diff --git a/CLAUDE.md b/CLAUDE.md
index cc08590..1157300 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -18,7 +18,7 @@ has lapsed — see the re-cut below.
 
 Gate House is the **council where NetKingdom's security and defence doctrine is
 established, documented, taught, and supervised** — a **Staff**-layer repository in the
-NetKingdom security layer model (`net-kingdom/canon/standards/security-layer-model_v0.2.md`, accepted).
+NetKingdom security layer model (`net-kingdom/canon/standards/security-layer-model_v0.4.md`, accepted).
 It holds no runtime position and renders no authorization decision.
 
 > **The mandate and the operating mode are Gate House's. The decision is access-engine's.
@@ -86,7 +86,9 @@ repositories implement them. A document or proposal that violates one is wrong:
 - **Agents cannot edit their own authority ceiling**; policy self-modification is a separately
   governed path and high-value security telemetry.
 - **Audit evidence is protected from the actor being audited**, and every privileged action
-  must be reconstructable from it.
+  must be reconstructable from it — *within the bound in INTENT § Core Rules*: an archive
+  proves records were not altered or truncated after arrival, never that one was never sent.
+  Do not write doctrine that says "the audit record proves it happened".
 - **Credentials are implementation artifacts of a grant**, materialized by Secrets Engine /
   OpenBao *after* authority exists — never the source of authority, never placed in model
   context.
@@ -141,7 +143,7 @@ the file, commit, then sync. `SCOPE.md` is derived from `INTENT.md` — keep the
 - History and reference notes → `history/YYYY-MM-DD-<slug>.md`, matching the convention in
   ops-warden, zone-engine, and secrets-engine.
 - Doctrine that stabilizes graduates into `net-kingdom/canon/standards/`, owned by gate-house
-  and published by net-kingdom. `security-layer-model_v0.2.md` is the first, and is accepted:
+  and published by net-kingdom. `security-layer-model_v0.4.md` is the first, and is accepted:
   all three affected repositories assented, each returning a finding that changed it.
 - **No implementation layout.** Blueprint §32's reference tree (`api/`, `policy/`, `grants/`,
   `deploy/`, …) described the withdrawn engine and does not apply. If work here starts
diff --git a/INTENT.md b/INTENT.md
index 849ead3..40f3265 100644
--- a/INTENT.md
+++ b/INTENT.md
@@ -303,6 +303,24 @@ engines and Staff repositories implement them.
 14. **Failure of critical policy or authorization dependencies fails closed.**
 15. **Production guarantees must survive incorrect agent behavior.**
 
+**A bound on rule 13, and on every claim that rests on audit.** An append-only
+archive with a verified hash chain proves records were not *altered or truncated
+after arrival*. It cannot prove a record was never sent. A suppressed event
+leaves the chain intact and verification reports intact — and the event an
+adversary most wants missing is the negative one: a revocation, a denial, a
+containment action.
+
+So *"the audit record proves it happened"* is unsound. The sound form is *"the
+archive proves the records it holds were not altered or truncated after
+arrival"*. Completeness is the emitting system's obligation, discharged by making
+emission atomic with the state change; no archive can retrofit it. See
+`net-kingdom/canon/standards/security-layer-model_v0.4.md` §9.6, raised by
+`audit-core` against its own principle.
+
+This bound is not yet reflected in the Active Secrets Management Canon — control
+§27 and tests T-08 and T-09 are written as though reconstruction from evidence
+were unconditional. Correcting the Canon is outstanding doctrine work.
+
 ---
 
 ## Reference Scenarios
diff --git a/README.md b/README.md
index 92c9c44..7c2be9b 100644
--- a/README.md
+++ b/README.md
@@ -25,7 +25,7 @@ anything depends on at runtime.
 
 NetKingdom's IT security is layered by determinism and by the kind of artifact
 each layer produces — see
-[`net-kingdom/canon/standards/security-layer-model_v0.2.md`](../net-kingdom/canon/standards/security-layer-model_v0.2.md).
+[`net-kingdom/canon/standards/security-layer-model_v0.4.md`](../net-kingdom/canon/standards/security-layer-model_v0.4.md).
 
 ```text
 Taxonomy   cross-cutting language          info-tech-canon, net-kingdom canon