coulomb/kings-guard
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Admit source evidence snapshots and harden stream completeness

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06e89-93a2-7aa2-82b3-ce5ccd2682e6
This commit is contained in:
tegwick 2026-09-05 00:42:19 +02:00
parent 824fb1b966
commit 31e9963933
34 changed files with 1057 additions and 122 deletions
Download patch file Download diff file Expand all files Collapse all files

57
intakes/intakes.md
View file

@ -1,5 +1,35 @@
# Intake records
## KG-IN-0004 — Admit the shipped secrets-engine secret-use snapshot as observation input
```yaml
id: KG-IN-0004
kind: intake
title: Admit the shipped secrets-engine secret-use snapshot as observation input
status: closed
outcome: promoted
promoted_to: KG-WP-0006
closed: '2026-09-05'
origin: cross-repo
origin_ref: SECRETS-WP-0008-T05
priority: medium
owner: kings-guard
requested_by: secrets-engine
description: >
secrets-engine has shipped `secrets-engine secret-use snapshot [--catalog-id
ID] [--json]` as a read-only Engine / Lifecycle surface over non-secret local
evidence and catalog metadata. The envelope explicitly denies completeness,
omits evidence-derived fields when no record exists, and declares a 1d
heartbeat through `secrets-engine evidence heartbeat`. Review and admit the
surface as an immune-observation input without adding a Tooling client,
treating omission as non-occurrence, or treating readiness or decision ids
as cached authorization. Define the lane-row mapping, cadence translation,
stale-snapshot behavior, and tests before changing the secret-observation
capability from pending.
created: '2026-09-04'
updated: '2026-09-05'
```
## KG-IN-0001 — Assent requested: Staff layer placement, control-plane vocabulary, and the posture asymmetry
```yaml
@ -123,3 +153,30 @@ resolution: 'Answered with a proposed revision. The boundary is recomputability,
docs/PostureMaturityBoundary.md. Decision: KG-DEC-2026-002.'
state_hub_intake_id: "01a04d8d-66f8-70ef-b2b5-1eff03569471"
```
## KG-IN-0005 — Source evidence needed for secret-abuse posture
```yaml
id: KG-IN-0005
kind: intake
title: Source evidence needed for secret-abuse posture
status: open
origin: residual
origin_ref: KG-WP-0006
priority: medium
owner: kings-guard
requested_by: kings-guard
related:
- SECRETS-WP-0008-T05
- KG-IN-0004
description: >
Snapshot parsing is admitted, but the secrets-engine envelope combines
historical fields without their event timestamps, actors or record provenance.
Obtain an Engine-owned event/provenance contract and explicit evidence-class
bindings, scoped heartbeat assertions and reconciliation evidence, plus an
authorized deployment capture. Review those inputs before enabling secret-abuse
posture. Keep snapshot completeness unknown and never infer allow/deny from
readiness, lifecycle metadata or decision ids. No direct Tooling contact.
created: '2026-09-05'
updated: '2026-09-05'
```