Point at the accepted standard and its companion
The layer model is accepted at v0.7. References bumped from v0.4, and CLAUDE.md now sends readers to net-kingdom/SECURITY-COMPANION.md as the working form, and to ops-warden for how to get things done — doctrine is ours, the paths through it are not. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 2564823@bnt-lap001 Assistant-Session: 2a7ed827-4928-4b9f-8613-9135c9cadfe9
This commit is contained in:
parent
c638822d17
commit
f524badd9d
3 changed files with 7 additions and 5 deletions
|
|
@ -314,7 +314,7 @@ So *"the audit record proves it happened"* is unsound. The sound form is *"the
|
|||
archive proves the records it holds were not altered or truncated after
|
||||
arrival"*. Completeness is the emitting system's obligation, discharged by making
|
||||
emission atomic with the state change; no archive can retrofit it. See
|
||||
`net-kingdom/canon/standards/security-layer-model_v0.4.md` §9.6, raised by
|
||||
`net-kingdom/canon/standards/security-layer-model_v0.7.md` §9.6, raised by
|
||||
`audit-core` against its own principle.
|
||||
|
||||
This bound is not yet reflected in the Active Secrets Management Canon — control
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue