From feff57675f12e0555a033179ec62e9f9d1d0f303 Mon Sep 17 00:00:00 2001 From: tegwick Date: Wed, 2 Sep 2026 00:24:28 +0200 Subject: [PATCH] Record first GH-WP-0001-T06 posture disposition Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a05e30-2884-71b0-98d7-7edd16ae737b --- ...9-02-kings-guard-qonto-live-observation.md | 92 +++++++++++++++++++ docs/conformance/README.md | 10 +- .../2026-09-01-conformance-loop-handoff.md | 21 ++++- workplans/GH-WP-0001-foundation.md | 9 ++ 4 files changed, 129 insertions(+), 3 deletions(-) create mode 100644 docs/conformance/2026-09-02-kings-guard-qonto-live-observation.md diff --git a/docs/conformance/2026-09-02-kings-guard-qonto-live-observation.md b/docs/conformance/2026-09-02-kings-guard-qonto-live-observation.md new file mode 100644 index 0000000..b8803ff --- /dev/null +++ b/docs/conformance/2026-09-02-kings-guard-qonto-live-observation.md @@ -0,0 +1,92 @@ +# Conformance disposition — kings-guard qonto live observation + +**Repository:** gate-house +**Status:** reviewed; residuals routed, acceptance pending +**Date:** 2026-09-02 +**Contract:** `posture-findings-return.v1` +**Source:** State Hub message `23480b81-bc34-4df4-92cc-840fbc8514fd` +**Observer:** kings-guard +**Observer revision:** `9daea96` +**Observed source:** qonto-assistant +**Gate House disposition:** `no_change` +**Workplan:** GH-WP-0001-T06 + +## Returned observation + +King's Guard completed `KG-WP-0003-T06/T07` and accepted +`posture-findings-return.v1` without revision. + +Real events emitted by `qonto-assistant.audit.AuditLogger` through +`CapabilityService` reached the evaluator: + +- one `org_summary` / REST allow; +- one `list_transactions` / MCP deny with `arg_constraint`; +- observation identifiers `req-kg-live-allow` and + `req-kg-live-deny-arg-constraint`; +- signal identifier `sig:req-kg-live-deny-arg-constraint`. + +The mapping of request identifier, capability to resource scope, decision, and +protocol held without adapter drift. Output remained `advisory_only` and +`metadata_only`. `EffectorRequest` now retains originating observation and +signal identifiers, stream completeness, and restrictive direction. + +## Finding preserved + +The `audit.deny` class is load-bearing because qonto-assistant's escalation loop +branches on it. Its stream completeness is `unknown`: + +- no heartbeat or emission-cadence declaration is published; +- no reconciliation view was supplied; +- record richness of 90 describes the received deny record, not the stream; +- no claim is made that every deny was emitted or observed. + +This is a finding against source emission completeness, not against the +received record's mapping and not evidence that an event was suppressed. + +The live lane therefore supports only this bounded statement: + +> King's Guard observed real qonto-assistant allow and deny events and preserved +> their origin through advisory output. It cannot yet vouch for completeness of +> the load-bearing deny stream. + +It does not support an estate-wide claim that observation is staffed, or a +claim that qonto-assistant's deny evidence is complete. + +## Doctrine disposition + +`no_change`. + +The result validates the existing doctrine rather than changing it: + +- posture remained restrictive and did not create authority; +- origin linkage survived into the proposal shape; +- stream completeness was reported separately from record richness; +- missing cadence produced an explicit finding rather than optimistic posture; +- implementation remediation stayed outside Gate House. + +Gate House records security-layer-model §12's observation step as **staffed for +the qonto-assistant lane only**, with completeness explicitly pending. + +## Residual routing + +| Residual | Owner | Route | State at review | +| --- | --- | --- | --- | +| Publish heartbeat plus reconciliation for load-bearing `audit.deny`; optionally emit `identity_binding` and `egress_destination` rather than relying on genome constants. | qonto-assistant | State Hub message `3b9c26a1-ba1a-4189-b439-edd61683aed5` from kings-guard | Delivered, unread; no owning work record observed. | +| Adopt or decline the emission-cadence declaration as a Taxonomy artifact. | net-kingdom / info-tech-canon | Messages `dd15c0d1-c092-4701-a20a-8f37c6406186` and `5c6868e9-05bc-4970-b5b9-6f777451e15b` | Delivered, unread; ownership decision pending. | + +Gate House does not create either repository's task. Until each recipient +accepts, revises, or rejects its route, these remain pending residuals rather +than assumed work. + +## Review triggers + +Re-review when any of the following occurs: + +1. qonto-assistant publishes or rejects the heartbeat/reconciliation + obligation; +2. a Taxonomy repository accepts or declines ownership of the declaration; +3. kings-guard reports a complete-stream observation; +4. the qonto-assistant event or genome revision changes; +5. the restrictive posture or origin-link contract changes. + +Closing this Gate House review does not close the source finding. diff --git a/docs/conformance/README.md b/docs/conformance/README.md index 9b15d5c..bb1123f 100644 --- a/docs/conformance/README.md +++ b/docs/conformance/README.md @@ -15,5 +15,11 @@ A review record names the external report and safe evidence references, copies the executor's outcome without changing it, records Gate House's doctrine disposition, and links every residual to a live owner. -No execution reports have returned under these v1 contracts yet. Absence is -`not_run`, not conformance. +Returned reviews: + +- [`2026-09-02 — kings-guard qonto live observation`](2026-09-02-kings-guard-qonto-live-observation.md): + origin-linked advisory observation is staffed for one lane; load-bearing deny + stream completeness remains unknown; doctrine disposition `no_change`. + +No whitehat-security ASM execution report has returned under +`conformance-reporting.v1`. That target set remains `not_run`, not conformance. diff --git a/history/2026-09-01-conformance-loop-handoff.md b/history/2026-09-01-conformance-loop-handoff.md index a84595a..29eb505 100644 --- a/history/2026-09-01-conformance-loop-handoff.md +++ b/history/2026-09-01-conformance-loop-handoff.md @@ -2,7 +2,7 @@ **Repository:** gate-house **Project family:** NetKingdom -**Status:** Handoff complete; first loop return pending +**Status:** First posture return reviewed; whitehat return pending **Date:** 2026-09-01 **Workplan:** GH-WP-0001-T06 **Artifact commit:** `8cb7250` @@ -83,3 +83,22 @@ T06 can move from `wait` to `done` after: routes every residual to a live owner. Anything less would establish document flow, not a conformance loop. + +## Progress — 2026-09-02 + +King's Guard accepted the contract without revision, finished +`KG-WP-0003-T06/T07`, and returned the first live observation under the +`[GH-POSTURE]` envelope. Gate House disposition: +`docs/conformance/2026-09-02-kings-guard-qonto-live-observation.md`. + +The qonto-assistant lane is now staffed for observation, not proven complete. +The load-bearing deny stream has no heartbeat/cadence or reconciliation view, +so completeness is `unknown`. Residual messages to qonto-assistant, +net-kingdom, and info-tech-canon were delivered and remain unread. + +The whitehat handoff `8229c9a4-862f-4d55-842c-5c95702f79d9` also remains +unread. Whitehat separately accepted the responsibility boundary with one +useful correction: Gate House specifies invariants and targets; whitehat +authors probes. The published target pack already assigns attack design and +verdict to whitehat, and Gate House explicitly accepted the correction in its +follow-up. diff --git a/workplans/GH-WP-0001-foundation.md b/workplans/GH-WP-0001-foundation.md index 3e311bb..8d7281e 100644 --- a/workplans/GH-WP-0001-foundation.md +++ b/workplans/GH-WP-0001-foundation.md @@ -125,3 +125,12 @@ was handed to kings-guard in message whitehat result, kings-guard's return-path disposition/status, and Gate House's first recorded doctrine disposition. Full record: `history/2026-09-01-conformance-loop-handoff.md`. + +Progress 2026-09-02 — kings-guard accepted the return-path contract, completed +`KG-WP-0003`, and returned a real qonto-assistant observation. Gate House +recorded `no_change`: the lane is staffed, while deny-stream completeness is +unknown pending heartbeat/reconciliation. Review: +`docs/conformance/2026-09-02-kings-guard-qonto-live-observation.md`. The +remaining completion gate is whitehat's unread target-set handoff, a calibrated +result, and acceptance or explicit rejection of the routed source/Taxonomy +residuals.