2026-07-23 20:08:32 +00:00
|
|
|
# kings-guard
|
|
|
|
|
|
2026-07-24 00:24:53 +02:00
|
|
|
Adaptive security contracts and posture-evaluation scaffold for NetKingdom's
|
|
|
|
|
immune-architecture work.
|
|
|
|
|
|
2026-08-28 21:47:05 +02:00
|
|
|
**Layer: Staff** (NetKingdom Security Layer Model v0.1). kings-guard publishes
|
|
|
|
|
posture and requests bounded response through engine APIs; it never touches
|
|
|
|
|
Tooling directly and never renders an authorization decision.
|
|
|
|
|
|
2026-07-24 00:24:53 +02:00
|
|
|
## Current slice
|
|
|
|
|
|
|
|
|
|
This repository now contains four aligned pieces:
|
|
|
|
|
|
|
|
|
|
- `INTENT.md` / `SCOPE.md` for the repo's stable boundary
|
|
|
|
|
- `specs/NetKingdomImmuneArchitecture.md` for the reference architecture
|
|
|
|
|
- `specs/ImmuneContracts.md` for the first canonical contract layer
|
|
|
|
|
- `src/kings_guard/` plus `tests/` for a minimal posture loop scaffold
|
|
|
|
|
|
2026-08-28 21:47:05 +02:00
|
|
|
The current implementation is intentionally narrow. It does **not** enforce
|
|
|
|
|
anything. It provides:
|
2026-07-24 00:24:53 +02:00
|
|
|
|
|
|
|
|
- typed contracts for security genome, phenotype, observation, posture,
|
|
|
|
|
signal, effector request, and immune memory entry;
|
2026-09-02 00:11:57 +02:00
|
|
|
- evidence-class and stream-completeness fields, so silence is a finding and
|
|
|
|
|
record richness is not mistaken for a complete stream;
|
|
|
|
|
- a posture evaluator that judges one observation and, separately, the stream
|
|
|
|
|
it came from;
|
|
|
|
|
- a `qonto-assistant` pilot that still has a fixture regression case and can
|
|
|
|
|
also consume real events from that service's own AuditLogger.
|
2026-07-24 00:24:53 +02:00
|
|
|
|
|
|
|
|
## Repo layout
|
|
|
|
|
|
|
|
|
|
- `specs/NetKingdomImmuneArchitecture.md`
|
|
|
|
|
- `specs/ImmuneContracts.md`
|
|
|
|
|
- `docs/AdjacentSystemBoundary.md`
|
|
|
|
|
- `docs/pilots/QontoAssistantPosturePilot.md`
|
|
|
|
|
- `src/kings_guard/`
|
|
|
|
|
- `tests/`
|
|
|
|
|
- `workplans/`
|
|
|
|
|
|
|
|
|
|
## Dev commands
|
|
|
|
|
|
|
|
|
|
```bash
|
|
|
|
|
# preferred, if make + pip are available
|
|
|
|
|
make install-dev
|
|
|
|
|
make test
|
|
|
|
|
make lint
|
|
|
|
|
make run-demo
|
|
|
|
|
|
|
|
|
|
# direct shell fallback used in minimal environments
|
|
|
|
|
python3 -m pytest -q
|
|
|
|
|
PYTHONPATH=src python3 -m kings_guard.main --pilot qonto-assistant
|
|
|
|
|
```
|
