Building terminology for interoperable, adaptable, and extensible information-processing systems.
Find a file
tegwick d61ec8adf6
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Accept the SecurityCanon extension boundary
SecurityCanon publishes an architecture-layer vocabulary for authority
relationships, the Mode of Authority, and references shared InfoTechCanon
concepts. This records the InfoTechCanon-side acceptance of that boundary and
adds reciprocal navigation from the federation interface README.

The accepted dispositions keep the layers apart. Mode of Authority describes the
relationship in which authority is exercised; CARING analyses how an
access-control implementation is composed. Auth Mode is orthogonal to access
operation and to CARING's Canonical Role and Plane, so the Operator role and the
OPERATE mode stay distinct concepts and neither is renamed. SecurityCanon does
not reuse Actor or Subject, which ITC-ACCESS owns and binds as "Subject is the
access-control view of an actor"; it renamed its on-behalf-of dimension to
AuthorityContext instead, so no change is required here.

Verified at security-canon b1fa25eb: all five pinned manifest hashes match Git
blobs at this commit and the sources are unchanged in the review checkout, and
none of the seven concepts SecurityCanon declares appears in any InfoTechCanon
owned_concepts declaration, so the boundary introduces no ownership conflict.

No concept is transferred and nothing is removed, so the corpus is unchanged.
Generated indexes and the repository tree are refreshed for the added file;
make check passes with 46 tests, clean validation and a passing small-saas
profile. This is an agent review, not human sign-off, and it records no consumer
adoption or conformance claim.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AUkN13CAqtXWPXuEiEtmJj

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 36656@bnt-lap001
Assistant-Session: 66d6eece-d245-43ca-85e8-68a1b5970a67
2026-09-20 21:49:47 +02:00
.claude/rules docs: workplan-first agent guidance prose (CUST-WP-0055 T04 batch 3) 2026-07-08 17:15:41 +02:00
.forgejo/workflows Add Forgejo CI smoke workflow (enablement template) 2026-07-08 12:33:13 +02:00
.repo-manager Implement canon conformance and maintenance optimizations 2026-09-05 00:50:09 +02:00
demand demand: fin-hub CapabilityConsumption lineage and entitlement structure 2026-08-15 20:02:27 +02:00
docs Implement canon conformance and maintenance optimizations 2026-09-05 00:50:09 +02:00
feedback Canon 0.5.0: uses_provisions so P stays purchased platform 2026-08-15 19:23:44 +02:00
history Implement canon conformance and maintenance optimizations 2026-09-05 00:50:09 +02:00
incoming Add feedback/ for consumer reports on canon-concept utility 2026-08-15 18:49:24 +02:00
infospace Accept the SecurityCanon extension boundary 2026-09-20 21:49:47 +02:00
intakes Register Family demand residual from federation foundation 2026-09-06 08:07:26 +02:00
registry Draft capability entry (reuse-surface REUSE-WP-0017-T04, cohort 1) 2026-07-06 19:03:43 +02:00
seeds Restructuring for Task state model 2026-05-27 17:57:23 +02:00
spec Initial seeding of models, standards 2026-05-23 00:55:01 +02:00
src/info_tech_canon Introduce identity model and reconcile upstream imports 2026-09-05 22:11:46 +02:00
tests Publish reciprocal canon federation interface 2026-09-06 01:00:12 +02:00
trf Declare first TRF Phase: info-tech-canon-service-surface 2026-08-05 15:58:48 +02:00
wiki Initial seeding of models, standards 2026-05-23 00:55:01 +02:00
workplans Classify open workplans with flavor (CUST-WP-0072). 2026-09-14 15:50:42 +02:00
.custodian-brief.md chore(consistency): sync task status from DB [auto] 2026-09-05 21:15:59 +02:00
.gitignore Add project CLAUDE.md and ignore machine-local .claude files 2026-06-13 15:00:25 +02:00
.repo-classification.yaml Add .repo-classification.yaml (CUST-WP-0050 T11 agent first-pass) 2026-06-22 17:47:37 +02:00
AGENTS.md docs(agents): repoint remote State Hub URL to the in-cluster address 2026-08-25 00:21:12 +02:00
canon.yaml Publish reciprocal canon federation interface 2026-09-06 01:00:12 +02:00
CHANGELOG.md Publish reciprocal canon federation interface 2026-09-06 01:00:12 +02:00
CLAUDE.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:25 +02:00
CODING_AGENT_BOOTSTRAP.md Initial seeding of models, standards 2026-05-23 00:55:01 +02:00
INTENT.md Implement canon conformance and maintenance optimizations 2026-09-05 00:50:09 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-29 23:40:26 +02:00
Makefile Implement canon conformance and maintenance optimizations 2026-09-05 00:50:09 +02:00
pyproject.toml Implement canon conformance and maintenance optimizations 2026-09-05 00:50:09 +02:00
README.md Record InterfaceCanon boundary acceptance and adoption status 2026-09-09 22:48:09 +02:00
SCOPE.md Implement canon conformance and maintenance optimizations 2026-09-05 00:50:09 +02:00
WORK-RECORDS.md Record InterfaceCanon boundary acceptance and adoption status 2026-09-09 22:48:09 +02:00

Building terminology for interoperable, adaptable, and extensible information-processing systems.

Current Service

This repository now implements one concrete infospace under infospace/. The repository root remains the service, governance, and workplan shell.

The first service surface is intentionally small:

  • JSON-first CLI commands
  • importable Python service functions
  • read-only local HTTP API
  • artifact loading, checks, and graph summaries backed by infospace-bench

Source-Tree Usage

These commands assume infospace-bench is installed. For development against an adjacent checkout, use PYTHONPATH=src:../infospace-bench/src instead of PYTHONPATH=src, or use the Makefile targets.

PYTHONPATH=src python3 -m info_tech_canon inspect
PYTHONPATH=src python3 -m info_tech_canon artifacts
PYTHONPATH=src python3 -m info_tech_canon models
PYTHONPATH=src python3 -m info_tech_canon standards
PYTHONPATH=src python3 -m info_tech_canon review-kit
PYTHONPATH=src python3 -m info_tech_canon alignment-template
PYTHONPATH=src python3 -m info_tech_canon validate
PYTHONPATH=src python3 -m info_tech_canon capability-review /path/to/record.json
PYTHONPATH=src python3 -m info_tech_canon graph
PYTHONPATH=src python3 -m info_tech_canon index
PYTHONPATH=src python3 -m info_tech_canon views
PYTHONPATH=src python3 -m info_tech_canon profile inspect small-saas
PYTHONPATH=src python3 -m info_tech_canon profile validate small-saas
PYTHONPATH=src python3 -m info_tech_canon profile graph small-saas
PYTHONPATH=src python3 -m info_tech_canon api --host 127.0.0.1 --port 8765

After package installation, the same commands are available through the info-tech-canon console script.

API Endpoints

  • GET /health
  • GET /inspect
  • GET /artifacts
  • GET /artifacts?kind=model
  • GET /models
  • GET /standards
  • GET /review-kit
  • GET /alignment-template
  • GET /validate
  • GET /capability-review?path=
  • GET /graph
  • GET /graph?format=mermaid
  • GET /views
  • GET /views/{name}
  • GET /profiles/{profile}/inspect
  • GET /profiles/{profile}/validate
  • GET /profiles/{profile}/graph

Maintenance

Contract consumption, installation boundaries, independent adoption criteria, and freshness checks are documented in Reproducible canon consumption.

Additional CLI commands: emission-review RECORD, export-emission-contract DIRECTORY, validation-coverage, scope-inventory, check-generated, and benchmark-reads. Use --root PATH before the command to select a corpus independently of the installed package.

make validate
make index
make tree
make agent-briefs

First Profile Proof

The first executable profile proof is small-saas. It lives under infospace/profiles/small-saas/ and includes connected example artifacts for a tenant-aware SaaS service: service, system, tenants, user, team, dataset, deployment, task, policy, control, evidence, and incident.

Agent Retrieval

Agent-facing retrieval assets live under infospace/agent/:

  • global-agent-brief.md
  • retrieval-index.md, retrieval-index.yaml, and retrieval-index.json
  • per-artifact briefs in agent/briefs/
  • consumer brief templates in agent/consumer-briefs/
  • Canon Interface Card template in agent/templates/
  • consumer alignment review kit in agent/review-kit/
  • consumer alignment workplan template in agent/templates/

Alignment Reviews

The consumer alignment review kit lives under infospace/agent/review-kit/. It provides a repeatable workflow, model and standard selection guide, scorecard, structured review schema, and repo-local workplan template so agents can review consumer repositories against the canon without mixing consumer work into this repo.

Purpose And Demand

The PURPOSES candidate model is registered as a governance extension at infospace/models/governance/InfoTechCanonPurposeDemandExtension.md. It defines consumer purposes, demand signals, purpose fit, scope pressure, and evolution requests so consumer demand can inform repo governance without silently changing producer scope.

Consumer-filed reports on whether existing canon concepts provided utility live under feedback/. That directory is PurposeFit evidence, not a change request and not a canon artifact. A need still belongs in demand/; a body of knowledge still belongs in incoming/.

Evaluations

Canon-side evaluation packs live under infospace/evaluations/. The first pack is user-engine, which prepares pre-integration assessment of a user-management capability against Organization, Access Control, Governance, Data, Security, Task, PURPOSES, CARING, and the small-saas profile.

railiance-fabric adds conformance support for graph-oriented entity and edge capture, including mapping expectations and visualization examples that separate canonical relationships from display-only graph edges.

repo-scoping adds a canon comparison and extension pack for repository intent, current scope, future scope, consumer purposes, review decisions, evidence, source observations, utility relationships, scope freshness, and SCOPE.md as an interface profile. The pack is intended to seed the consumer-side repo-scoping workplan while keeping proposed canon extensions reviewable.

Benchmarks

CARING benchmark assets live under infospace/standards/caring/benchmarks/. The first benchmark is kubernetes-rbac, which maps Kubernetes RBAC native constructs into CARING descriptors and records canon pressure around native roles, effective access, derived workload capabilities, induced secret exposure, and the rule that a Namespace is not automatically a tenant boundary.

Canon federation

Published interface card declares exports, imports, authority, source-of-truth boundaries and reciprocal canon references.

InterfaceCanon boundary review records the accepted semantic boundary for InterfaceCanon draft 0.1.1.