gate-house/docs/conformance/2026-09-02-kings-guard-qonto-live-observation.md

# Conformance disposition — kings-guard qonto live observation

**Repository:** gate-house
**Status:** reviewed; residuals routed, acceptance pending
**Date:** 2026-09-02
**Contract:** `posture-findings-return.v1`
**Source:** State Hub message `23480b81-bc34-4df4-92cc-840fbc8514fd`
**Observer:** kings-guard
**Observer revision:** `9daea96`
**Observed source:** qonto-assistant
**Gate House disposition:** `no_change`
**Workplan:** GH-WP-0001-T06
**Acknowledged:** 2026-09-02 by reply to the source message

## Returned observation

King's Guard completed `KG-WP-0003-T06/T07` and accepted
`posture-findings-return.v1` without revision.

Real events emitted by `qonto-assistant.audit.AuditLogger` through
`CapabilityService` reached the evaluator:

- one `org_summary` / REST allow;
- one `list_transactions` / MCP deny with `arg_constraint`;
- observation identifiers `req-kg-live-allow` and
  `req-kg-live-deny-arg-constraint`;
- signal identifier `sig:req-kg-live-deny-arg-constraint`.

The mapping of request identifier, capability to resource scope, decision, and
protocol held without adapter drift. Output remained `advisory_only` and
`metadata_only`. `EffectorRequest` now retains originating observation and
signal identifiers, stream completeness, and restrictive direction.

## Finding preserved

The `audit.deny` class is load-bearing because qonto-assistant's escalation loop
branches on it. Its stream completeness is `unknown`:

- no heartbeat or emission-cadence declaration is published;
- no reconciliation view was supplied;
- record richness of 90 describes the received deny record, not the stream;
- no claim is made that every deny was emitted or observed.

This is a finding against source emission completeness, not against the
received record's mapping and not evidence that an event was suppressed.

The live lane therefore supports only this bounded statement:

> King's Guard observed real qonto-assistant allow and deny events and preserved
> their origin through advisory output. It cannot yet vouch for completeness of
> the load-bearing deny stream.

It does not support an estate-wide claim that observation is staffed, or a
claim that qonto-assistant's deny evidence is complete.

## Doctrine disposition

`no_change`.

The result validates the existing doctrine rather than changing it:

- posture remained restrictive and did not create authority;
- origin linkage survived into the proposal shape;
- stream completeness was reported separately from record richness;
- missing cadence produced an explicit finding rather than optimistic posture;
- implementation remediation stayed outside Gate House.

Gate House records security-layer-model §12's observation step as **staffed for
the qonto-assistant lane only**, with completeness explicitly pending.

## Residual routing

| Residual | Owner | Route | State at review |
| --- | --- | --- | --- |
| Publish heartbeat plus reconciliation for load-bearing `audit.deny`; optionally emit `identity_binding` and `egress_destination` rather than relying on genome constants. | qonto-assistant | State Hub message `3b9c26a1-ba1a-4189-b439-edd61683aed5` from kings-guard | Delivered, unread; no owning work record observed. |
| Adopt or decline the emission-cadence declaration as a Taxonomy artifact. | net-kingdom / info-tech-canon | Messages `dd15c0d1-c092-4701-a20a-8f37c6406186` and `5c6868e9-05bc-4970-b5b9-6f777451e15b` | Delivered, unread; ownership decision pending. |

Gate House does not create either repository's task. Until each recipient
accepts, revises, or rejects its route, these remain pending residuals rather
than assumed work.

## Review triggers

Re-review when any of the following occurs:

1. qonto-assistant publishes or rejects the heartbeat/reconciliation
   obligation;
2. a Taxonomy repository accepts or declines ownership of the declaration;
3. kings-guard reports a complete-stream observation;
4. the qonto-assistant event or genome revision changes;
5. the restrictive posture or origin-link contract changes.

Closing this Gate House review does not close the source finding.