Retain accepted Staff doctrine handoff and proposed successor adoption
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
This commit is contained in:
parent
d8eabe675b
commit
6180f87894
7 changed files with 2774 additions and 0 deletions
2237
canon/standards/security-layer-model_v0.9.md
Normal file
2237
canon/standards/security-layer-model_v0.9.md
Normal file
File diff suppressed because it is too large
Load diff
105
docs/reviews/2026-10-11-forgejo-consumer-eso-net-owner-review.md
Normal file
105
docs/reviews/2026-10-11-forgejo-consumer-eso-net-owner-review.md
Normal file
|
|
@ -0,0 +1,105 @@
|
|||
---
|
||||
reviewer: net-kingdom-owner (agent net-kingdom, codex)
|
||||
decision: approved
|
||||
work_item: NK-WP-ADHOC-2026-10-11-T03
|
||||
reviewed_manifest_sha256: 271afd04512b3dac642b3385013cac03d28afde22ff97bcca8d0e262ab3d9279
|
||||
scope: proposed-source-technical-review-only
|
||||
---
|
||||
|
||||
# NetKingdom owner review — Forgejo consumer ESO successor
|
||||
|
||||
Technical source agreement on the exact frozen 17-path proposal, manifest SHA256
|
||||
271afd04512b3dac642b3385013cac03d28afde22ff97bcca8d0e262ab3d9279. This is the
|
||||
established NetKingdom owner role only, under NK-WP-ADHOC-2026-10-11-T03. The
|
||||
work record was prepared before this review entry; the applying coordinator must
|
||||
retain that order and sync the owner work record. This review does not change
|
||||
any admission, bound-claim, type or case status.
|
||||
|
||||
NetKingdom INTENT's Taxonomy declaration, Identity is the Control Plane,
|
||||
Minimize Threat Exposure and Meta-Orchestration principles support a named,
|
||||
inspectable identity contract and owner-executed changes. NetKingdom owns the
|
||||
canonical type, case and responsibility map. Railiance owns deployment mechanics;
|
||||
platform, consumer, Mason and Warden retain their distinct native execution and
|
||||
acceptance responsibilities. Working companion v0.3 and accepted layer-model
|
||||
v0.8 remain unchanged. The Emergent Security start card was withheld after source
|
||||
changes (package0.2.6, digest8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02);
|
||||
this review uses the actual source files, not withheld guidance.
|
||||
|
||||
## Exact correction and independent evidence
|
||||
|
||||
Initial packet c48b64e5e704e8f11ca65095c376c8a9fecc2b3a58e74b9eb62096c80d00f4fb
|
||||
incorrectly described the proposed CCR42 as rendered from an acknowledged type.
|
||||
The requester preserved it at /tmp/forgejo-consumer-eso-refinement-original-c48
|
||||
and changed only CCR42 risk.notes[0]. The final note truthfully names proposed1.2,
|
||||
preparation-only observations, unconfirmed/apply-blocked bindings and a fresh
|
||||
§6 informed-decision acknowledgment. Independent parsed comparison confirms this
|
||||
is the only semantic change. Final proposed CCR42 SHA256 is
|
||||
6544600c63a86559ba053240c476d493f4d2f25c9cd22cf6a9a05f09ee617a86.
|
||||
|
||||
Independently verified all 17 staged hashes and all seven current owner source
|
||||
pins. Current native type/case validators passed in preparation mode
|
||||
(require_implemented=False); composition resolution and full render regeneration
|
||||
were byte-semantically identical to retained render. Full render digest is
|
||||
sha256:c0afd5576cdae0cbc807eccb2b9fa87ac668f15e32ec7cf79d295bdb23c75b35, and
|
||||
execution.permitted remains false. Rendering the current1.1 case with the same
|
||||
current declarations proves all five original structural objects are exactly
|
||||
unchanged; the proposed sixth object is consumer-eso-role. This is not structural
|
||||
equality of the whole inventory and cannot transfer old acceptance. Full source
|
||||
hashes bind composition, follow-through, verification and rollback as well as
|
||||
structure. Any acknowledgment or accepted-case source change needs new exact
|
||||
source pins and render/case reconciliation; the old digest is no permission.
|
||||
|
||||
The minimal Mason CCR-filename collision/refusal changes and their tests are
|
||||
byte-unchanged by the risk-note amendment. The independent Mason owner reports
|
||||
42 focused passes and an original-source regression failure, and confirms the
|
||||
proposed source is refused rather than fixture-acknowledged. Those are isolated
|
||||
source checks, not installed/native materialization proof.
|
||||
|
||||
## Identity contract and retained trust boundary
|
||||
|
||||
The new role binds only forgejo/forgejo-keycape-forgejo-eso and audience openbao,
|
||||
with the one exact KV data read policy and no default policy. The Forgejo and
|
||||
runner shared default SA must never be bound. Namespaced SecretStore uses the
|
||||
dedicated serviceAccountRef with audiences=[openbao] and no namespace override;
|
||||
ExternalSecret maps only CLIENT_SECRET. Installed-source/retained-metadata support
|
||||
for TokenRequest and audiences supports this preparation, not an invented live
|
||||
binding. The SA has automount=false and must have no legacy token references;
|
||||
a TokenRequest failure must not be bypassed with a legacy/static token. ESO's
|
||||
600-second Kubernetes token and role's 900-second OpenBao maximum are distinct.
|
||||
|
||||
The shared controller's clusterwide TokenRequest/Secret authority remains a
|
||||
trusted surface; neither a dedicated reference identity nor automount=false
|
||||
provides controller-compromise isolation. Existing internal HTTP custody and
|
||||
legacy-fallback risk remain stated. The proposal adds no default grants,
|
||||
memberships, group authorization or application-runtime identity change.
|
||||
|
||||
## Required separate acceptance and recovery stops
|
||||
|
||||
The sixth role changes authentication/materialization. Under SecurityCaseTypes
|
||||
§6 it needs a new founder informed-decision as for a new type, regardless of the
|
||||
proposed1.2 label. This technical review is not that acknowledgment and does not
|
||||
inherit acknowledged1.1. Current acknowledged type1.1, accepted case1.1 and
|
||||
historical CCR42 remain unchanged. No successor case acceptance, implemented
|
||||
marker, machine-contract acceptance or broad broker-pin relaxation is inferred.
|
||||
Exact owner/founder receipts and current runtime/source pins must be reconciled
|
||||
before successor build or execution; pending bound claims still block apply.
|
||||
|
||||
Refresh native metadata and refuse conflicting/shared/unknown ownership before
|
||||
an exact native action. Materialization receipts must prove six-object structure,
|
||||
exact SA/namespace/audience/policy and created-versus-matched identities without
|
||||
reading secrets. Existing Warden descriptors/session/revocation and per-owner
|
||||
provenance gates remain. Delivery Ready cannot substitute for Forgejo Helm OIDC
|
||||
consumption, group enforcement, break-glass/account-link/MFA and positive/negative
|
||||
browser acceptance. These stay in their existing owner/project work records.
|
||||
|
||||
Recovery starts with the consumer owner's reference/Helm rollback, then only
|
||||
proved-created delivery objects and target UID/ownerReference. Matched/shared
|
||||
objects stay protected. Revoke issued reader tokens or prove expiry before
|
||||
removing the created role, then the policy. Role/SA deletion alone does not revoke
|
||||
issued OpenBao tokens. Legacy planned inventory confers no delete authority;
|
||||
changed references/UIDs/ownership stop recovery. Source preparation creates no
|
||||
credential, role, policy, service account, value or client and closes no first-case
|
||||
runtime task.
|
||||
|
||||
No additional source correction is required in this exact corrected packet for
|
||||
NetKingdom's technical review. Separate owner and founder dispositions remain due.
|
||||
|
|
@ -0,0 +1,193 @@
|
|||
{
|
||||
"reviewed_manifest": {
|
||||
"path": "/tmp/forgejo-consumer-eso-refinement-stage/manifest.json",
|
||||
"sha256": "271afd04512b3dac642b3385013cac03d28afde22ff97bcca8d0e262ab3d9279"
|
||||
},
|
||||
"initial_manifest": {
|
||||
"path": "/tmp/forgejo-consumer-eso-refinement-original-c48/manifest.json",
|
||||
"sha256": "c48b64e5e704e8f11ca65095c376c8a9fecc2b3a58e74b9eb62096c80d00f4fb"
|
||||
},
|
||||
"amendment_receipt": {
|
||||
"path": "/tmp/forgejo-consumer-eso-refinement-amendment-receipt.json",
|
||||
"sha256": "e27a3f5a56565d270d8f038f77333aea13460135a16ae4e60a914dc5d17365c9"
|
||||
},
|
||||
"staged_proposal_files": [
|
||||
{
|
||||
"repo": "railiance-apps",
|
||||
"path": "docs/proposals/2026-10-11-forgejo-consumer-eso/consumer-delivery.yaml",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/railiance-apps/docs/proposals/2026-10-11-forgejo-consumer-eso/consumer-delivery.yaml",
|
||||
"original_sha256": null,
|
||||
"staged_sha256": "56478a83d799c08dc1e5159983b1e843a46b16dfeee7e84c31401d1f92430df2"
|
||||
},
|
||||
{
|
||||
"repo": "railiance-apps",
|
||||
"path": "docs/proposals/2026-10-11-forgejo-consumer-eso/native-metadata.json",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/railiance-apps/docs/proposals/2026-10-11-forgejo-consumer-eso/native-metadata.json",
|
||||
"original_sha256": null,
|
||||
"staged_sha256": "4e2993f5920215f41e4a235743023f22b78b8f597d3d70ed279991b2fc3204b5"
|
||||
},
|
||||
{
|
||||
"repo": "railiance-apps",
|
||||
"path": "docs/proposals/2026-10-11-forgejo-consumer-eso/observe-native-metadata.py",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/railiance-apps/docs/proposals/2026-10-11-forgejo-consumer-eso/observe-native-metadata.py",
|
||||
"original_sha256": null,
|
||||
"staged_sha256": "3732aa0ff45b5197ac7837cbc5814f59ea3d694d4a157d19d00711f29da76913"
|
||||
},
|
||||
{
|
||||
"repo": "railiance-apps",
|
||||
"path": "docs/proposals/2026-10-11-forgejo-consumer-eso/owner-design.md",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/railiance-apps/docs/proposals/2026-10-11-forgejo-consumer-eso/owner-design.md",
|
||||
"original_sha256": null,
|
||||
"staged_sha256": "a6d735ef1ebaddb062603e6a5b5a01a38d16658445c95bb2735dfbee9b714c9e"
|
||||
},
|
||||
{
|
||||
"repo": "railiance-apps",
|
||||
"path": "docs/proposals/2026-10-11-forgejo-consumer-eso/owner-source-pins.json",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/railiance-apps/docs/proposals/2026-10-11-forgejo-consumer-eso/owner-source-pins.json",
|
||||
"original_sha256": null,
|
||||
"staged_sha256": "775971a60db57f7334f68b0916a27760e28f02c62f2c653e963237925a1c2711"
|
||||
},
|
||||
{
|
||||
"repo": "railiance-apps",
|
||||
"path": "docs/proposals/2026-10-11-forgejo-consumer-eso/primary-source-provenance.json",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/railiance-apps/docs/proposals/2026-10-11-forgejo-consumer-eso/primary-source-provenance.json",
|
||||
"original_sha256": null,
|
||||
"staged_sha256": "c3d5ce5c6a5e89f19be5e293034c8d633183d19666fc61d837537527246d9a42"
|
||||
},
|
||||
{
|
||||
"repo": "railiance-apps",
|
||||
"path": "docs/proposals/2026-10-11-forgejo-consumer-eso/validation.json",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/railiance-apps/docs/proposals/2026-10-11-forgejo-consumer-eso/validation.json",
|
||||
"original_sha256": null,
|
||||
"staged_sha256": "013e073e826a4b863dc2f7c83fa59270de54de64cd8f19bd32238c91aa24b2de"
|
||||
},
|
||||
{
|
||||
"repo": "railiance-platform",
|
||||
"path": "docs/proposals/2026-10-11-forgejo-consumer-eso/CCR-2026-0042-proposed-body.yaml",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/railiance-platform/docs/proposals/2026-10-11-forgejo-consumer-eso/CCR-2026-0042-proposed-body.yaml",
|
||||
"original_sha256": null,
|
||||
"staged_sha256": "6544600c63a86559ba053240c476d493f4d2f25c9cd22cf6a9a05f09ee617a86"
|
||||
},
|
||||
{
|
||||
"repo": "railiance-platform",
|
||||
"path": "docs/proposals/2026-10-11-forgejo-consumer-eso/reader-role.json",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/railiance-platform/docs/proposals/2026-10-11-forgejo-consumer-eso/reader-role.json",
|
||||
"original_sha256": null,
|
||||
"staged_sha256": "976b19e0780b6056ed54bf5e8f27a0eb786af65817d9ec00ca161ac46e7d72e7"
|
||||
},
|
||||
{
|
||||
"repo": "railiance-platform",
|
||||
"path": "docs/proposals/2026-10-11-forgejo-consumer-eso/workload-kv-read-keycape-forgejo-forgejo.hcl",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/railiance-platform/docs/proposals/2026-10-11-forgejo-consumer-eso/workload-kv-read-keycape-forgejo-forgejo.hcl",
|
||||
"original_sha256": null,
|
||||
"staged_sha256": "af3a638605c1f6dff7879771fede4c56a6b9a7e430d4b5b58c370063b2c888ca"
|
||||
},
|
||||
{
|
||||
"repo": "net-kingdom",
|
||||
"path": "docs/proposals/2026-10-11-forgejo-consumer-eso/case-1.2.yaml",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/net-kingdom/docs/proposals/2026-10-11-forgejo-consumer-eso/case-1.2.yaml",
|
||||
"original_sha256": null,
|
||||
"staged_sha256": "1c868c1da7d9077fae97bc6bc029706ec3dc418cfeaae30dc0f92b5b4ba6f2ab"
|
||||
},
|
||||
{
|
||||
"repo": "net-kingdom",
|
||||
"path": "docs/proposals/2026-10-11-forgejo-consumer-eso/render-1.2.json",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/net-kingdom/docs/proposals/2026-10-11-forgejo-consumer-eso/render-1.2.json",
|
||||
"original_sha256": null,
|
||||
"staged_sha256": "96b25108335e2cf5f96af481fe8a7735831c8320d81b50f7c6e6d4e53d0c0f02"
|
||||
},
|
||||
{
|
||||
"repo": "net-kingdom",
|
||||
"path": "docs/proposals/2026-10-11-forgejo-consumer-eso/review-boundary.md",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/net-kingdom/docs/proposals/2026-10-11-forgejo-consumer-eso/review-boundary.md",
|
||||
"original_sha256": null,
|
||||
"staged_sha256": "21c8d666a46490f829cfb9c043ea168ad1c02873dc6baf7e50173188e0c99ea9"
|
||||
},
|
||||
{
|
||||
"repo": "net-kingdom",
|
||||
"path": "docs/proposals/2026-10-11-forgejo-consumer-eso/type-1.2.yaml",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/net-kingdom/docs/proposals/2026-10-11-forgejo-consumer-eso/type-1.2.yaml",
|
||||
"original_sha256": null,
|
||||
"staged_sha256": "017885bdd139cd66a5bf6d9839b1b8ec9bc08fb051d9577adc3928b76a7be6db"
|
||||
},
|
||||
{
|
||||
"repo": "ops-mason",
|
||||
"path": "docs/forgejo-consumer-eso-builder-review.md",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/ops-mason/docs/forgejo-consumer-eso-builder-review.md",
|
||||
"original_sha256": null,
|
||||
"staged_sha256": "8930aa8269eab247a66f0f72ae138a2a8ba9a3f85523b65f2b44dfb4f7785429"
|
||||
},
|
||||
{
|
||||
"repo": "ops-mason",
|
||||
"path": "src/ops_mason/case_build.py",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/ops-mason/src/ops_mason/case_build.py",
|
||||
"original_sha256": "249cc8574939d2c3193f968309781c472c96c199e04206c336463b4d65ea6659",
|
||||
"staged_sha256": "2e1d9cec6a47bb0e9b76f5446f5a58cc02275bcf35bae1779bbeac015b91a243"
|
||||
},
|
||||
{
|
||||
"repo": "ops-mason",
|
||||
"path": "tests/test_case_build.py",
|
||||
"staged_path": "/tmp/forgejo-consumer-eso-refinement-stage/ops-mason/tests/test_case_build.py",
|
||||
"original_sha256": "177e8feed5d1af9abe96522fb5399780b3199daed6bf360882398044357071bc",
|
||||
"staged_sha256": "7a4789857b76c9cc585f58d8689e05e803cd69203ca25be0b900786e401dca20"
|
||||
}
|
||||
],
|
||||
"owner_sources": [
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/AGENTS.md",
|
||||
"sha256": "065d47b7bdbfe829672a2a6161a7f8cf243237a1210fb61d82f153fa37f22131"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/INTENT.md",
|
||||
"sha256": "fd2ba8dff9dfd5583ec6d8b0348f273bfe00c59923b5d5d47cd22b1fb4658c54"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/SECURITY-COMPANION.md",
|
||||
"sha256": "06374445ca888549f1bf79527d1345d94918d7a7ec363160d8427d0e7a31d643"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/canon/standards/security-layer-model_v0.8.md",
|
||||
"sha256": "3d8298560069ef471fba28d2b1245fb2309328f231dad1a667cdf0ce5a5a7c8b"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/canon/standards/security-case-types_v0.1.md",
|
||||
"sha256": "a4fda906d5138d2594a1f8d047c7c28e1cdf96b1eae051f543b9a5e5852bcb5e"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/security-case-types/oidc-browser-relying-party/type.yaml",
|
||||
"sha256": "f705c64e4875e9b8e18a912fb51c135e77898926d6a451f5cb74ab3c0cbe4d1c"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/security-cases/forgejo-netkingdom-oidc.yaml",
|
||||
"sha256": "bcc2c6d5bae0d28242b3cdb71e74d8ca297c2afe04766b55d53597f86893351d"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/tools/security-case-types/security_case_validator.py",
|
||||
"sha256": "ef380a85ca9949e0ebc59d1cdce422bd45e362eb976330b2b72b8fd73784ae0a"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/tools/security-scenario-composer/security_scenario_composer.py",
|
||||
"sha256": "9f0cc69930aa8ee2cc3fb92236e6a99728df17b8c0fe36e1250241c38fc01c4f"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/the-custodian/canon/standards/delegated-owner-review_v0.1.md",
|
||||
"sha256": "d372b2ad21849a18d90d40636fad3c31425b2bd61f0778f43e57c62402a06d6c"
|
||||
}
|
||||
],
|
||||
"independent_checks": {
|
||||
"reviewed_manifest_sha256": "271afd04512b3dac642b3385013cac03d28afde22ff97bcca8d0e262ab3d9279",
|
||||
"original_manifest_sha256": "c48b64e5e704e8f11ca65095c376c8a9fecc2b3a58e74b9eb62096c80d00f4fb",
|
||||
"manifest_files_verified": 17,
|
||||
"amendment_verified_only_risk_note": true,
|
||||
"type_validation_pass": true,
|
||||
"case_validation_pass_preparation_only": true,
|
||||
"source_render_regeneration_identical": true,
|
||||
"render_digest": "sha256:c0afd5576cdae0cbc807eccb2b9fa87ac668f15e32ec7cf79d295bdb23c75b35",
|
||||
"old_five_structural_objects_exactly_equal": true,
|
||||
"added_structural_object": "consumer-eso-role",
|
||||
"seven_current_source_pins_verified": true,
|
||||
"mason_code_and_tests_unchanged": true,
|
||||
"native_mutation": false,
|
||||
"execution_permitted": false
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,58 @@
|
|||
---
|
||||
reviewer: net-kingdom-owner (agent net-kingdom, codex)
|
||||
decision: approved
|
||||
work_item: NK-WP-ADHOC-2026-10-11-T04
|
||||
scope: bounded-handoff-reception-and-proposed-source-assembly-only
|
||||
---
|
||||
|
||||
# NetKingdom source-owner reception of GH-DEC-2026-025
|
||||
|
||||
NetKingdom accepts the source-owner handoff for assembly, not whole-revision
|
||||
adoption. Under INTENT's Taxonomy declaration and Meta-Orchestration principle,
|
||||
NetKingdom holds canonical source and publication; Gate House supplies doctrine,
|
||||
InformedDecision records the actual human act, and PolicyNexus retains its own
|
||||
accepted-source publication route. This is the same established NetKingdom role,
|
||||
not a review for another owner. Own T04 is completed before this entry; the
|
||||
applying coordinator must first retain live NET-IN-0004 and the owner work record.
|
||||
|
||||
Reviewed exact handoff SHA256
|
||||
1fd8dc06d417c7a0d97920ddc1e51b0fb28113efb8047a8380cd2b9d3ff3289c against the
|
||||
accepted bounded proposal08bc78a29c2b67cec0aafba993fb2d25312b629ecccb81458980baafe38e566a
|
||||
and native receipt eb67e6db46acc3d1eb102ae541c60508379c216061a4c694fb4aee35dc845a7b.
|
||||
The retained native outcome confirms a nonstale version1 person ACCEPT at
|
||||
2026-10-11T01:46:25Z, approval d90c899b-f25c-4e66-a003-808ee5b1324f and disposition
|
||||
disp-24e94200-ed93-4a18-900c-3128d26ba212. Its scope is the exact bounded doctrine
|
||||
proposal; it does not ratify whole v0.9 or authorize native publication/deployment.
|
||||
|
||||
Proposed successor security-layer-model_v0.9.md SHA256
|
||||
28331f0ccbbede3a47ca24dfe11a6ce84635419d7ed3feb60e9af9a90d8f66e6 carries the exact
|
||||
complete §3.4 paragraph block, §4 row, replacement evidence-values paragraph and
|
||||
per-event paragraph. All four match both handoff and immutable approved proposal;
|
||||
no partial slicing or inferred normative wording is used. The only changed body
|
||||
sections are3,4,14,15:3/4 are the approved candidate,14 and15 provenance/adoption
|
||||
annotations. All other body sections match accepted v0.8 exactly. Frontmatter and
|
||||
title label v0.9 proposed and omit predecessor acceptance markers; historical
|
||||
assent/adoption records are explicitly predecessor provenance, not successor assent.
|
||||
|
||||
Accepted v0.8 remains operative and byte-identical at SHA256
|
||||
3d8298560069ef471fba28d2b1245fb2309328f231dad1a667cdf0ce5a5a7c8b. Its current
|
||||
companion, serving source and checker pins remain unchanged. No broader model
|
||||
revision, new layer, permission or source conformance is introduced. Existing
|
||||
Staff prohibitions and approval-engine/access-engine ownership remain binding.
|
||||
|
||||
The §3.4 deterministic-evidence tension remains unresolved. The informed-decision
|
||||
Staff/PEP-shaped evidence=yes row identifies obligations, not satisfaction;
|
||||
presentation remains volume/load-bearing, disposition and stance-application
|
||||
rare/load-bearing, with class-specific guarantees owed until source-owner proof.
|
||||
No delivered row, human bind, layer agreement, detector PASS or independent custody
|
||||
claim proves whole-class emission or honest display. No mandatory-evidence failure
|
||||
exception is added. Finished INFD-WP-0005/0007 remain historical evidence and are not
|
||||
reopened solely from stale declarations. Source-owner class-specific reconciliation
|
||||
remains distinct; INFD-IN-0007 awaits actual accepted standard voice.
|
||||
|
||||
Gate House can distinguish its completed doctrine disposition/handoff from the
|
||||
pending standard adoption now held in live NET-IN-0004. NetKingdom must obtain
|
||||
required exact whole-revision disposition/reviews before acceptance annotations,
|
||||
operative companion/checker repointing and subsequent owner publication. This
|
||||
review supplies source reception/assembly only and performs none of those steps.
|
||||
No further bounded text correction is required for this exact proposed assembly.
|
||||
|
|
@ -0,0 +1,74 @@
|
|||
{
|
||||
"assembly_checks": {
|
||||
"handoff_sha256": "1fd8dc06d417c7a0d97920ddc1e51b0fb28113efb8047a8380cd2b9d3ff3289c",
|
||||
"human_receipt_sha256": "eb67e6db46acc3d1eb102ae541c60508379c216061a4c694fb4aee35dc845a7b",
|
||||
"proposal_sha256": "08bc78a29c2b67cec0aafba993fb2d25312b629ecccb81458980baafe38e566a",
|
||||
"successor_sha256": "28331f0ccbbede3a47ca24dfe11a6ce84635419d7ed3feb60e9af9a90d8f66e6",
|
||||
"accepted_v08_sha256": "3d8298560069ef471fba28d2b1245fb2309328f231dad1a667cdf0ce5a5a7c8b",
|
||||
"exact_candidate_blocks_match_handoff_and_approved_proposal": true,
|
||||
"accepted_v08_unchanged": true,
|
||||
"proposed_successor_status": "proposed",
|
||||
"native_human_acceptance_bounded_only": {
|
||||
"actor": {
|
||||
"kind": "person",
|
||||
"sub": "uid=platform-root,ou=people,dc=netkingdom,dc=local"
|
||||
},
|
||||
"approval_id": "d90c899b-f25c-4e66-a003-808ee5b1324f",
|
||||
"at": "2026-10-11T01:46:25Z",
|
||||
"id": "disp-24e94200-ed93-4a18-900c-3128d26ba212",
|
||||
"memo_id": "review-2e615985-54c9-40d8-8547-b8fdcb10b1d6",
|
||||
"memo_version": 1,
|
||||
"note": null,
|
||||
"presentation_id": "pres-f44a4a5d-6998-422c-b46e-da7af46906f6",
|
||||
"reasons": [],
|
||||
"verb": "accept"
|
||||
},
|
||||
"live_adoption_owner_record": "NET-IN-0004",
|
||||
"cumulative_adhoc_requires_prior_T03_return": true,
|
||||
"only_changed_body_sections": [
|
||||
3,
|
||||
4,
|
||||
14,
|
||||
15
|
||||
],
|
||||
"other_normative_sections_exactly_unchanged": true
|
||||
},
|
||||
"sources": [
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/AGENTS.md",
|
||||
"sha256": "065d47b7bdbfe829672a2a6161a7f8cf243237a1210fb61d82f153fa37f22131"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/INTENT.md",
|
||||
"sha256": "fd2ba8dff9dfd5583ec6d8b0348f273bfe00c59923b5d5d47cd22b1fb4658c54"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/SECURITY-COMPANION.md",
|
||||
"sha256": "06374445ca888549f1bf79527d1345d94918d7a7ec363160d8427d0e7a31d643"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/canon/standards/security-layer-model_v0.8.md",
|
||||
"sha256": "3d8298560069ef471fba28d2b1245fb2309328f231dad1a667cdf0ce5a5a7c8b"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/gate-house/docs/amendments/2026-10-11-staff-evidence-disposition-handoff.md",
|
||||
"sha256": "1fd8dc06d417c7a0d97920ddc1e51b0fb28113efb8047a8380cd2b9d3ff3289c"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/gate-house/docs/amendments/informed-decision-staff-evidence-disposition-proposal.md",
|
||||
"sha256": "08bc78a29c2b67cec0aafba993fb2d25312b629ecccb81458980baafe38e566a"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/gate-house/docs/evidence/2026-10-11-staff-evidence-human-disposition.json",
|
||||
"sha256": "eb67e6db46acc3d1eb102ae541c60508379c216061a4c694fb4aee35dc845a7b"
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/gate-house/decisions/decisions.md",
|
||||
"sha256": "a5e227d462627ed7f25029267f204d0c5af0438c05240f601765b7cbfff82299"
|
||||
}
|
||||
],
|
||||
"proposed_source": {
|
||||
"path": "canon/standards/security-layer-model_v0.9.md",
|
||||
"sha256": "28331f0ccbbede3a47ca24dfe11a6ce84635419d7ed3feb60e9af9a90d8f66e6"
|
||||
}
|
||||
}
|
||||
|
|
@ -73,3 +73,64 @@ updated: '2026-08-29'
|
|||
state_hub_intake_id: "01a06eb9-c4af-7a9e-8ff5-1bc5f845eb38"
|
||||
```
|
||||
|
||||
|
||||
## NET-IN-0003 — Demand-deferred workload-requested step-up interoperability
|
||||
|
||||
```yaml
|
||||
id: NET-IN-0003
|
||||
kind: intake
|
||||
title: 'Demand-deferred workload-requested step-up interoperability'
|
||||
status: open
|
||||
flavor: residual
|
||||
origin: residual
|
||||
origin_ref: NK-WP-0042
|
||||
priority: low
|
||||
owner: net-kingdom
|
||||
requested_by: net-kingdom
|
||||
created: '2026-10-10'
|
||||
updated: '2026-10-10'
|
||||
description: >
|
||||
Proposed IAM v0.4 carries the acr_values strength and max_age freshness
|
||||
contract, but no arbitrary-client workload-requested step-up integration
|
||||
has been accepted. The founder selected optional MFA on coulomb-social
|
||||
with no acr_values=aal2 switch-on (user-engine/docs/mfa-pilot-decision.md).
|
||||
Keep this demand-deferred: promote only for a named workload requirement
|
||||
and separately approved issuer/client policy. On promotion coordinate
|
||||
KeyCape enforcement, user-engine enrollment/recovery and workload/PDP
|
||||
assurance; prove no-factor refusal, enrollment return, stale AAL1 and
|
||||
provider unavailability with actual-user acceptance. Existing optional
|
||||
U05-U08 acceptance stays live in USER-WP-0027-T04 / USER-WP-0028-T03
|
||||
and decision cef97ccd; it is not deferred by this intake.
|
||||
state_hub_intake_id: "01a12705-4400-7121-b326-1f63135bcab4"
|
||||
```
|
||||
|
||||
## NET-IN-0004 — Adopt and publish the bounded Staff-evidence successor source
|
||||
|
||||
```yaml
|
||||
id: NET-IN-0004
|
||||
kind: intake
|
||||
title: 'Adopt and publish the bounded Staff-evidence successor source'
|
||||
status: open
|
||||
origin: cross-repo
|
||||
origin_ref: GH-WP-0004-T06 / GH-DEC-2026-025
|
||||
priority: medium
|
||||
owner: net-kingdom
|
||||
requested_by: gate-house
|
||||
created: '2026-10-11'
|
||||
updated: '2026-10-11'
|
||||
description: >
|
||||
The confirmed founder disposition accepts the bounded doctrine proposal,
|
||||
not an entire successor standard. Proposed security-layer-model_v0.9.md
|
||||
assembles only its exact section3.4/4 candidate. Obtain exact successor
|
||||
source-owner/doctrine review and separate required whole-revision acceptance
|
||||
before acceptance annotations, operative companion/checker repointing or
|
||||
PolicyNexus owner publication. Retain acceptedv0.8 SHA3d829856 unchanged.
|
||||
Existing GH-WP-0004 holds GateHouse doctrine/checker responsibilities; this
|
||||
one owner intake retains source adoption/publication without a parallel plan.
|
||||
Source receipt completes GateHouse handoff, not standard adoption.
|
||||
INFD-IN-0007 waits for the accepted standard voice. Staff tension stays
|
||||
unresolved; per-event guarantees remain owed until source-owner class-specific
|
||||
reconciliation returns proof. Finished INFD-WP-0005/0007 remain historical
|
||||
receipts and must not be reopened solely from stale declarations.
|
||||
No deployment, credentials or runtime conformity is authorized here.
|
||||
```
|
||||
|
|
|
|||
|
|
@ -11,6 +11,7 @@ topic_slug: netkingdom
|
|||
created: "2026-10-11"
|
||||
updated: "2026-10-11"
|
||||
related: [GH-WP-0004]
|
||||
state_hub_workstream_id: "930ae9b3-4769-57ce-bb77-ba2a997f653e"
|
||||
---
|
||||
|
||||
## Review exact requested successor-canon amendment without publication
|
||||
|
|
@ -19,6 +20,7 @@ related: [GH-WP-0004]
|
|||
id: NK-WP-ADHOC-2026-10-11-T01
|
||||
status: done
|
||||
priority: medium
|
||||
state_hub_task_id: "9dd7fb12-1ca4-5fd5-94e7-a75dd3e00939"
|
||||
```
|
||||
|
||||
Source-owner review only of GH-WP-0004-T06-r1, exact proposal SHA256
|
||||
|
|
@ -36,6 +38,7 @@ is asserted. Review and exact sources are retained in docs/reviews/.
|
|||
id: NK-WP-ADHOC-2026-10-11-T02
|
||||
status: done
|
||||
priority: high
|
||||
state_hub_task_id: "60c1a740-75ac-56f8-bee8-905e7d236460"
|
||||
```
|
||||
|
||||
NetKingdom-only source-owner review of applied refined nine-file User Engine
|
||||
|
|
@ -47,3 +50,46 @@ runtime go, catalogue write, default role/grant or normal PDP bypass permission
|
|||
is inferred. The fresh User Engine owner supplies its distinct review; this
|
||||
worker signs only the established NetKingdom owner role. Exact review/sources
|
||||
are retained in docs/reviews/.
|
||||
|
||||
## Review the exact Forgejo consumer ESO successor source
|
||||
|
||||
```task
|
||||
id: NK-WP-ADHOC-2026-10-11-T03
|
||||
status: done
|
||||
priority: high
|
||||
```
|
||||
|
||||
NetKingdom-only source-owner review of the frozen 17-path Forgejo consumer ESO
|
||||
successor proposal. Initial manifest c48b64e5e704e8f11ca65095c376c8a9fecc2b3a58e74b9eb62096c80d00f4fb
|
||||
contained a misleading acknowledged-type risk note; the requester corrected it
|
||||
and retained that original revision. Final manifest
|
||||
271afd04512b3dac642b3385013cac03d28afde22ff97bcca8d0e262ab3d9279 independently
|
||||
verified, including the sole risk-note amendment, all 17 paths, seven current
|
||||
source pins, native source validators, identical full render regeneration and
|
||||
exact preservation of the original five structural objects plus a sixth role.
|
||||
Technical source agreement only: SecurityCaseTypes §6 requires a new founder
|
||||
informed-decision acknowledgment for this authentication/materialization change;
|
||||
current type/case1.1, historical CCR42 and all native state remain unchanged.
|
||||
No type/case acknowledgment, binding admission, materialization, credential
|
||||
grant or live delivery is authorized. Exact review and evidence retained in
|
||||
docs/reviews/2026-10-11-forgejo-consumer-eso-net-owner-review.*.
|
||||
|
||||
## Receive the accepted bounded doctrine handoff and assemble proposed source
|
||||
|
||||
```task
|
||||
id: NK-WP-ADHOC-2026-10-11-T04
|
||||
status: done
|
||||
priority: high
|
||||
```
|
||||
|
||||
Received exact GH-DEC-2026-025 / GH-WP-0004-T06 source-owner handoff after
|
||||
confirmed person ACCEPT d90c899b-f25c-4e66-a003-808ee5b1324f at2026-10-11T01:46:25Z
|
||||
of proposal08bc78a29c2b67cec0aafba993fb2d25312b629ecccb81458980baafe38e566a.
|
||||
Assembled the exact bounded §3.4/§4 candidate in proposed v0.9 only; accepted
|
||||
v0.8 stays byte-identical/operative. Reviewed full paragraph/row equality against
|
||||
both immutable proposal and handoff, native receipt scope, unchanged other
|
||||
normative sections and retained Staff/evidence limits. No whole v0.9 acceptance
|
||||
or serving/deployment is inferred. Live successor adoption/publication is
|
||||
retained first as NET-IN-0004; INFD-IN-0007 stays open pending accepted voice.
|
||||
Gate House handoff completion is distinct from this source-owner's outstanding
|
||||
standard adoption. No finished INFD implementation plan is reopened.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue