coulomb/kings-guard
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Assent to Staff placement; release control-plane vocabulary (KG-IN-0001)

Browse source 
Answers gate-house intake KG-IN-0001 / GH-DEC-2026-001 against the
NetKingdom Security Layer Model v0.1.

Assent to all three points, recorded as KG-DEC-2026-001:
- kings-guard declares layer Staff in INTENT.md;
- "control plane" released to the Engine layer across INTENT, SCOPE,
  README, AGENTS and the adjacent-system boundary;
- the posture asymmetry adopted as a repo invariant — already satisfied,
  every EffectorRequest carries an explicit authority_boundary.

Boundary corrections: key-cape and OpenBao are Tooling, so their evidence
is routed through user-engine/access-engine and secrets-engine rather
than read directly.

Finding on the invited challenge to §5: do not weaken the binding rule,
but §4 catalogs kings-guard as owning containment while no engine exposes
a containment surface — the charter is currently undischargeable. Two
rulings requested of gate-house. Three engine gaps declared in INTENT.md.

Residual handed off as KG-IN-0002 (vocabulary sweep of the architecture
spec).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UEtvmYUBP2fDtirJGWn5MW

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 4014379@bnt-lap001
Assistant-Session: 4af9e20f-1768-4afc-951b-b507784e382b
This commit is contained in:
tegwick 2026-08-28 21:47:05 +02:00
parent f78bca1586
commit 3d6025ae51
9 changed files with 457 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

11
AGENTS.md
View file

@ -2,7 +2,12 @@
## Repo Identity
**Purpose:** Adaptive immune security control plane for complex multi-tenant cloud environments.
**Purpose:** Adaptive immune defence for complex multi-tenant cloud environments.
**Layer:** Staff (NetKingdom Security Layer Model v0.1). Never open a direct
client for a Tooling-layer system (OpenBao, key-cape components, a database, a
cluster); route every such need through the owning engine and record the gap in
`INTENT.md`. Never render or cache an authorization decision.
**Domain:** infotech
**Repo slug:** kings-guard
@ -120,8 +125,8 @@ curl -s -X PATCH "http://127.0.0.1:8000/tasks/<task_id>" \
## Repo-Specific Notes
This repo is no longer docs-only. It now has a **small Python 3.12 scaffold**
for contract modeling and posture evaluation, but it is still **not** a
long-running control-plane service.
for contract modeling and posture evaluation. It is a Staff-layer repository:
not a long-running enforcement service, and not a control plane.
## Working Set