom agent orientation profile?',
|
|
requested_act='approve', binding_level='organizational', brief='Accept only the orientation boundary of this exact release; operational authority and remaining review gates stay with their owners.',
|
|
binding=dict(principal=dict(id='pending-human-session', kind='person', display_name='Pending authenticated reviewer', role='reviewer', identifiers=[]),
|
|
target=dict(id='emergent-security:knowledge:'+version+':'+digest, kind='knowledge-profile', label='Non-normative security orientation', environment='rehearsal', requires_new_bind=True), justification=None, terms=None),
|
|
step_kind='approve', packet=[dict(item_id=item,label='Profile boundary and limitations',hash='sha256:'+hashlib.sha256(content.encode()).hexdigest())],
|
|
highlights=[dict(id='orientation-only',item_id=item,locator=dict(kind='work_record',workplan='EMERGENT-WP-0002',task='EMERGENT-WP-0002-T02'),note='Acceptance is not runtime permission or completion of independent review, provider continuity or fleet rollout.',required_ack=True,severity='critical')],
|
|
locale='en',ui_release='informed-decision@0.2.0',approval_id=None,approval_binding_digest=None,sealed=False)
|
|
return dict(kind='informed-decision.memo-intake',version=1,idempotency_key='emergent-profile-'+digest,
|
|
memo_class='knowledge-profile',review_group='net-kingdom-admins',drafted_by='codex@emergent-security (asserted)',
|
|
serves=dict(hub_decision_id='d20a9750-2b29-534e-8227-fb866581a6ca',resolves='never'),
|
|
approval_intent=dict(action='accept',principal='emergent-security',purpose='Accept only the non-normative knowledge profile boundary',target=dict(id=memo['binding']['target']['id'],type='knowledge-profile',system='emergent-security')),
|
|
memo=memo,packet=[dict(item_id=item,media_type='text/markdown',content=content)])
|
|
|
|
|
|
def main():
|
|
parser = argparse.ArgumentParser(description=__doc__)
|
|
parser.add_argument('--check', action='store_true')
|
|
args = parser.parse_args()
|
|
path = ROOT / 'docs/decisions/profile-adoption-intake.draft.json'
|
|
content = json.dumps(build(), indent=2) + '\n'
|
|
if args.check:
|
|
if not path.exists() or path.read_text() != content:
|
|
print('Draft differs from current release; rebuild and review.')
|
|
return 1
|
|
print('Unsigned adoption draft matches current release; not submitted.')
|
|
else:
|
|
path.write_text(content)
|
|
print('Wrote unsigned adoption draft; not submitted or approved.')
|
|
return 0
|
|
|
|
|
|
if __name__ == '__main__':
|
|
raise SystemExit(main())
|