kings-guard/workplans/KG-WP-0006-observation-input-review.md

id	type	title	domain	repo	status	owner	topic_slug	created	updated	origin	origin_ref	state_hub_workstream_id
KG-WP-0006	workplan	Review and admit canonical cadence and secret-use snapshot inputs	infotech	kings-guard	finished	codex	netkingdom	2026-09-05	2026-09-05	cross-repo	KG-IN-0004	6433c5bb-1095-5fc7-815f-7efed54e589c

Observation input review

Migrate the cadence consumer to the published generic contract

id: KG-WP-0006-T01
status: done
priority: high
state_hub_task_id: "23a52e65-c9d4-565f-a684-90845eff9c61"

Consume InfoTechCanon standard/emission-cadence 0.1. Move profile and provenance fields into namespaced extensions; validate examples against the owner's schema without copying it. Keep the handover draft historical.

Harden Qonto stream admission and completeness checks

id: KG-WP-0006-T02
status: done
priority: high
state_hub_task_id: "d6720d58-6870-58ab-bf94-072ee720702a"

Reject mismatched instances, malformed sequences and counters; preserve missing context; prevent absent reconciliation fields or unrelated/future heartbeats from manufacturing completeness. Cover failure paths with regression tests.

Admit secret-use snapshots with explicit scope and unknown completeness

id: KG-WP-0006-T03
status: done
priority: medium
state_hub_task_id: "6e6587f7-5cb6-5115-876b-f6e285e06662"

Map the Engine envelope into a separate snapshot observation: it has no event actor, event timestamp, or authorization outcome. Require explicit lane scope, retain only typed metadata, preserve omitted evidence fields, translate the heartbeat interval as a freshness bound, and never promote snapshot freshness to stream completeness. Record residual source evidence needed for posture.

Completion evidence

Reviewed the original pending Qonto implementation and added negative-path coverage for scoped streams, absent/invalid counters, snapshot instance binding, sequence validation, and heartbeat reconciliation. Both migrated fixtures pass InfoTechCanon's external schema 0.1. Snapshot mapping and limitations are in docs/SecretUseSnapshotAdmission.md.

Residual KG-IN-0005 was recorded before completion for secret-use event provenance and operational evidence. Deployed Qonto acceptance remains explicitly waiting in KG-WP-0005-T03; local source-path tests do not close it. The NetKingdom profile remains proposed in its owner's repository; no adoption is asserted.

Validation: 78 tests passed (including external canonical schema and local Qonto emit-path tests), lint and layer conformance passed, pilot demo passed, and git diff --check was clean. Decision: KG-DEC-2026-003.

State Hub: decision KG-DEC-2026-003 was recorded successfully. Two required statehub fix-consistency --repo kings-guard attempts (including an unrestricted retry) failed with C-00: repository API lookup timed out. Workplan/intake files remain authoritative; the operator must rerun synchronization when the repository lookup is available. This is a synchronization failure, not implementation evidence.