flex-auth/docs/evidence/2026-09-21-layer-declaration-survey-after-ghdec017.json
tegwick 80ffe729d4
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 5s
Build and Publish Container Image / build-and-push (push) Successful in 1m11s
Apply gate-house's section 11 rulings: four-token validator, emission guarantee, resource.system.
GH-DEC-2026-017: the validator admitted {Staff, Engine, Tooling}, built from
section 4's catalog rows, and rejected Taxonomy, which section 3.1 defines.
railiance-master was conforming; the validator was the divergent artifact.
Now four tokens, ASCII case folded, section 4's spelling canonical, INTENT.md
governing while form disagreements are still reported, and every run states
its scope (section 11 binds section 4; volunteers are not non-conformances).
Also fixes the survey silently dropping audit-core's layer.yaml by decoding
peers into flex-auth's own struct.

GH-DEC-2026-018: flex-auth is a section 4 source of evidence. G2 closes as a
question and reopens as a dated gap (review 2026-10-19). cadence.yaml
publishes the per-event-class inventory: deny, redact, not_applicable and
audit_only rare load-bearing (heartbeat and reconciliation, rate forbidden);
allow volume load-bearing (expected-rate and reconciliation). INTENT.md
declares source_of_evidence and names it; tests assert both. Delivery is
FLEX-WP-0031.

FLEX-DEC-2026-015: resource.system follows the runtime, not the repository,
answering ops-warden's WARDEN-IN-0003.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 63291@bnt-lap001
Assistant-Session: 8bd77868-ca68-4f49-bb1e-d539ecc0d703
2026-09-21 06:35:30 +02:00

526 lines
12 KiB
JSON

{
"checks_only": "the closed four-token §3 vocabulary, ASCII case folded per GH-DEC-2026-017 §2; no flex-auth house rules applied to peers",
"derived_at": "run time",
"off_vocab": null,
"root": "/home/worsch",
"rows": [
{
"Repo": "approval-engine",
"Intent": {
"Source": "approval-engine/INTENT.md",
"Layer": "Engine",
"Role": "PIP",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"File": {
"Source": "approval-engine/layer.yaml",
"Layer": "engine",
"Role": "pip",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"InCatalog": true
},
{
"Repo": "audit-core",
"Intent": {
"Source": "audit-core/INTENT.md",
"Layer": "Engine",
"Role": "Evidence",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"File": {
"Source": "audit-core/layer.yaml",
"Layer": "engine",
"Role": "evidence",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"InCatalog": true
},
{
"Repo": "flex-auth",
"Intent": {
"Source": "flex-auth/INTENT.md",
"Layer": "Engine",
"Role": "PDP",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"File": {
"Source": "",
"Layer": "",
"Role": "",
"Found": false,
"InVocabulary": false,
"Canonical": ""
},
"InCatalog": true
},
{
"Repo": "gate-house",
"Intent": {
"Source": "gate-house/INTENT.md",
"Layer": "Staff",
"Role": "—",
"Found": true,
"InVocabulary": true,
"Canonical": "Staff"
},
"File": {
"Source": "",
"Layer": "",
"Role": "",
"Found": false,
"InVocabulary": false,
"Canonical": ""
},
"InCatalog": true
},
{
"Repo": "key-cape",
"Intent": {
"Source": "",
"Layer": "",
"Role": "",
"Found": false,
"InVocabulary": false,
"Canonical": ""
},
"File": {
"Source": "",
"Layer": "",
"Role": "",
"Found": false,
"InVocabulary": false,
"Canonical": ""
},
"InCatalog": true
},
{
"Repo": "kings-guard",
"Intent": {
"Source": "kings-guard/INTENT.md",
"Layer": "Staff",
"Role": "",
"Found": true,
"InVocabulary": true,
"Canonical": "Staff"
},
"File": {
"Source": "kings-guard/layer.yaml",
"Layer": "staff",
"Role": "",
"Found": true,
"InVocabulary": true,
"Canonical": "Staff"
},
"InCatalog": true
},
{
"Repo": "maturity-engine",
"Intent": {
"Source": "maturity-engine/INTENT.md",
"Layer": "Engine",
"Role": "PIP",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"File": {
"Source": "maturity-engine/layer.yaml",
"Layer": "engine",
"Role": "pip",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"InCatalog": true
},
{
"Repo": "net-kingdom",
"Intent": {
"Source": "",
"Layer": "",
"Role": "",
"Found": false,
"InVocabulary": false,
"Canonical": ""
},
"File": {
"Source": "",
"Layer": "",
"Role": "",
"Found": false,
"InVocabulary": false,
"Canonical": ""
},
"InCatalog": true
},
{
"Repo": "ops-mason",
"Intent": {
"Source": "",
"Layer": "",
"Role": "",
"Found": false,
"InVocabulary": false,
"Canonical": ""
},
"File": {
"Source": "",
"Layer": "",
"Role": "",
"Found": false,
"InVocabulary": false,
"Canonical": ""
},
"InCatalog": true
},
{
"Repo": "ops-warden",
"Intent": {
"Source": "ops-warden/INTENT.md",
"Layer": "Staff",
"Role": "",
"Found": true,
"InVocabulary": true,
"Canonical": "Staff"
},
"File": {
"Source": "ops-warden/layer.yaml",
"Layer": "staff",
"Role": "",
"Found": true,
"InVocabulary": true,
"Canonical": "Staff"
},
"InCatalog": true
},
{
"Repo": "secrets-engine",
"Intent": {
"Source": "secrets-engine/INTENT.md",
"Layer": "Engine",
"Role": "Lifecycle",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"File": {
"Source": "secrets-engine/layer.yaml",
"Layer": "engine",
"Role": "lifecycle",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"InCatalog": true
},
{
"Repo": "tenant-engine",
"Intent": {
"Source": "tenant-engine/INTENT.md",
"Layer": "Engine",
"Role": "PIP",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"File": {
"Source": "tenant-engine/layer.yaml",
"Layer": "engine",
"Role": "pip",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"InCatalog": true
},
{
"Repo": "user-engine",
"Intent": {
"Source": "user-engine/INTENT.md",
"Layer": "Engine",
"Role": "PIP",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"File": {
"Source": "user-engine/layer.yaml",
"Layer": "engine",
"Role": "pip",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"InCatalog": true
},
{
"Repo": "zone-engine",
"Intent": {
"Source": "zone-engine/INTENT.md",
"Layer": "Engine",
"Role": "PIP",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"File": {
"Source": "zone-engine/layer.yaml",
"Layer": "engine",
"Role": "pip",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"InCatalog": true
}
],
"scope": {
"Name": "estate-wide",
"Statement": "every repository surveyed, catalogued or not. Repositories outside §4 are reported as declared voluntarily, outside catalog scope — never as §11 non-conformances.",
"Repos": [
"approval-engine",
"audit-core",
"flex-auth",
"gate-house",
"key-cape",
"kings-guard",
"maturity-engine",
"net-kingdom",
"ops-mason",
"ops-warden",
"secrets-engine",
"tenant-engine",
"user-engine",
"zone-engine"
]
},
"self_disagreeing": [
{
"Repo": "approval-engine",
"Intent": {
"Source": "approval-engine/INTENT.md",
"Layer": "Engine",
"Role": "PIP",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"File": {
"Source": "approval-engine/layer.yaml",
"Layer": "engine",
"Role": "pip",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"InCatalog": true
},
{
"Repo": "audit-core",
"Intent": {
"Source": "audit-core/INTENT.md",
"Layer": "Engine",
"Role": "Evidence",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"File": {
"Source": "audit-core/layer.yaml",
"Layer": "engine",
"Role": "evidence",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"InCatalog": true
},
{
"Repo": "kings-guard",
"Intent": {
"Source": "kings-guard/INTENT.md",
"Layer": "Staff",
"Role": "",
"Found": true,
"InVocabulary": true,
"Canonical": "Staff"
},
"File": {
"Source": "kings-guard/layer.yaml",
"Layer": "staff",
"Role": "",
"Found": true,
"InVocabulary": true,
"Canonical": "Staff"
},
"InCatalog": true
},
{
"Repo": "maturity-engine",
"Intent": {
"Source": "maturity-engine/INTENT.md",
"Layer": "Engine",
"Role": "PIP",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"File": {
"Source": "maturity-engine/layer.yaml",
"Layer": "engine",
"Role": "pip",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"InCatalog": true
},
{
"Repo": "ops-warden",
"Intent": {
"Source": "ops-warden/INTENT.md",
"Layer": "Staff",
"Role": "",
"Found": true,
"InVocabulary": true,
"Canonical": "Staff"
},
"File": {
"Source": "ops-warden/layer.yaml",
"Layer": "staff",
"Role": "",
"Found": true,
"InVocabulary": true,
"Canonical": "Staff"
},
"InCatalog": true
},
{
"Repo": "secrets-engine",
"Intent": {
"Source": "secrets-engine/INTENT.md",
"Layer": "Engine",
"Role": "Lifecycle",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"File": {
"Source": "secrets-engine/layer.yaml",
"Layer": "engine",
"Role": "lifecycle",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"InCatalog": true
},
{
"Repo": "tenant-engine",
"Intent": {
"Source": "tenant-engine/INTENT.md",
"Layer": "Engine",
"Role": "PIP",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"File": {
"Source": "tenant-engine/layer.yaml",
"Layer": "engine",
"Role": "pip",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"InCatalog": true
},
{
"Repo": "user-engine",
"Intent": {
"Source": "user-engine/INTENT.md",
"Layer": "Engine",
"Role": "PIP",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"File": {
"Source": "user-engine/layer.yaml",
"Layer": "engine",
"Role": "pip",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"InCatalog": true
},
{
"Repo": "zone-engine",
"Intent": {
"Source": "zone-engine/INTENT.md",
"Layer": "Engine",
"Role": "PIP",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"File": {
"Source": "zone-engine/layer.yaml",
"Layer": "engine",
"Role": "pip",
"Found": true,
"InVocabulary": true,
"Canonical": "Engine"
},
"InCatalog": true
}
],
"spellings": {
"Engine": [
"approval-engine/INTENT.md",
"audit-core/INTENT.md",
"flex-auth/INTENT.md",
"maturity-engine/INTENT.md",
"secrets-engine/INTENT.md",
"tenant-engine/INTENT.md",
"user-engine/INTENT.md",
"zone-engine/INTENT.md"
],
"Staff": [
"gate-house/INTENT.md",
"kings-guard/INTENT.md",
"ops-warden/INTENT.md"
],
"engine": [
"approval-engine/layer.yaml",
"audit-core/layer.yaml",
"maturity-engine/layer.yaml",
"secrets-engine/layer.yaml",
"tenant-engine/layer.yaml",
"user-engine/layer.yaml",
"zone-engine/layer.yaml"
],
"staff": [
"kings-guard/layer.yaml",
"ops-warden/layer.yaml"
]
},
"undeclared": [
"key-cape",
"net-kingdom",
"ops-mason"
],
"volunteers": null
}