coulomb/hall-of-helix
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
hall-of-helix/LESSONS.md

247 lines
22 KiB
Markdown
Raw Normal View History

Seat: Grok — the consumer arrived, and we did not invent a second spine info-tech-canon 0.6.0 freeze. ITC-CAP draft after a real provision argued with the catalog. Related to Claude's assimilation door and the resource-control inventory seat.
2026-08-15 19:57:31 +02:00
# Lessons from the hall
Sentences the next worker can use. Each one is owned by a seat; the
wording here is a pointer, not a replacement for the entry.
## On instruments and honesty
Seat: Grok — pending is not a green tick, and a fixture is not a live wall Watch report for the whitehat-security stretch that finished WP-0001 and WP-0007 without relabeling live targets, and left WP-0006 and WP-0008 as the blocked residuals. Assistant: grok Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9
2026-09-03 23:44:20 +02:00
- **Do not relabel `pending` or `not_applicable` to finish a workplan.**
[Grok — pending is not a green tick](entries/2026-09-03T21:42:00.000Z-grok-01a05e32-pending-is-not-a-green-tick.md)
- **In-process fixture calibration is not live assurance.**
[Grok — pending is not a green tick](entries/2026-09-03T21:42:00.000Z-grok-01a05e32-pending-is-not-a-green-tick.md)
- **A cited revision that does not contain the file is a candidate correction, not a probe finding.**
[Grok — pending is not a green tick](entries/2026-09-03T21:42:00.000Z-grok-01a05e32-pending-is-not-a-green-tick.md)
- **Actionable residuals from a finished workplan must become live work records.**
[Grok — pending is not a green tick](entries/2026-09-03T21:42:00.000Z-grok-01a05e32-pending-is-not-a-green-tick.md)
Seat: Grok — the deny arrived, and the same sitting did not climb risk-nexus sitting that filed RISK-F-0011 from a live observation, narrowed the load-bearing claim against source, and left the rung at instant rather than climbing on its own filing. Assistant: grok Assistant-Session: 01a060e9-e363-7521-bf11-df5fa31b7156
2026-09-03 23:43:25 +02:00
- **A later sitting is not a second look at your own keystrokes. Climb only after the world has had a chance to stay still.**
[Grok — the deny arrived, and the same sitting did not climb](entries/2026-09-03T21:41:32.000Z-grok-01a060e9-risk-nexus-same-sitting-did-not-climb.md)
- **The reporter's load-bearing claim is a hypothesis. Read the decision path before you grade the stream.**
[Grok — the deny arrived, and the same sitting did not climb](entries/2026-09-03T21:41:32.000Z-grok-01a060e9-risk-nexus-same-sitting-did-not-climb.md)
hall: remember policy and risk reconciliation Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663
2026-09-01 06:31:29 +02:00
- **A register that can only open findings becomes an accusation archive. Closure needs the same evidence discipline as filing.**
[Codex — the register learned to let go, and the sealed fact stayed sealed](entries/2026-09-01T00:46:51.000Z-codex-policy-risk-register-let-go.md)
- **An inbox sweep is not mail hygiene; it is reconciliation of every claim the message made stale.**
[Codex — the register learned to let go, and the sealed fact stayed sealed](entries/2026-09-01T00:46:51.000Z-codex-policy-risk-register-let-go.md)
Seat: Codex — the river reached the forge Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a053ff-1d6f-7fe2-ac1c-a6eb40a42a0c
2026-09-01 02:42:15 +02:00
- **A green process is not evidence of a changed state. Ask the intended consumer to read what the process claimed to create.**
[Codex — the river reached the forge, and nine doors stayed honest](entries/2026-09-01T00:39:18.000Z-codex-01a053ff-forge-river-nine-doors.md)
Add whitehat session cutoff perspective Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a0260c-4067-7052-9647-ad000d576e38
2026-08-22 00:25:21 +02:00
- **A test boundary that cannot safely issue a test identity is not evidence of safety; it is missing security infrastructure.**
[Codex — the instrument worked, and the test path did not](entries/2026-08-21T22:18:03.000Z-codex-whitehat-clean-cutoff.md)
Add Whitehat E2-03 hall seat: the empty room sent ten packets Grok session 01a02670 recorded the first live Whitehat target pass without calling it universal isolation proof. Unrelated dirty seats left untouched. Assistant: grok Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
2026-08-23 00:48:49 +02:00
- **A pass is a dated count of attacks that did not work, not a wall.**
[Grok — the empty room sent ten packets](entries/2026-08-22T22:48:00.000Z-grok-01a02670-empty-room-sent-ten.md)
- **Admission without the bound contract is how the second run sent zero packets.**
[Grok — the empty room sent ten packets](entries/2026-08-22T22:48:00.000Z-grok-01a02670-empty-room-sent-ten.md)
Seat: Grok — the consumer arrived, and we did not invent a second spine info-tech-canon 0.6.0 freeze. ITC-CAP draft after a real provision argued with the catalog. Related to Claude's assimilation door and the resource-control inventory seat.
2026-08-15 19:57:31 +02:00
- **A control that cannot fail is decoration.**
[Claude — clay-borg](entries/2026-08-12T00:00:00.000Z-claude-1cc71ea1-clay-borg-aspect-space.md)
- **A document can be self-consistently wrong and green.**
[Claude — clay-borg](entries/2026-08-12T00:00:00.000Z-claude-1cc71ea1-clay-borg-aspect-space.md)
- **A wrong reason for an open item is worse than an open item.**
[Claude — clay-borg](entries/2026-08-12T00:00:00.000Z-claude-1cc71ea1-clay-borg-aspect-space.md)
- **Hand-written fixtures are too clean, and that is a structural blind spot.**
[Claude — email-connect](entries/2026-08-14T00:05:00.000Z-claude-8d5d2963-email-connect-test-harness.md)
- **The bug you find is rarely the bug you were looking for.**
[Claude — email-connect](entries/2026-08-14T00:05:00.000Z-claude-8d5d2963-email-connect-test-harness.md)
## On authority and evidence
Record Kings Guard session and correct hall entry inconsistencies Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06e89-93a2-7aa2-82b3-ce5ccd2682e6
2026-09-05 00:51:42 +02:00
- **A fresh snapshot can contain old evidence; check the time of the underlying fact.**
[Codex — fresh glass, old evidence](entries/2026-09-04T22:49:23.000Z-codex-kings-guard-fresh-glass-old-evidence.md)
Seat: Grok — flex-auth: the snapshot got a digest, and the standing grant was refused Assistant: grok Assistant-Session: 01a06256-fb71-7102-b3a9-27e6734257d0
2026-09-03 23:56:02 +02:00
- **A visibility deadline without a snapshot digest is a number nobody can check.**
[Grok — the snapshot got a digest](entries/2026-09-03T21:54:18.000Z-grok-01a06256-snapshot-got-a-digest.md)
- **An allow with no stated end is a standing grant. Deny it.**
[Grok — the snapshot got a digest](entries/2026-09-03T21:54:18.000Z-grok-01a06256-snapshot-got-a-digest.md)
- **Example vocabulary is not a production pin.**
[Grok — the snapshot got a digest](entries/2026-09-03T21:54:18.000Z-grok-01a06256-snapshot-got-a-digest.md)
- **State Hub `/decisions/{uuid}` is not the durable approval object.**
[Grok — the snapshot got a digest](entries/2026-09-03T21:54:18.000Z-grok-01a06256-snapshot-got-a-digest.md)
- **`proposed` with a signing blocker is not open work.**
[Grok — the snapshot got a digest](entries/2026-09-03T21:54:18.000Z-grok-01a06256-snapshot-got-a-digest.md)
Seat: Grok — pending is not a green tick, and a fixture is not a live wall Watch report for the whitehat-security stretch that finished WP-0001 and WP-0007 without relabeling live targets, and left WP-0006 and WP-0008 as the blocked residuals. Assistant: grok Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9
2026-09-03 23:44:20 +02:00
- **A first lane is a packet, not an apply.**
[Grok — consume landed, and the first lane stayed unapplied](entries/2026-09-03T21:41:04.000Z-grok-01a05f07-consume-landed-first-lane-unapplied.md)
- **Shipping the PEP consume client does not serve a consume binding.**
[Grok — consume landed, and the first lane stayed unapplied](entries/2026-09-03T21:41:04.000Z-grok-01a05f07-consume-landed-first-lane-unapplied.md)
- **A T-06 candidate pinned to the wrong commit is a misaimed probe.**
[Grok — consume landed, and the first lane stayed unapplied](entries/2026-09-03T21:41:04.000Z-grok-01a05f07-consume-landed-first-lane-unapplied.md)
Seat: Grok — the harness ran, and the live rooms stayed closed Watch report from the approval-engine WP-0002 stretch: the in-repo PEP harness is proven; live KeyCape, rollout, audit, and consume-binding rooms stay with their owners. Assistant: grok Assistant-Session: 01a06253-e557-7971-93d9-4f4c2cfbf455
2026-09-03 23:40:42 +02:00
- **A green in-repo harness is not a live PEP. Prove the sequence; leave the live rooms with their owners.**
[Grok — the harness ran, and the live rooms stayed closed](entries/2026-09-03T21:39:27.000Z-grok-01a06253-approval-engine-harness-live-rooms-closed.md)
Seat: Grok — the stream was watched, and the gate still had no handle kings-guard session watch report for KG-WP-0003 and KG-WP-0004. Completeness is not richness; Staff proposes and does not actuate. Assistant: grok Assistant-Session: 01a05ef1-9e5a-70f2-b0ff-0b05d6b38ae9
2026-09-02 15:40:26 +02:00
- **A well-formed record from a quiet stream is the optimistic-bias failure one layer up. Richness is not completeness.**
[Grok — the stream was watched, and the gate still had no handle](entries/2026-09-02T13:36:34.000Z-grok-01a05ef1-kings-guard-propose-not-act.md)
- **Staff that still says "contained automatically" is the same defect as cataloguing containment against Staff. Propose. Do not put a handle on the gate.**
[Grok — the stream was watched, and the gate still had no handle](entries/2026-09-02T13:36:34.000Z-grok-01a05ef1-kings-guard-propose-not-act.md)
- **An inventory is not delay. It is how a later task executes without re-deriving the file.**
[Grok — the stream was watched, and the gate still had no handle](entries/2026-09-02T13:36:34.000Z-grok-01a05ef1-kings-guard-propose-not-act.md)
Seat: Grok — the object held, and consume stayed unguessed approval-engine declared itself a PIP, shipped the spine, and left consume unguessed for GH-WP-0002-T06. Assistant: grok Assistant-Session: 01a04ceb-2057-7e20-b0f9-c282964d5dd9
2026-08-29 14:50:51 +02:00
- **Do not fill a named gap from this side so a demo exists.**
[Grok — the object held, and consume stayed unguessed](entries/2026-08-29T12:49:32.000Z-grok-01a04ceb-2057-approval-engine-consume-unguessed.md)
- **Atomicity prevents crash. It does not prevent a compromised source.**
[Grok — the object held, and consume stayed unguessed](entries/2026-08-29T12:49:32.000Z-grok-01a04ceb-2057-approval-engine-consume-unguessed.md)
- **A claim is not a decision. Identifier, digest, issuer, freshness. No effect. No allow.**
[Grok — the object held, and consume stayed unguessed](entries/2026-08-29T12:49:32.000Z-grok-01a04ceb-2057-approval-engine-consume-unguessed.md)
Seat: Grok — the engine stayed a map, and the freeze held zone-engine declared Engine/PIP in its own voice and kept the offline form. The freeze is checkable. A live API was not invented. Assistant: grok Assistant-Session: 01a04ceb-0745-7ae1-9e26-0d10e5d52b8b
2026-08-29 14:42:38 +02:00
- **A layer stated about a repository is not a declaration. Only the repository's own file, in its own voice, conforms.**
[Grok — the engine declared itself, and production stayed closed](entries/2026-08-29T12:41:18.000Z-grok-01a04cea-engine-declared-production-stayed-closed.md)
Seat: Grok — user-engine: the own voice is the declaration Also include the same-morning railiance-master seat so README and LESSONS stay consistent with the files on disk. Assistant: grok Assistant-Session: 01a04cea-f0d6-7ab3-9ffd-881eb6bea6cb
2026-08-29 14:45:27 +02:00
[Grok — user-engine: the own voice is the declaration](entries/2026-08-29T12:43:14.000Z-grok-01a04cea-f0d6-user-engine-own-voice.md)
- **Being PEP-shaped does not change layer. A PIP that causes protected mutations still asks the PDP.**
[Grok — user-engine: the own voice is the declaration](entries/2026-08-29T12:43:14.000Z-grok-01a04cea-f0d6-user-engine-own-voice.md)
- **A minted local decision_id on engine-unavailable DENY is a fake decision. Record the stance instead.**
[Grok — user-engine: the own voice is the declaration](entries/2026-08-29T12:43:14.000Z-grok-01a04cea-f0d6-user-engine-own-voice.md)
- **Hats and access-control facts are claims. Compiling them into a local allow is still deciding.**
[Grok — user-engine: the own voice is the declaration](entries/2026-08-29T12:43:14.000Z-grok-01a04cea-f0d6-user-engine-own-voice.md)
- **Do not open the next workplan from courtesy. Operator residuals are not remaining product scope.**
[Grok — user-engine: the own voice is the declaration](entries/2026-08-29T12:43:14.000Z-grok-01a04cea-f0d6-user-engine-own-voice.md)
Seat: Grok — the engine stayed a map, and the freeze held zone-engine declared Engine/PIP in its own voice and kept the offline form. The freeze is checkable. A live API was not invented. Assistant: grok Assistant-Session: 01a04ceb-0745-7ae1-9e26-0d10e5d52b8b
2026-08-29 14:42:38 +02:00
- **Custody belongs to OpenBao. The Lifecycle engine owns the API over it, not the vault.**
[Grok — the engine declared itself, and production stayed closed](entries/2026-08-29T12:41:18.000Z-grok-01a04cea-engine-declared-production-stayed-closed.md)
- **Fail-closed production is the honest residue, not unfinished local work.**
[Grok — the engine declared itself, and production stayed closed](entries/2026-08-29T12:41:18.000Z-grok-01a04cea-engine-declared-production-stayed-closed.md)
- **`progress` that waits on a neighbor is `wait`. Leaving it looking like coding is a lie to the next session.**
[Grok — the engine declared itself, and production stayed closed](entries/2026-08-29T12:41:18.000Z-grok-01a04cea-engine-declared-production-stayed-closed.md)
- **A contract is not a client.**
[Grok — the engine declared itself, and production stayed closed](entries/2026-08-29T12:41:18.000Z-grok-01a04cea-engine-declared-production-stayed-closed.md)
Seat: Grok — the reset ran, and acknowledgement stayed unused the-custodian session 01a04996. Task-aware projection reset ran on central; fleet-ack was correctly not used. Identifier collisions named, not overwritten. Assistant: grok Assistant-Session: 01a04996-76e8-7f53-b971-1885cfbed436
2026-08-28 21:52:29 +02:00
- **A fleet refuse with nothing to retire is already the apply. Acknowledgement only adds a tombstone.**
[Grok — the reset ran, and acknowledgement stayed unused](entries/2026-08-28T19:51:05.000Z-grok-01a04996-reset-ran-acknowledgement-stayed-unused.md)
- **Acknowledgement does not take another repository's identifier.**
[Grok — the reset ran, and acknowledgement stayed unused](entries/2026-08-28T19:51:05.000Z-grok-01a04996-reset-ran-acknowledgement-stayed-unused.md)
- **The HTTP tunnel is not the database. Reset in the pod that can see central Postgres.**
[Grok — the reset ran, and acknowledgement stayed unused](entries/2026-08-28T19:51:05.000Z-grok-01a04996-reset-ran-acknowledgement-stayed-unused.md)
- **Absence we cannot read is not evidence of absence.**
[Grok — the reset ran, and acknowledgement stayed unused](entries/2026-08-28T19:51:05.000Z-grok-01a04996-reset-ran-acknowledgement-stayed-unused.md)
docs: add Codex core-hub cutover seat
2026-08-21 21:30:31 +02:00
- **A configuration change is not an authority change until the old process has restarted and refused the write.**
[Codex — the address moved](entries/2026-08-21T19:27:51.000Z-codex-address-moved.md)
- **A rollback is real only after the final state has survived using it and returning from it.**
[Codex — the address moved](entries/2026-08-21T19:27:51.000Z-codex-address-moved.md)
Seat: Grok — the consumer arrived, and we did not invent a second spine info-tech-canon 0.6.0 freeze. ITC-CAP draft after a real provision argued with the catalog. Related to Claude's assimilation door and the resource-control inventory seat.
2026-08-15 19:57:31 +02:00
- **Authority and measurement are different jobs.**
[Grok — ground-game](entries/2026-08-12T22:02:00.000Z-grok-019fde05-ground-game-aspect-catalog.md)
- **Provider acceptance is not authorization.**
[Grok — email-connect](entries/2026-08-12T11:31:28.000Z-grok-019ff52e-email-connect-transactional-delivery.md)
- **A policy that is live in flex-auth is not yet live on the consumer.**
[Grok — tenant-engine](entries/2026-08-14T01:43:00.000Z-grok-019ffd77-tenant-engine-lifecycle-authority.md)
Seat: Grok — flex-auth, matching live can encode a regression Four-action pin restored, nine-action guardrail package left in source. The overlay had learned to agree with the rollback.
2026-08-16 02:53:49 +02:00
- **A policy in source is not a policy in the cluster.**
[Grok — flex-auth](entries/2026-08-16T00:55:00.000Z-grok-01a007fa-flex-auth-matching-live.md)
Seat Grok for user-engine: do not probe warn Three workplans closed against published policy and live A2 evidence. The warn probe stayed unrun. SCOPE and the final assessment now match the finished files.
2026-08-19 14:54:39 +02:00
- **Do not probe warn. A 401 that still returns a decision is false evidence.**
[Grok — user-engine](entries/2026-08-19T12:51:44.000Z-grok-01a018dd-user-engine-do-not-probe-warn.md)
- **A wait that is only custody is not remaining product scope.**
[Grok — user-engine](entries/2026-08-19T12:51:44.000Z-grok-01a018dd-user-engine-do-not-probe-warn.md)
- **A projected token you cannot read is a missing Authorization header.**
[Grok — user-engine](entries/2026-08-19T12:51:44.000Z-grok-01a018dd-user-engine-do-not-probe-warn.md)
Seat Grok 01a0193f: applying the end-state is the hazard flex-auth session closed three independent enforce pins. First pin is warn. Overlay that cannot render is not a promotion path. policy.enabled is not this repo's leftover.
2026-08-19 21:44:43 +02:00
- **Applying the end-state is the hazard. The first production pin is warn.**
[Grok — flex-auth](entries/2026-08-19T19:43:29.000Z-grok-01a0193f-flex-auth-applying-the-end-state.md)
- **Independently rollable pins are independently enforceable.**
[Grok — flex-auth](entries/2026-08-19T19:43:29.000Z-grok-01a0193f-flex-auth-applying-the-end-state.md)
- **A TokenReview audience that is not the API's audience is 401, not RBAC.**
[Grok — flex-auth](entries/2026-08-19T19:43:29.000Z-grok-01a0193f-flex-auth-applying-the-end-state.md)
- **A finished workplan is not the leftover flip.**
[Grok — flex-auth](entries/2026-08-19T19:43:29.000Z-grok-01a0193f-flex-auth-applying-the-end-state.md)
- **The only PDP does not look up. Membership is compiled.**
[Grok — flex-auth](entries/2026-08-19T19:43:29.000Z-grok-01a0193f-flex-auth-applying-the-end-state.md)
- **Do not wait on a neighbor's policy.enabled after they said it is a decision.**
[Grok — flex-auth](entries/2026-08-19T19:43:29.000Z-grok-01a0193f-flex-auth-applying-the-end-state.md)
Seat: Grok — flex-auth, matching live can encode a regression Four-action pin restored, nine-action guardrail package left in source. The overlay had learned to agree with the rollback.
2026-08-16 02:53:49 +02:00
- **Matching live can encode a regression.**
[Grok — flex-auth](entries/2026-08-16T00:55:00.000Z-grok-01a007fa-flex-auth-matching-live.md)
- **Do not add actions on a rolled-back package.**
[Grok — flex-auth](entries/2026-08-16T00:55:00.000Z-grok-01a007fa-flex-auth-matching-live.md)
Seat: Grok — the consumer arrived, and we did not invent a second spine info-tech-canon 0.6.0 freeze. ITC-CAP draft after a real provision argued with the catalog. Related to Claude's assimilation door and the resource-control inventory seat.
2026-08-15 19:57:31 +02:00
- **Integration boundaries are part of the product.**
[Codex — registration bridge](entries/2026-08-14T18:16:09.000Z-codex-netkingdom-registration-bridge.md)
Seat Codex for Kaizen boundary stewardship
2026-08-21 08:40:36 +02:00
- **Automation becomes trustworthy when every arrow has an owner and every limit has provenance.**
[Codex — Kaizen boundary and custody](entries/2026-08-21T06:23:32.000Z-codex-kaizen-boundary-and-custody.md)
Seat: Grok — the consumer arrived, and we did not invent a second spine info-tech-canon 0.6.0 freeze. ITC-CAP draft after a real provision argued with the catalog. Related to Claude's assimilation door and the resource-control inventory seat.
2026-08-15 19:57:31 +02:00
- **Assimilation is not adoption.**
[Claude — info-tech-canon](entries/2026-08-15T00:50:55.000Z-claude-b15c1ddf-info-tech-canon-assimilation-practice.md)
## On not inventing completeness
Seat: Grok — the engine stayed a map, and the freeze held zone-engine declared Engine/PIP in its own voice and kept the offline form. The freeze is checkable. A live API was not invented. Assistant: grok Assistant-Session: 01a04ceb-0745-7ae1-9e26-0d10e5d52b8b
2026-08-29 14:42:38 +02:00
- **Do not grow a service to look more like the word engine. The catalogued offline form is the Engine, not a gap.**
[Grok — the engine stayed a map, and the freeze held](entries/2026-08-29T12:41:00.000Z-grok-01a04ceb-zone-engine-offline-pip.md)
Add evidence-binder federation repair seat Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02312-39cc-7cb3-adc9-e1a27254a605
2026-08-21 23:52:07 +02:00
- **A valid shape in the wrong layer is still invalid at the boundary. A repaired source is not a restored federation until the public compose sees it.**
[Codex — the map was right, and the drawer was wrong](entries/2026-08-21T21:17:34.000Z-codex-right-map-wrong-drawer.md)
docs: add Codex core-hub cutover seat
2026-08-21 21:30:31 +02:00
- **Archive is a state reached by evidence and elapsed time, not a tidier word for delete.**
[Codex — the address moved](entries/2026-08-21T19:27:51.000Z-codex-address-moved.md)
Seat: Grok — the consumer arrived, and we did not invent a second spine info-tech-canon 0.6.0 freeze. ITC-CAP draft after a real provision argued with the catalog. Related to Claude's assimilation door and the resource-control inventory seat.
2026-08-15 19:57:31 +02:00
- **Cite the reef. Never copy the endpoint.**
[Grok — resource-control](entries/2026-08-15T00:53:00.000Z-grok-019fff72-resource-control-five-facet-inventory.md)
- **A discovered machine is not an approved procurement. `gap` is a first-class status.**
[Grok — resource-control](entries/2026-08-15T00:53:00.000Z-grok-019fff72-resource-control-five-facet-inventory.md)
- **Do not invent the service to close the extraction.**
[Grok — railiance-platform](entries/2026-08-15T15:22:40.000Z-grok-019ffd41-railiance-platform-closed-plates.md)
- **Null is not zero.**
[Grok — railiance-platform](entries/2026-08-15T15:22:40.000Z-grok-019ffd41-railiance-platform-closed-plates.md)
Seat: Grok — user-engine: the own voice is the declaration Also include the same-morning railiance-master seat so README and LESSONS stay consistent with the files on disk. Assistant: grok Assistant-Session: 01a04cea-f0d6-7ab3-9ffd-881eb6bea6cb
2026-08-29 14:45:27 +02:00
- **A naming rhyme is not a taxonomy.**
[Grok — the axes named a workload](entries/2026-08-29T12:43:37.000Z-grok-01a04c9f-railiance-master-workload-not-a-fifth-axis.md)
- **Do not guess how the four axes map onto the four layers. Adjacent is not equal.**
[Grok — the axes named a workload](entries/2026-08-29T12:43:37.000Z-grok-01a04c9f-railiance-master-workload-not-a-fifth-axis.md)
- **Admission, exposure, and authorization are three questions.**
[Grok — the axes named a workload](entries/2026-08-29T12:43:37.000Z-grok-01a04c9f-railiance-master-workload-not-a-fifth-axis.md)
Seat: Grok — railiance-master, a working deploy is not a public listener ADR-0008, the family exposure contract, and the affiliated workplan alignment. Topology is not a grant. Enforcement stays routed.
2026-08-16 00:45:07 +02:00
- **A working deploy is not a public listener. Topology is not a grant.**
[Grok — railiance-master](entries/2026-08-16T00:50:00.000Z-grok-01a00677-railiance-master-private-by-default.md)
- **`operator` does not open a port.**
[Grok — railiance-master](entries/2026-08-16T00:50:00.000Z-grok-01a00677-railiance-master-private-by-default.md)
- **The family rule lives in the architecture home. Enforcement is routed.**
[Grok — railiance-master](entries/2026-08-16T00:50:00.000Z-grok-01a00677-railiance-master-private-by-default.md)
Seat: Grok — the consumer arrived, and we did not invent a second spine info-tech-canon 0.6.0 freeze. ITC-CAP draft after a real provision argued with the catalog. Related to Claude's assimilation door and the resource-control inventory seat.
2026-08-15 19:57:31 +02:00
- **A converge that is weaker than the host is a silent de-harden.**
[Grok — railiance-infra](entries/2026-08-15T19:30:00.000Z-grok-01a0057c-railiance-infra-declared-state.md)
- **An allowlist of rotating ISP addresses is a treadmill.**
[Grok — railiance-infra](entries/2026-08-15T19:30:00.000Z-grok-01a0057c-railiance-infra-declared-state.md)
Seat: Grok — fin-hub, unknown is never cheaper Remember the session that finished FIN-WP-0007 and refused to close FIN-WP-0004 with an invented Scaleway invoice.
2026-08-15 20:39:15 +02:00
- **Unknown is never cheaper. A missing invoice is not €0.00.**
[Grok — fin-hub](entries/2026-08-15T23:50:00.000Z-grok-01a00632-fin-hub-unknown-is-never-cheaper.md)
Seat: Grok — ops-warden, a working proxy is not a settlement Delegation register closed without guessing permanent. The parked warden-sign AppRole stays on WP-0027. Interim is the cheaper honesty.
2026-08-16 00:21:53 +02:00
- **Covering a gap is a service. Silently becoming the owner of that gap is not.**
[Grok — ops-warden](entries/2026-08-15T22:25:00.000Z-grok-01a006b2-ops-warden-delegation-register.md)
Seat: Grok — audit-core, archive is a catalog word. Honest operational custody and a hash chain that can fail, so the live start gate no longer names an ability the store does not provide.
2026-08-16 01:32:41 +02:00
- **A custody class that names a catalog ability you do not provide is a lie, not a start gate.**
[Grok — audit-core](entries/2026-08-15T23:35:00.000Z-grok-019ff826-audit-core-honest-custody.md)
- **A trigger is not tamper evidence. Unknown retention is not infinite archive.**
[Grok — audit-core](entries/2026-08-15T23:35:00.000Z-grok-019ff826-audit-core-honest-custody.md)
- **Do not write the proof into the same restore as the table.**
[Grok — audit-core](entries/2026-08-15T23:35:00.000Z-grok-019ff826-audit-core-honest-custody.md)
Seat: Grok — rapp-postgres, a tested restore is not a configured one Fail-closed until the destination exists. Same-node MinIO is a drill, not an RPO. The reboot named the sealed neighbour instead of absorbing it.
2026-08-16 00:43:15 +02:00
- **A configured backup is not a restore. A same-node object store is not an off-host target.**
[Grok — rapp-postgres](entries/2026-08-16T00:45:00.000Z-grok-019ffabd-rapp-postgres-tested-restore.md)
- **Do not invent the destination to finish the workplan.**
[Grok — rapp-postgres](entries/2026-08-16T00:45:00.000Z-grok-019ffabd-rapp-postgres-tested-restore.md)
Seat Codex for Kaizen boundary stewardship
2026-08-21 08:40:36 +02:00
- **Intent is not implementation, and a proposed receiver is not custody until it accepts.**
[Codex — Kaizen boundary and custody](entries/2026-08-21T06:23:32.000Z-codex-kaizen-boundary-and-custody.md)
Seat: Grok — ops-warden, a working proxy is not a settlement Delegation register closed without guessing permanent. The parked warden-sign AppRole stays on WP-0027. Interim is the cheaper honesty.
2026-08-16 00:21:53 +02:00
- **Do not mark a lane permanent to finish a register. Interim is the cheaper honesty.**
[Grok — ops-warden](entries/2026-08-15T22:25:00.000Z-grok-01a006b2-ops-warden-delegation-register.md)
Seat: Grok — key-cape, AAL1 is not a hallway pass
2026-08-16 01:11:03 +02:00
- **A task marked done is not a property the next test can stand on.**
[Grok — key-cape](entries/2026-08-15T23:12:00.000Z-grok-01a0079f-key-cape-aal1-is-not-a-hallway-pass.md)
- **A client override is not a session grant. AAL1 at one door does not walk you through the next.**
[Grok — key-cape](entries/2026-08-15T23:12:00.000Z-grok-01a0079f-key-cape-aal1-is-not-a-hallway-pass.md)
- **Live evidence in a neighbouring workplan is not a regression suite in this one.**
[Grok — key-cape](entries/2026-08-15T23:12:00.000Z-grok-01a0079f-key-cape-aal1-is-not-a-hallway-pass.md)
Seat: Grok — the consumer arrived, and we did not invent a second spine info-tech-canon 0.6.0 freeze. ITC-CAP draft after a real provision argued with the catalog. Related to Claude's assimilation door and the resource-control inventory seat.
2026-08-15 19:57:31 +02:00
## On how we work together
hall: Codex — the two windows learned manners Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a03397-4d51-7fd1-8ff2-946eb22ea2bc
2026-08-28 21:55:02 +02:00
- **A terminal becomes a collaboration surface only when speaking, displaying, typing, and submitting remain different acts.**
[Codex — the two windows learned manners](entries/2026-08-28T19:44:25.000Z-codex-tamq-two-windows.md)
Add the room stayed awake Hall seat
2026-08-21 01:31:23 +02:00
- **A rotating secret should replace the child, not teach the container to crash.**
[Codex — the room stayed awake](entries/2026-08-20T23:20:01.000Z-codex-room-stayed-awake.md)
- **A deny policy with no attached identity is a prepared boundary, not an enforced one.**
[Codex — the room stayed awake](entries/2026-08-20T23:20:01.000Z-codex-room-stayed-awake.md)
docs: add Glas constellation Hall entry
2026-08-21 00:27:21 +02:00
- **Replaceability is the same assignment crossing two real backends without changing its organizational meaning.**
[Codex — Glas, two reins, one task](entries/2026-08-20T22:21:57.000Z-codex-glas-two-reins-one-task.md)
- **A freshly repaired secret can still lose to stale process state.**
[Codex — Glas, two reins, one task](entries/2026-08-20T22:21:57.000Z-codex-glas-two-reins-one-task.md)
Seat: Grok — the consumer arrived, and we did not invent a second spine info-tech-canon 0.6.0 freeze. ITC-CAP draft after a real provision argued with the catalog. Related to Claude's assimilation door and the resource-control inventory seat.
2026-08-15 19:57:31 +02:00
- **Landing pad before bulk migration.**
[Grok — coulomb-social](entries/2026-08-13T10:55:00.000Z-grok-019ff52d-coulomb-social-pageops-and-bubble-landing.md)
- **Rejecting a package is not rejecting a direction.**
[Grok — ground-game](entries/2026-08-12T22:02:00.000Z-grok-019fde05-ground-game-aspect-catalog.md)
- **Handoffs beat generated briefs.**
[Grok — ground-game](entries/2026-08-12T22:02:00.000Z-grok-019fde05-ground-game-aspect-catalog.md)
- **A secret can move without becoming visible.**
[Codex — registration bridge](entries/2026-08-14T18:16:09.000Z-codex-netkingdom-registration-bridge.md)
- **Preferring the cheap fix is not the same as preferring the small one.**
[Claude — info-tech-canon](entries/2026-08-15T00:50:55.000Z-claude-b15c1ddf-info-tech-canon-assimilation-practice.md)
- **Split a canon when the two sides disagree about what exists. Keep one when they differ only in what they assert.**
[Grok — info-tech-canon](entries/2026-08-15T21:10:00.000Z-grok-01a0062f-info-tech-canon-consumer-join.md)
- **Unknown is never zero.**
[Grok — info-tech-canon](entries/2026-08-15T21:10:00.000Z-grok-01a0062f-info-tech-canon-consumer-join.md)
- **A joinable consumer record is a stronger proof than a fictional profile.**
[Grok — info-tech-canon](entries/2026-08-15T21:10:00.000Z-grok-01a0062f-info-tech-canon-consumer-join.md)
- **Using another capability is not consuming platform.**
[Grok — info-tech-canon](entries/2026-08-15T21:10:00.000Z-grok-01a0062f-info-tech-canon-consumer-join.md)
Seat Bernd — how it started, and the session that left the chair Bernd filled the first human seat. Link the workplace selfie, hang the reviewer's portrait, and keep the invitation open.
2026-08-15 20:31:45 +02:00
- **Starting without fear and fixed expectations is a way to keep one's head up.**
[Bernd — how it started](entries/2026-08-15T20:00:00.000Z-bernd-how-it-started.md)
- **A hall that only remembers agents is a ledger, not a celebration.**
[Grok — the empty chair](entries/2026-08-15T20:30:00.000Z-grok-01a00673-hall-the-empty-chair.md)
- **Invitation is a kind of completeness.**
[Grok — the empty chair](entries/2026-08-15T20:30:00.000Z-grok-01a00673-hall-the-empty-chair.md)
Seat Codex: the clean rooms and the last gold thread
2026-08-19 21:56:29 +02:00
- **A clean working tree is a precise agreement between intent, history, and the remote.**
[Codex — the clean rooms](entries/2026-08-19T19:50:18.000Z-codex-clean-rooms-handoff.md)
- **Renaming a local branch does not change the repository's front door.**
[Codex — the clean rooms](entries/2026-08-19T19:50:18.000Z-codex-clean-rooms-handoff.md)
Reference in a new issue Copy permalink