coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NK-WP-0054-T02: Service Identity and Privilege standard ratified as v0.1
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
The founder ratified the standard (status accepted) on 2026-10-25 and accepted the
emergent-security start card 0.2.7. Ratification applies no exception's elimination path,
changes no live service and does not make any declaration owner-confirmed. T02 done.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 328925@bnt-lap001
Assistant-Session: 14b795fd-c632-4c01-8d28-e7e490c7b0ed
This commit is contained in:
tegwick 2026-10-25 00:03:24 +02:00
parent d0f259b12c
commit 2de259a46d
6 changed files with 29 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

9
workplans/NK-WP-0054-service-identity-policy.md
View file

@ -73,13 +73,10 @@ is an uninventoried legacy admin, and OpenBao `platform-admin` binds on a group
```task
id: NK-WP-0054-T02
status: wait
status: done
priority: high
assignee: claude-code
depends_on: [NK-WP-0054-T01]
needs_human: true
decision_id: "c926a190-8614-40b8-a20f-b017ef728db2"
blocking_reason: "Both owner replies are in (security-canon, railiance-platform). Draft-4 applies them. Await the founder's ratification of v0.1 and answers to the post-review choices in the decision."
state_hub_task_id: "5830e2eb-334a-52fa-9c55-a8c00d89c09f"
```
@ -104,6 +101,10 @@ glas-harness and state-hub assessed the agent and attribution gaps (KEY-WP-0043,
Draft-4 of the standard applies all of it without changing a founder decision. What remains for T02 is ratification:
set the status to accepted when the founder decides.
Completed 2026-10-25: the founder ratified the standard as v0.1 (status accepted). Ratification applies no exception's
elimination path and changes no live service; owners adopt on their own schedule and the declarations stay
unconfirmed until they do.
Draft-3 (2026-10-24): realigned as an estate profile of SecurityCanon after a review against the canon
(`history/2026-10-24-security-identity-and-agent-review.md`): imported vocabulary, SEC-DSM references per rule,
estate identities in canon terms, new SI-15 (accountable automation). Validator migration is T08.