Align with Security Layer Model v0.7; review scope vs intent; open KG-WP-0003

The standard is accepted at v0.7 with a working companion. v0.7 wrote the
§3.4 agent-principal rules that v0.6 announced and never wrote — our
finding — and credits kings-guard for it. Our other two findings landed
too: the actuation row is no longer attributed to us, and §17 records
kings-guard as drafter of the emission-cadence declaration.

INTENT.md now carries the declaration in frontmatter (layer: Staff,
conformance_state: blocked-clean) as the companion asks, plus prose in
our own voice. Adopted: the four agent-principal rules; the evidence
doctrine and our obligations under it; containment reframed as proposal
throughout. Direction of Evolution stage 3 rewritten — it described
integrating with effectors to actuate, which §9.2 forbids — and stage 5
now carries the constraint that federated memory may not become a state
plane.

SCOPE.md gains evidence classification, the cadence draft, and
stream-completeness judgment as in-scope; actuation, standing
credentials, and becoming a state plane as explicitly out.

history/2026-08-29-layer-model-v0.7-scope-intent-review.md assesses the
adapted documents against the implementation. The finding: the documents
are now correct and the code has not caught up. Nine gaps, G1-G8 carried
by KG-WP-0003, G9 remaining as KG-IN-0002.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UEtvmYUBP2fDtirJGWn5MW

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 4014379@bnt-lap001
Assistant-Session: 4af9e20f-1768-4afc-951b-b507784e382b

layer.yaml

@@ -1,6 +1,6 @@
 # kings-guard — NetKingdom security layer declaration
 #
-# Framework: net-kingdom/canon/standards/security-layer-model_v0.6.md
+# Framework: net-kingdom/canon/standards/security-layer-model_v0.7.md
 # Assent:    decisions/decisions.md KG-DEC-2026-001 (kings-guard's own voice, §11)
 # Validate:  python3 scripts/check_layer_conformance.py
 #
@@ -15,7 +15,7 @@
 
 schema_version: "0.1"
 framework: netkingdom-security-layer-model
-standard_version: "0.6"
+standard_version: "0.7"
 repository: kings-guard
 layer: staff
 declared_by: decisions/decisions.md#KG-DEC-2026-001
@@ -24,6 +24,14 @@ declared_at: "2026-08-29"
 # §4 catalog entry, transcribed so drift between the catalog and this file is
 # visible. The standard is authoritative for the row; this records what we
 # understand ourselves to have been assigned.
+# §3.4 — the four rules binding the agent principal. kings-guard offered to
+# assent to these sight-unseen before they were written into v0.7.
+agent_principal_rules:
+  no_standing_credential: true
+  tool_use_shapes: ["5.2-conduit", "engine-api"]
+  memory_is_not_a_state_plane: true
+  reconstructable_as_caller: true
+
 catalog_entry:
   owns:
     - adaptive defence and judgment