diff --git a/decisions/decisions.md b/decisions/decisions.md
index ed1d434..465c235 100644
--- a/decisions/decisions.md
+++ b/decisions/decisions.md
@@ -170,3 +170,30 @@ an engine gap under §5, not solved locally.
 - A workplan will carry the registry snapshot digest into `DecisionProvenance`.
 - The rename is not started, and must not start before a migration record
   exists that satisfies the two conditions above.
+
+## FLEX-DEC-2026-002 — Review of security layer model v0.4: assent with findings, one rule contested
+
+```yaml
+id: FLEX-DEC-2026-002
+kind: decision
+title: 'Review of security layer model v0.4: assent with findings, one rule contested'
+status: open
+origin: cross-repo
+origin_ref: net-kingdom security-layer-model_v0.4
+standard: net-kingdom/canon/standards/security-layer-model_v0.4.md
+intake_ref: FLEX-IN-0002
+owner: flex-auth
+affects:
+- flex-auth
+- gate-house
+- net-kingdom
+- ops-warden
+- approval-engine
+- maturity-engine
+requested_dispositions:
+- assent
+- revise
+- reject
+created: '2026-08-29T00:41:21.171665Z'
+updated: '2026-08-29T00:41:21.171665Z'
+```