2026-08-28 20:28:58 +00:00
|
|
|
# maturity-engine
|
|
|
|
|
|
2026-08-28 22:34:02 +02:00
|
|
|
**Computes, deterministically, how far a thing has progressed against declared
|
|
|
|
|
criteria and submitted evidence — and keeps the history of that progression.**
|
|
|
|
|
|
2026-08-29 11:56:26 +02:00
|
|
|
An Engine (PIP) in the NetKingdom security layer model v0.7. Given the same
|
|
|
|
|
criteria and the same evidence it returns the same level; that property is
|
|
|
|
|
what makes it an engine rather than an opinion. It supplies facts a decision
|
|
|
|
|
consumes as claims. It does not decide.
|
2026-08-28 22:34:02 +02:00
|
|
|
|
|
|
|
|
> **gate-house judges and proposes. maturity-engine computes and remembers.**
|
|
|
|
|
|
|
|
|
|
It exists because NetKingdom is full of maturity that nothing owns — the Canon's
|
2026-08-29 11:56:26 +02:00
|
|
|
ASM-0…ASM-6 ladder, the layer model's four conformance states and gap register,
|
2026-08-28 22:34:02 +02:00
|
|
|
ops-warden's delegated lanes, kings-guard's advisory-until-gaps-close posture,
|
2026-08-29 11:56:26 +02:00
|
|
|
PEP stance maps parked in the statute, the State Hub's DoX quality debt — and
|
|
|
|
|
because `gate-house` was catalogued as owning conformance review with no engine
|
|
|
|
|
to act through, the same defect kings-guard found for containment.
|
2026-08-28 22:34:02 +02:00
|
|
|
|
2026-08-29 11:56:26 +02:00
|
|
|
**Guardrail:** a maturity level must never gate a decision directly, and must
|
|
|
|
|
never be compiled into registry content. If a level determines an outcome it
|
|
|
|
|
reaches `access-engine` as an input claim or a versioned policy rule, never by
|
|
|
|
|
a consumer branching on a fetched level. Compiled data that determines an
|
|
|
|
|
outcome is still deciding.
|
|
|
|
|
|
|
|
|
|
**Scoring:** blocked-clean MUST NOT rank below conforming.
|
2026-08-28 22:34:02 +02:00
|
|
|
|
|
|
|
|
Maturity here is graded, evidence-based, open-ended, and revisable — levels can
|
|
|
|
|
fall when evidence expires. The closed, binary, replay-proof state machine of an
|
|
|
|
|
approval belongs to `approval-engine`; the two engines are deliberate opposites.
|
|
|
|
|
|
2026-08-29 12:54:37 +02:00
|
|
|
See [INTENT.md](INTENT.md) and [SCOPE.md](SCOPE.md). The claim contract is
|
|
|
|
|
[docs/claim-contract.md](docs/claim-contract.md).
|
|
|
|
|
|
|
|
|
|
```bash
|
|
|
|
|
python3 -m pip install -e ".[dev]" # or: PYTHONPATH=src
|
|
|
|
|
make test
|
|
|
|
|
make check-layer
|
|
|
|
|
PYTHONPATH=src python3 -m maturity_engine bootstrap --at 2026-08-29T12:00:00Z
|
|
|
|
|
PYTHONPATH=src python3 -m maturity_engine review --subject kings-guard --at 2026-08-29T12:00:00Z
|
|
|
|
|
```
|