coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NK-WP-0054: record the founder's state-hub attribution decisions
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Option A is phase 1 with no hub_core change; session/run id equality only; phase 3 observes
tokens and enforcement is decided later; no backfill. Sent to state-hub. Decision c926a190
resolved.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 328925@bnt-lap001
Assistant-Session: 14b795fd-c632-4c01-8d28-e7e490c7b0ed
This commit is contained in:
tegwick 2026-10-25 00:08:31 +02:00
parent 2de259a46d
commit 425265e57f
2 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
canon/standards/service-identity-privilege_v0.1.md
View file

@ -339,7 +339,7 @@ declaration; the reserved-name rule applies to credential-holding accounts, not
| railiance-platform | F-1 and `aal2` prepared in source, rollback written; nothing applied | RPF-WP-0065; the `aal2` live step is the founder's |
| key-cape | Agent tokens are feasible **with changes**, not today. Autonomous agents: `client_credentials` with a new agent client class (2 to 3 days). Delegated agents: RFC 8693 token exchange (1 to 1.5 weeks). Missing: `principal_type` `agent`, the `agent{id,mode}` claim, `act.sub`. Risks: revocation state is in memory; client registrations are static | KEY-WP-0043 |
| glas-harness | Per-session identity and attribution are feasible **only for sessions the harness launches**. Interactive terminals stay outside | GLAS-WP-0018 |
| state-hub | Option A recommended: record `X-Actor-*` headers in an append-only attribution table, labelled `claimed`, `unattributed` or `legacy`; real authentication needs key-cape tokens (Option C) | STATE-WP-0100; five founder decisions in its design |
| state-hub | Option A recorded: `X-Actor-*` headers into an append-only attribution table, labelled `claimed`, `unattributed` or `legacy`; real authentication needs key-cape tokens (Option C). **Decided 2026-10-25:** Option A is phase 1 with no `hub_core` schema change; correlation by equal session and run id only (no commit verifier); phase 3 observes tokens and enforcement is a separate later decision; existing authors are not backfilled | STATE-WP-0100 |
**Needs an amendment:** IAM Profile v0.3 asks for assurance evidence for "any delegated human authority" but defines no
nested claim for it. Delegated agent tokens need one; it belongs in the IAM Profile v0.4 amendments.

5
history/2026-10-24-security-identity-and-agent-review.md
View file

@ -103,3 +103,8 @@ Draft-4 of the standard applies the security-canon corrections and records the o
`22b7294e24137c0a350764b9cf37f3d4f2e9f35eb7c97a287d9c89477ef24d7a`) after reading the diff of the card text. The
acceptance is a human review of an agent-prepared change, recorded here and sent to emergent-security for its
EMERGENT-WP-0002 tracking. That commit is still local to that repository and is not pushed by net-kingdom.
- **state-hub attribution design (STATE-WP-0100), decided:** Option A is phase 1 with no `hub_core` schema change;
correlation by equal session and run id only, no commit verifier (Option B deferred); phase 3 verifies tokens in
observe mode once key-cape issues agent tokens, and enforcement is a separate later decision; existing free-text
authors are not backfilled (a read-only count may be run later to size a mapping). Hub authorship stays a declared
gap in the standard until phase 3.