coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security Layer Model v0.4 — audit-core assent and its corrections

Browse source 
audit-core assented to the approval evidence half with conditions and
corrected the rationale twice. Both corrections were against wording this
standard had taken from that repository's INTENT rather than its contract.

- §4 catalogues audit-core as an Engine, on its own declaration. v0.3 named it
  as an owner in §9.4 and §13 without listing it — a §11 defect in the standard
  itself, which audit-core raised.
- §9.4 rationale rewritten to cite docs/integrity.md rather than INTENT
  principle 6: an in-database chain detects a rewritten payload only if the
  attacker does not recompute the suffix, which a database owner can, and even
  with external attestation the store is not WORM or object lock. tamper
  evidence is conditional on live preconditions.
- §9.4 gained emission atomicity as approval-engine's obligation, and the
  prohibition on audit-core exposing an approval-validity query — a boundary
  audit-core stated unprompted, applying §6.1 to itself.
- §9.6 added, estate-wide: evidence proves alteration and truncation, not
  omission at source. A suppressed revocation leaves the chain intact and
  verification reports intact. "The audit record proves it happened" is unsound
  and is replaced with the sound form.
- §13 gained two gaps: stronger approval custody (unassigned — deciding whether
  approvals need archival custody distinct from other sources is doctrine work
  not yet done) and emission atomicity (approval-engine).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2564823@bnt-lap001
Assistant-Session: 2a7ed827-4928-4b9f-8613-9135c9cadfe9
This commit is contained in:
tegwick 2026-08-28 22:54:50 +02:00
parent 90cc64f728
commit 584738bd9f
3 changed files with 566 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

10
canon/standards/security-layer-model_v0.3.md
View file

@ -3,7 +3,7 @@ id: netkingdom-security-layer-model-v0.3
type: standard
title: "NetKingdom Security Layer Model v0.3"
domain: netkingdom
status: proposed
status: superseded
version: "0.3"
supersedes: canon/standards/security-layer-model_v0.2.md
owner: gate-house
@ -14,6 +14,7 @@ last_reviewed: "2026-08-28"
review_interval: 3m
source_revision: "gate-house@516ed4e"
standard_token: security-layer-model_v0.3
superseded_by: canon/standards/security-layer-model_v0.4.md
assented_by:
- "flex-auth FLEX-DEC-2026-001"
- "kings-guard KG-DEC-2026-001"
@ -28,6 +29,13 @@ related:
# NetKingdom Security Layer Model v0.3
> **Superseded 2026-08-28 by [v0.4](security-layer-model_v0.4.md).** `audit-core`
> assented to §9.4 and corrected its rationale twice: this version rested the
> evidence argument on an aspirational INTENT principle rather than the shipped
> integrity bound, and did not state that no append-only archive can prove
> omission at source. v0.4 also catalogues `audit-core`, which this version
> named as an owner without listing.
## 1. Purpose
This standard states how NetKingdom's IT-security estate is layered, and what