Admit source evidence snapshots and harden stream completeness

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06e89-93a2-7aa2-82b3-ce5ccd2682e6

workplans/KG-WP-0006-observation-input-review.md

@@ -0,0 +1,77 @@
+---
+id: KG-WP-0006
+type: workplan
+title: "Review and admit canonical cadence and secret-use snapshot inputs"
+domain: infotech
+repo: kings-guard
+status: finished
+owner: codex
+topic_slug: netkingdom
+created: "2026-09-05"
+updated: "2026-09-05"
+origin: cross-repo
+origin_ref: KG-IN-0004
+---
+
+# Observation input review
+
+## Migrate the cadence consumer to the published generic contract
+
+```task
+id: KG-WP-0006-T01
+status: done
+priority: high
+```
+
+Consume InfoTechCanon standard/emission-cadence 0.1. Move profile and
+provenance fields into namespaced extensions; validate examples against the
+owner's schema without copying it. Keep the handover draft historical.
+
+## Harden Qonto stream admission and completeness checks
+
+```task
+id: KG-WP-0006-T02
+status: done
+priority: high
+```
+
+Reject mismatched instances, malformed sequences and counters; preserve missing
+context; prevent absent reconciliation fields or unrelated/future heartbeats
+from manufacturing completeness. Cover failure paths with regression tests.
+
+## Admit secret-use snapshots with explicit scope and unknown completeness
+
+```task
+id: KG-WP-0006-T03
+status: done
+priority: medium
+```
+
+Map the Engine envelope into a separate snapshot observation: it has no event
+actor, event timestamp, or authorization outcome. Require explicit lane scope,
+retain only typed metadata, preserve omitted evidence fields, translate the
+heartbeat interval as a freshness bound, and never promote snapshot freshness
+to stream completeness. Record residual source evidence needed for posture.
+
+## Completion evidence
+
+Reviewed the original pending Qonto implementation and added negative-path
+coverage for scoped streams, absent/invalid counters, snapshot instance binding,
+sequence validation, and heartbeat reconciliation. Both migrated fixtures pass
+InfoTechCanon's external schema 0.1. Snapshot mapping and limitations are in
+`docs/SecretUseSnapshotAdmission.md`.
+
+Residual KG-IN-0005 was recorded before completion for secret-use event
+provenance and operational evidence. Deployed Qonto acceptance remains explicitly
+waiting in KG-WP-0005-T03; local source-path tests do not close it. The NetKingdom
+profile remains proposed in its owner's repository; no adoption is asserted.
+
+Validation: 78 tests passed (including external canonical schema and local
+Qonto emit-path tests), lint and layer conformance passed, pilot demo passed,
+and `git diff --check` was clean. Decision: KG-DEC-2026-003.
+
+State Hub: decision KG-DEC-2026-003 was recorded successfully. Two required
+`statehub fix-consistency --repo kings-guard` attempts (including an unrestricted
+retry) failed with C-00: repository API lookup timed out. Workplan/intake files
+remain authoritative; the operator must rerun synchronization when the repository
+lookup is available. This is a synchronization failure, not implementation evidence.