kings-guard/workplans/KG-WP-0006-observation-input-review.md
tegwick 31e9963933 Admit source evidence snapshots and harden stream completeness
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06e89-93a2-7aa2-82b3-ce5ccd2682e6
2026-09-05 00:42:19 +02:00

77 lines
2.8 KiB
Markdown

---
id: KG-WP-0006
type: workplan
title: "Review and admit canonical cadence and secret-use snapshot inputs"
domain: infotech
repo: kings-guard
status: finished
owner: codex
topic_slug: netkingdom
created: "2026-09-05"
updated: "2026-09-05"
origin: cross-repo
origin_ref: KG-IN-0004
---
# Observation input review
## Migrate the cadence consumer to the published generic contract
```task
id: KG-WP-0006-T01
status: done
priority: high
```
Consume InfoTechCanon standard/emission-cadence 0.1. Move profile and
provenance fields into namespaced extensions; validate examples against the
owner's schema without copying it. Keep the handover draft historical.
## Harden Qonto stream admission and completeness checks
```task
id: KG-WP-0006-T02
status: done
priority: high
```
Reject mismatched instances, malformed sequences and counters; preserve missing
context; prevent absent reconciliation fields or unrelated/future heartbeats
from manufacturing completeness. Cover failure paths with regression tests.
## Admit secret-use snapshots with explicit scope and unknown completeness
```task
id: KG-WP-0006-T03
status: done
priority: medium
```
Map the Engine envelope into a separate snapshot observation: it has no event
actor, event timestamp, or authorization outcome. Require explicit lane scope,
retain only typed metadata, preserve omitted evidence fields, translate the
heartbeat interval as a freshness bound, and never promote snapshot freshness
to stream completeness. Record residual source evidence needed for posture.
## Completion evidence
Reviewed the original pending Qonto implementation and added negative-path
coverage for scoped streams, absent/invalid counters, snapshot instance binding,
sequence validation, and heartbeat reconciliation. Both migrated fixtures pass
InfoTechCanon's external schema 0.1. Snapshot mapping and limitations are in
`docs/SecretUseSnapshotAdmission.md`.
Residual KG-IN-0005 was recorded before completion for secret-use event
provenance and operational evidence. Deployed Qonto acceptance remains explicitly
waiting in KG-WP-0005-T03; local source-path tests do not close it. The NetKingdom
profile remains proposed in its owner's repository; no adoption is asserted.
Validation: 78 tests passed (including external canonical schema and local
Qonto emit-path tests), lint and layer conformance passed, pilot demo passed,
and `git diff --check` was clean. Decision: KG-DEC-2026-003.
State Hub: decision KG-DEC-2026-003 was recorded successfully. Two required
`statehub fix-consistency --repo kings-guard` attempts (including an unrestricted
retry) failed with C-00: repository API lookup timed out. Workplan/intake files
remain authoritative; the operator must rerun synchronization when the repository
lookup is available. This is a synchronization failure, not implementation evidence.