coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NK-WP-0035-T04: independent receiver readback helper for the retained hourly capture

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 696317@bnt-lap001
Assistant-Session: bab9e511-0915-45b3-926a-2fab552edff6
This commit is contained in:
tegwick 2026-10-23 06:57:26 +02:00
parent 1ed7953ae8
commit 4f616cfff8
3 changed files with 217 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
workplans/NK-WP-0035-emission-cadence-security-profile.md
View file

@ -431,6 +431,17 @@ The next step needs a human: an independent receiver readback under a fresh
attended operator OIDC login. King's Guard then compares counts, sequence,
coverage and lag. This capture is not acceptance, and the profile stays proposed.
2026-10-23: the readback is now one attended command. The helper
`tools/emission-cadence-profile/receiver_readback.py` (6 synthetic tests) reads
the retained capture's `receiver_readback` request. It asks audit-core
`/v1/reconciliation` (same source, tenant, window and instance) and
`/v1/events/<id>` for each of the three IDs, under the operator's own 0600 token
file. It writes a value-safe `agree`/`diverge` receipt without payloads or the
token. A class-name mapping difference between source and receiver shows up as
`diverge`; it is never hidden. The operator runs it through their own
port-forward. The receipt then goes to King's Guard (KG-WP-0005-T03) and
qonto-assistant (QONTO-WP-0006-T03).
## Automate staged receiver derivation without sibling mutations
```task