Decide emission cadence ownership
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a05e30-2884-71b0-98d7-7edd16ae737b
This commit is contained in:
parent
c0c25e7056
commit
cf646c3195
2 changed files with 120 additions and 3 deletions
|
|
@ -345,3 +345,111 @@ Revert this record and the consumption contract. The falsifier is operational:
|
||||||
if spending an approval on a failed attempt makes the estate unable to
|
if spending an approval on a failed attempt makes the estate unable to
|
||||||
complete the actions this object exists for, a reserve/commit protocol can be
|
complete the actions this object exists for, a reserve/commit protocol can be
|
||||||
raised then. Unconsume is not the alternative — it reopens replay.
|
raised then. Unconsume is not the alternative — it reopens replay.
|
||||||
|
|
||||||
|
## GH-DEC-2026-004 — Layer emission-cadence ownership between Info Tech Canon and Net Kingdom
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
id: GH-DEC-2026-004
|
||||||
|
kind: decision
|
||||||
|
title: Layer emission-cadence ownership between Info Tech Canon and Net Kingdom
|
||||||
|
status: resolved
|
||||||
|
owner: Bernd Worsch
|
||||||
|
repo: gate-house
|
||||||
|
standard: net-kingdom/canon/standards/security-layer-model_v0.7.md
|
||||||
|
source_note: kings-guard/specs/EmissionCadenceDeclaration.md
|
||||||
|
requested_dispositions:
|
||||||
|
- approved
|
||||||
|
- revised
|
||||||
|
- rejected
|
||||||
|
affects:
|
||||||
|
- gate-house
|
||||||
|
- info-tech-canon
|
||||||
|
- net-kingdom
|
||||||
|
- kings-guard
|
||||||
|
- qonto-assistant
|
||||||
|
created: '2026-09-04T00:55:29Z'
|
||||||
|
updated: '2026-09-04T00:55:29Z'
|
||||||
|
rationale: >-
|
||||||
|
Approved interactively on 2026-09-04. The layered split gives each artifact
|
||||||
|
one owner: ecosystem-wide semantics belong to info-tech-canon; NetKingdom-
|
||||||
|
specific MUST/SHOULD rules and the low-volume load-bearing heartbeat-plus-
|
||||||
|
reconciliation profile belong to net-kingdom. This avoids both a Staff-local
|
||||||
|
consumer schema and competing Taxonomy definitions.
|
||||||
|
decided_by: Bernd Worsch
|
||||||
|
decided_at: '2026-09-04T00:55:29Z'
|
||||||
|
state_hub_decision_id: "89c73f45-d07b-40ea-b428-5a7375ce4b09"
|
||||||
|
```
|
||||||
|
|
||||||
|
## Context
|
||||||
|
|
||||||
|
Security-layer-model v0.7 §§9.6 and 17 require evidence sources to declare an
|
||||||
|
expected emission cadence so silence can become a finding. King's Guard is the
|
||||||
|
only current consumer and drafted `EmissionCadenceDeclaration.md` against the
|
||||||
|
real `qonto-assistant` source, but correctly declined to keep a Staff-local
|
||||||
|
schema. The standard left ownership between the two Taxonomy repositories:
|
||||||
|
`info-tech-canon` for ecosystem-wide semantic contracts and `net-kingdom` for
|
||||||
|
NetKingdom standards of record.
|
||||||
|
|
||||||
|
Treating that as joint ownership would leave version authority ambiguous.
|
||||||
|
Giving the entire artifact to either repository would instead conflate a
|
||||||
|
reusable evidence/observability contract with the security obligations of one
|
||||||
|
estate. The split is therefore made by artifact, with one owner for each.
|
||||||
|
|
||||||
|
## Decision
|
||||||
|
|
||||||
|
**`info-tech-canon` owns the versioned, ecosystem-wide
|
||||||
|
`EmissionCadenceDeclaration` semantic contract.** It owns the generic forms,
|
||||||
|
fields, vocabulary, validation semantics, compatibility rules, and evolution
|
||||||
|
of the contract.
|
||||||
|
|
||||||
|
**`net-kingdom` imports that contract and owns the NetKingdom security
|
||||||
|
profile.** It owns which evidence classes MUST or SHOULD declare cadence, the
|
||||||
|
rule that rate monitoring is forbidden for rare load-bearing classes, and the
|
||||||
|
heartbeat-plus-reconciliation obligations that satisfy security-layer-model
|
||||||
|
§9.6.
|
||||||
|
|
||||||
|
The remaining ownership boundaries are unchanged:
|
||||||
|
|
||||||
|
- each source repository owns its declaration instance and emission behavior;
|
||||||
|
- `kings-guard` owns stream evaluation and silence findings, not the schema;
|
||||||
|
- Gate House owns doctrine and conformance supervision, not publication or
|
||||||
|
runtime behavior.
|
||||||
|
|
||||||
|
The King's Guard draft remains the provenance and handover input. Once the
|
||||||
|
Taxonomy artifacts are published, it becomes historical rather than a second
|
||||||
|
contract.
|
||||||
|
|
||||||
|
## What this authorizes
|
||||||
|
|
||||||
|
- Requesting `info-tech-canon` to adopt, revise, or contest the generic
|
||||||
|
contract and create its own owning work record.
|
||||||
|
- Requesting `net-kingdom` to adopt, revise, or contest the security profile
|
||||||
|
and create its own owning work record.
|
||||||
|
- Sources such as `qonto-assistant`, `approval-engine`, and `secrets-engine`
|
||||||
|
publishing instances against the eventual canonical contract and profile.
|
||||||
|
- King's Guard replacing its draft-shaped fixture with the published contract
|
||||||
|
without changing its consumer ownership.
|
||||||
|
|
||||||
|
## What this does not authorize
|
||||||
|
|
||||||
|
- Joint ownership or two independently versioned definitions of the generic
|
||||||
|
schema.
|
||||||
|
- Gate House or King's Guard retaining the schema as a local contract.
|
||||||
|
- Gate House creating workplans in either Taxonomy repository.
|
||||||
|
- Treating ownership as source conformance: `qonto-assistant` remains
|
||||||
|
incomplete until it publishes and emits the required positive claim.
|
||||||
|
|
||||||
|
## Assent and completion
|
||||||
|
|
||||||
|
The ownership ruling is resolved. Publication is complete only when both
|
||||||
|
Taxonomy owners reply in their own voice and publish or explicitly schedule
|
||||||
|
their respective artifacts. Until then the prior handover residual remains
|
||||||
|
open, now with an unambiguous requested disposition.
|
||||||
|
|
||||||
|
## Reversal
|
||||||
|
|
||||||
|
Supersede this record if the generic contract proves inseparable from the
|
||||||
|
NetKingdom security profile, or if Info Tech Canon cannot provide a stable
|
||||||
|
cross-domain contract boundary. Reversal must still name one owner for every
|
||||||
|
artifact; returning to undifferentiated "Taxonomy ownership" is not an
|
||||||
|
acceptable outcome.
|
||||||
|
|
|
||||||
|
|
@ -1,7 +1,7 @@
|
||||||
# Conformance disposition — kings-guard qonto live observation
|
# Conformance disposition — kings-guard qonto live observation
|
||||||
|
|
||||||
**Repository:** gate-house
|
**Repository:** gate-house
|
||||||
**Status:** reviewed; implementation finding registered as RISK-F-0011
|
**Status:** reviewed; cadence ownership resolved; implementation finding registered as RISK-F-0011
|
||||||
**Date:** 2026-09-02
|
**Date:** 2026-09-02
|
||||||
**Contract:** `posture-findings-return.v1`
|
**Contract:** `posture-findings-return.v1`
|
||||||
**Source:** State Hub message `23480b81-bc34-4df4-92cc-840fbc8514fd`
|
**Source:** State Hub message `23480b81-bc34-4df4-92cc-840fbc8514fd`
|
||||||
|
|
@ -78,12 +78,20 @@ the qonto-assistant lane only**, with completeness explicitly pending.
|
||||||
| Residual | Owner | Route | State at review |
|
| Residual | Owner | Route | State at review |
|
||||||
| --- | --- | --- | --- |
|
| --- | --- | --- | --- |
|
||||||
| Publish heartbeat plus reconciliation for load-bearing `audit.deny`; optionally emit `identity_binding` and `egress_destination` rather than relying on genome constants. | qonto-assistant | State Hub message `3b9c26a1-ba1a-4189-b439-edd61683aed5` from kings-guard | Delivered, unread; no owning work record observed. |
|
| Publish heartbeat plus reconciliation for load-bearing `audit.deny`; optionally emit `identity_binding` and `egress_destination` rather than relying on genome constants. | qonto-assistant | State Hub message `3b9c26a1-ba1a-4189-b439-edd61683aed5` from kings-guard | Delivered, unread; no owning work record observed. |
|
||||||
| Adopt or decline the emission-cadence declaration as a Taxonomy artifact. | net-kingdom / info-tech-canon | Messages `dd15c0d1-c092-4701-a20a-8f37c6406186` and `5c6868e9-05bc-4970-b5b9-6f777451e15b` | Delivered, unread; ownership decision pending. |
|
| Adopt the generic `EmissionCadenceDeclaration` semantic contract. | info-tech-canon | Original handover `5c6868e9-05bc-4970-b5b9-6f777451e15b`; decided request `0c6ace40-e0e4-4928-81d1-34fcf83133b9` | Ownership assigned by GH-DEC-2026-004; repository assent and publication pending. |
|
||||||
|
| Adopt the importing NetKingdom security profile. | net-kingdom | Original handover `dd15c0d1-c092-4701-a20a-8f37c6406186`; decided request `7a316d92-411f-4b83-8120-ef68eba9ddfc` | Ownership assigned by GH-DEC-2026-004; repository assent and publication pending. |
|
||||||
|
|
||||||
Gate House does not create either repository's task. Until each recipient
|
Gate House does not create either repository's task. Until each recipient
|
||||||
accepts, revises, or rejects its route, these remain pending residuals rather
|
accepts, revises, or rejects its route, these remain pending residuals rather
|
||||||
than assumed work.
|
than assumed work.
|
||||||
|
|
||||||
|
GH-DEC-2026-004 resolves the previously ambiguous Taxonomy ownership. The
|
||||||
|
generic contract belongs to `info-tech-canon`; `net-kingdom` imports it and
|
||||||
|
owns the security profile. Source repositories own declaration instances and
|
||||||
|
emission, while `kings-guard` remains the evaluator. The drafter was notified
|
||||||
|
in message `954bd7be-3b51-4ba8-a896-b4b4c0966645`. This ruling does not claim
|
||||||
|
either Taxonomy artifact has already been published.
|
||||||
|
|
||||||
The implementation finding was routed through risk-nexus in message
|
The implementation finding was routed through risk-nexus in message
|
||||||
`53645a75-0215-4261-a700-f7aedf09e7e8` and registered as `RISK-F-0011` under
|
`53645a75-0215-4261-a700-f7aedf09e7e8` and registered as `RISK-F-0011` under
|
||||||
`RISK-RULING-2026-09-02-A`: `medium` (`I2` × `L3`), public, open, no
|
`RISK-RULING-2026-09-02-A`: `medium` (`I2` × `L3`), public, open, no
|
||||||
|
|
@ -98,7 +106,8 @@ Re-review when any of the following occurs:
|
||||||
|
|
||||||
1. qonto-assistant publishes or rejects the heartbeat/reconciliation
|
1. qonto-assistant publishes or rejects the heartbeat/reconciliation
|
||||||
obligation;
|
obligation;
|
||||||
2. a Taxonomy repository accepts or declines ownership of the declaration;
|
2. info-tech-canon or net-kingdom accepts, revises, or contests its assigned
|
||||||
|
artifact;
|
||||||
3. kings-guard reports a complete-stream observation;
|
3. kings-guard reports a complete-stream observation;
|
||||||
4. the qonto-assistant event or genome revision changes;
|
4. the qonto-assistant event or genome revision changes;
|
||||||
5. the restrictive posture or origin-link contract changes.
|
5. the restrictive posture or origin-link contract changes.
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue