Adaptive immune security architecture for netkingdom
Find a file
tegwick d99f395aa1 Repoint at Security Layer Model v0.4; assess and report to gate-house
The standard moved v0.1 -> v0.4 after our assent. Reviewed; assent stands
unchanged. §9.1/§9.2/§9.3 adopt the KG-DEC-2026-001 finding and generalise
it estate-wide, and §12 now states that an unsatisfiability finding is a
success of the conformance loop.

Docs repointed at v0.4 (INTENT, SCOPE, AdjacentSystemBoundary, the
architecture spec note). KG-DEC-2026-001 still cites v0.1 deliberately —
it records what was assented to at the time.

INTENT gap table reshaped to §5.3's field names (capability,
intended_owner, blocked_on, review) so one register can hold both kinds,
with review dates set to 2026-11-28, and marked explicitly as unowned
capabilities rather than §5.3 declared contacts — kings-guard makes no
Tooling contact and is Conforming under §11.

Four findings sent to gate-house: §9.1 not carried through to the
observation claim; §13 conflating declared contacts with unowned
capabilities ahead of the maturity-engine migration; §9.6's unstated
consequence for posture (suppression biases posture optimistic and our
confidence score cannot express the doubt); and disclosure that §12's
fourth step is unstaffed while the pilot remains fixture-only.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UEtvmYUBP2fDtirJGWn5MW

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 4014379@bnt-lap001
Assistant-Session: 4af9e20f-1768-4afc-951b-b507784e382b
2026-08-29 02:41:43 +02:00
.repo-manager Repoint at Security Layer Model v0.4; assess and report to gate-house 2026-08-29 02:41:43 +02:00
decisions chore(registrar): assign State Hub identifiers 2026-08-28 21:48:08 +02:00
docs Repoint at Security Layer Model v0.4; assess and report to gate-house 2026-08-29 02:41:43 +02:00
history Register kings-guard with State Hub 2026-07-23 22:55:42 +02:00
intake Close absorbed qonto pilot intake 2026-07-24 00:34:52 +02:00
intakes repo.work.create_intake KG-IN-0003 2026-08-28 22:40:12 +02:00
specs Repoint at Security Layer Model v0.4; assess and report to gate-house 2026-08-29 02:41:43 +02:00
src/kings_guard Implement KG-WP-0002 posture pilot scaffold 2026-07-24 00:24:53 +02:00
tests Implement KG-WP-0002 posture pilot scaffold 2026-07-24 00:24:53 +02:00
workplans Implement KG-WP-0002 posture pilot scaffold 2026-07-24 00:24:53 +02:00
.custodian-brief.md chore(consistency): sync task status from DB [auto] 2026-07-24 00:16:02 +02:00
.gitignore Implement KG-WP-0002 posture pilot scaffold 2026-07-24 00:24:53 +02:00
.repo-classification.yaml Register kings-guard with State Hub 2026-07-23 22:55:42 +02:00
AGENTS.md Assent to Staff placement; release control-plane vocabulary (KG-IN-0001) 2026-08-28 21:47:05 +02:00
INTENT.md Repoint at Security Layer Model v0.4; assess and report to gate-house 2026-08-29 02:41:43 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-30 00:28:01 +02:00
Makefile Implement KG-WP-0002 posture pilot scaffold 2026-07-24 00:24:53 +02:00
pyproject.toml Implement KG-WP-0002 posture pilot scaffold 2026-07-24 00:24:53 +02:00
README.md Assent to Staff placement; release control-plane vocabulary (KG-IN-0001) 2026-08-28 21:47:05 +02:00
SCOPE.md Repoint at Security Layer Model v0.4; assess and report to gate-house 2026-08-29 02:41:43 +02:00
WORK-RECORDS.md Refresh work-record index 2026-08-28 22:43:06 +02:00

kings-guard

Adaptive security contracts and posture-evaluation scaffold for NetKingdom's immune-architecture work.

Layer: Staff (NetKingdom Security Layer Model v0.1). kings-guard publishes posture and requests bounded response through engine APIs; it never touches Tooling directly and never renders an authorization decision.

Current slice

This repository now contains four aligned pieces:

  • INTENT.md / SCOPE.md for the repo's stable boundary
  • specs/NetKingdomImmuneArchitecture.md for the reference architecture
  • specs/ImmuneContracts.md for the first canonical contract layer
  • src/kings_guard/ plus tests/ for a minimal posture loop scaffold

The current implementation is intentionally narrow. It does not enforce anything. It provides:

  • typed contracts for security genome, phenotype, observation, posture, signal, effector request, and immune memory entry;
  • a minimal posture evaluator that turns a normalized observation into a posture assessment and bounded response hints;
  • a fixture-driven pilot based on qonto-assistant, chosen because it already exposes a security genome record, an audit stream, and a fast local loop.

Repo layout

  • specs/NetKingdomImmuneArchitecture.md
  • specs/ImmuneContracts.md
  • docs/AdjacentSystemBoundary.md
  • docs/pilots/QontoAssistantPosturePilot.md
  • src/kings_guard/
  • tests/
  • workplans/

Dev commands

# preferred, if make + pip are available
make install-dev
make test
make lint
make run-demo

# direct shell fallback used in minimal environments
python3 -m pytest -q
PYTHONPATH=src python3 -m kings_guard.main --pilot qonto-assistant