coulomb/kings-guard
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Admit source evidence snapshots and harden stream completeness

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06e89-93a2-7aa2-82b3-ce5ccd2682e6
This commit is contained in:
tegwick 2026-09-05 00:42:19 +02:00
parent 824fb1b966
commit 31e9963933
34 changed files with 1057 additions and 122 deletions
Download patch file Download diff file Expand all files Collapse all files

23
SCOPE.md
View file

@ -6,10 +6,11 @@
## Layer
**Staff** — interactive, non-deterministic; adaptive defence, observation,
containment. Binding rule: kings-guard never touches Tooling directly; it acts
only through Engine APIs. See `INTENT.md` and
`net-kingdom/canon/standards/security-layer-model_v0.6.md`.
**Staff** — interactive, non-deterministic; adaptive defence, observation, and
judgment. Kings-guard proposes containment but does not own or perform it.
Binding rule: kings-guard never touches Tooling directly; it acts only through
Engine APIs. See `INTENT.md` and
`net-kingdom/canon/standards/security-layer-model_v0.7.md`.
---
@ -103,9 +104,17 @@ does it decide and act?** The first is in scope. The second is another layer's.
no-standing-credential claim executable; the companion cites them estate-wide
as the reference for a repository with no Tooling contacts at all.
- Live observation of `qonto-assistant` uses the source's own AuditLogger emit
path. The hand-built fixture is retained as a regression case. Stream
completeness for the load-bearing deny class stays unknown until the source
publishes a cadence declaration and heartbeats.
path. The hand-built fixture is retained as a regression case. The local
contract proof now consumes the source-owned cadence declaration and checks
heartbeat, sequence, and reconciliation evidence for the load-bearing deny
class. Validation against a deployed stream remains operational work.
- Engine secret-use snapshots have a pure, scoped metadata adapter with explicit
unknown completeness and snapshot freshness findings. Event-based secret-abuse
posture awaits source provenance and operational evidence (`KG-IN-0005`). See
`docs/SecretUseSnapshotAdmission.md`.
- Cadence fixtures consume InfoTechCanon `standard/emission-cadence` 0.1;
the local handover draft is historical and NetKingdom profile adoption remains
with its owner.
- `specs/NetKingdomImmuneArchitecture.md` was swept under `KG-WP-0004` onto
Staff / Engine / Tooling (v0.7). It is an estate map; this repository
implements the Staff slice only. Containment is proposed, not performed.