tegwick
9daea96c43
Classify evidence as load-bearing or attributive, draft the emission-cadence declaration for Taxonomy, treat silence as a stream finding, keep completeness separate from record richness, forbid immune memory as a state plane, and make containment proposals reconstructable to their origin. Observe real qonto-assistant audit events; deny-class completeness stays unknown until the source publishes a heartbeat. Assistant: grok Assistant-Session: 01a05ef1-9e5a-70f2-b0ff-0b05d6b38ae9
53 lines
1.7 KiB
Markdown
53 lines
1.7 KiB
Markdown
# kings-guard
|
|
|
|
Adaptive security contracts and posture-evaluation scaffold for NetKingdom's
|
|
immune-architecture work.
|
|
|
|
**Layer: Staff** (NetKingdom Security Layer Model v0.1). kings-guard publishes
|
|
posture and requests bounded response through engine APIs; it never touches
|
|
Tooling directly and never renders an authorization decision.
|
|
|
|
## Current slice
|
|
|
|
This repository now contains four aligned pieces:
|
|
|
|
- `INTENT.md` / `SCOPE.md` for the repo's stable boundary
|
|
- `specs/NetKingdomImmuneArchitecture.md` for the reference architecture
|
|
- `specs/ImmuneContracts.md` for the first canonical contract layer
|
|
- `src/kings_guard/` plus `tests/` for a minimal posture loop scaffold
|
|
|
|
The current implementation is intentionally narrow. It does **not** enforce
|
|
anything. It provides:
|
|
|
|
- typed contracts for security genome, phenotype, observation, posture,
|
|
signal, effector request, and immune memory entry;
|
|
- evidence-class and stream-completeness fields, so silence is a finding and
|
|
record richness is not mistaken for a complete stream;
|
|
- a posture evaluator that judges one observation and, separately, the stream
|
|
it came from;
|
|
- a `qonto-assistant` pilot that still has a fixture regression case and can
|
|
also consume real events from that service's own AuditLogger.
|
|
|
|
## Repo layout
|
|
|
|
- `specs/NetKingdomImmuneArchitecture.md`
|
|
- `specs/ImmuneContracts.md`
|
|
- `docs/AdjacentSystemBoundary.md`
|
|
- `docs/pilots/QontoAssistantPosturePilot.md`
|
|
- `src/kings_guard/`
|
|
- `tests/`
|
|
- `workplans/`
|
|
|
|
## Dev commands
|
|
|
|
```bash
|
|
# preferred, if make + pip are available
|
|
make install-dev
|
|
make test
|
|
make lint
|
|
make run-demo
|
|
|
|
# direct shell fallback used in minimal environments
|
|
python3 -m pytest -q
|
|
PYTHONPATH=src python3 -m kings_guard.main --pilot qonto-assistant
|
|
```
|