--- id: KG-WP-0006 type: workplan title: "Review and admit canonical cadence and secret-use snapshot inputs" domain: infotech repo: kings-guard status: finished owner: codex topic_slug: netkingdom created: "2026-09-05" updated: "2026-09-05" origin: cross-repo origin_ref: KG-IN-0004 state_hub_workstream_id: "6433c5bb-1095-5fc7-815f-7efed54e589c" --- # Observation input review ## Migrate the cadence consumer to the published generic contract ```task id: KG-WP-0006-T01 status: done priority: high state_hub_task_id: "23a52e65-c9d4-565f-a684-90845eff9c61" ``` Consume InfoTechCanon standard/emission-cadence 0.1. Move profile and provenance fields into namespaced extensions; validate examples against the owner's schema without copying it. Keep the handover draft historical. ## Harden Qonto stream admission and completeness checks ```task id: KG-WP-0006-T02 status: done priority: high state_hub_task_id: "d6720d58-6870-58ab-bf94-072ee720702a" ``` Reject mismatched instances, malformed sequences and counters; preserve missing context; prevent absent reconciliation fields or unrelated/future heartbeats from manufacturing completeness. Cover failure paths with regression tests. ## Admit secret-use snapshots with explicit scope and unknown completeness ```task id: KG-WP-0006-T03 status: done priority: medium state_hub_task_id: "6e6587f7-5cb6-5115-876b-f6e285e06662" ``` Map the Engine envelope into a separate snapshot observation: it has no event actor, event timestamp, or authorization outcome. Require explicit lane scope, retain only typed metadata, preserve omitted evidence fields, translate the heartbeat interval as a freshness bound, and never promote snapshot freshness to stream completeness. Record residual source evidence needed for posture. ## Completion evidence Reviewed the original pending Qonto implementation and added negative-path coverage for scoped streams, absent/invalid counters, snapshot instance binding, sequence validation, and heartbeat reconciliation. Both migrated fixtures pass InfoTechCanon's external schema 0.1. Snapshot mapping and limitations are in `docs/SecretUseSnapshotAdmission.md`. Residual KG-IN-0005 was recorded before completion for secret-use event provenance and operational evidence. Deployed Qonto acceptance remains explicitly waiting in KG-WP-0005-T03; local source-path tests do not close it. The NetKingdom profile remains proposed in its owner's repository; no adoption is asserted. Validation: 78 tests passed (including external canonical schema and local Qonto emit-path tests), lint and layer conformance passed, pilot demo passed, and `git diff --check` was clean. Decision: KG-DEC-2026-003. State Hub: decision KG-DEC-2026-003 was recorded successfully. Two required `statehub fix-consistency --repo kings-guard` attempts (including an unrestricted retry) failed with C-00: repository API lookup timed out. Workplan/intake files remain authoritative; the operator must rerun synchronization when the repository lookup is available. This is a synchronization failure, not implementation evidence.