coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NK-WP-0054: rename task T03b to T08 (the registry accepts numeric ids only)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 328925@bnt-lap001
Assistant-Session: 14b795fd-c632-4c01-8d28-e7e490c7b0ed
This commit is contained in:
tegwick 2026-10-24 23:58:08 +02:00
parent 951c7eac2d
commit d0f259b12c
4 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
WORK-RECORDS.md
View file

@ -311,11 +311,11 @@
| task | NK-WP-0054-T01 | done | — | workplans/NK-WP-0054-service-identity-policy.md |
| task | NK-WP-0054-T02 | wait | — | workplans/NK-WP-0054-service-identity-policy.md |
| task | NK-WP-0054-T03 | done | — | workplans/NK-WP-0054-service-identity-policy.md |
| task | NK-WP-0054-T03b | done | — | workplans/NK-WP-0054-service-identity-policy.md |
| task | NK-WP-0054-T04 | wait | — | workplans/NK-WP-0054-service-identity-policy.md |
| task | NK-WP-0054-T05 | wait | — | workplans/NK-WP-0054-service-identity-policy.md |
| task | NK-WP-0054-T06 | wait | — | workplans/NK-WP-0054-service-identity-policy.md |
| task | NK-WP-0054-T07 | todo | — | workplans/NK-WP-0054-service-identity-policy.md |
| task | NK-WP-0054-T08 | done | — | workplans/NK-WP-0054-service-identity-policy.md |
| intake | NK-IN-0001 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md |
| intake | NK-IN-0002 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md |
| intake | NET-IN-0001 | open | — | intakes/intakes.md |

2
canon/standards/service-identity-privilege_v0.1.md
View file

@ -47,7 +47,7 @@ produced.
citation errors (§4, §8), now corrected; railiance-platform prepared the F-1 and `aal2` role changes (source only);
key-cape, glas-harness and state-hub assessed the agent-identity and attribution gaps (§10). No decision changed.
The offline validator (`tools/service-identity`) implements draft-3 (principal type and grants, NK-WP-0054-T03b).
The offline validator (`tools/service-identity`) implements draft-3 (principal type and grants, NK-WP-0054-T08).
The live health check (T04) does not exist yet.
## 1. Purpose, scope and authority

2
history/2026-10-24-security-identity-and-agent-review.md
View file

@ -62,7 +62,7 @@ roster template, and `docs/crisis-custody-list.md` now lists custody items. They
| Item | Owner |
| --- | --- |
| Migrate declarations and validator to grants (NK-WP-0054-T03b) | net-kingdom |
| Migrate declarations and validator to grants (NK-WP-0054-T08) | net-kingdom |
| Authenticate State Hub authorship for agents (actor, session) to meet SI-15 | state-hub |
| Per-run agent identity (DSM-AGENT-002), for example short-lived agent tokens from KeyCape | key-cape, glas-harness |
| Coding-agent role presents as `agent` (F-1) | railiance-platform |

4
workplans/NK-WP-0054-service-identity-policy.md
View file

@ -106,7 +106,7 @@ set the status to accepted when the founder decides.
Draft-3 (2026-10-24): realigned as an estate profile of SecurityCanon after a review against the canon
(`history/2026-10-24-security-identity-and-agent-review.md`): imported vocabulary, SEC-DSM references per rule,
estate identities in canon terms, new SI-15 (accountable automation). Validator migration is T03b.
estate identities in canon terms, new SI-15 (accountable automation). Validator migration is T08.
Draft-2 (2026-10-24, after the founder's review): decisions applied are OpenBao `platform-admin` binds
`aal2`; the human administrator keeps directory admin rights through an admin group; declarations start here
and move to the services; agents get their own class and rule SI-14. Rehearsals still to do (not decisions):
@ -152,7 +152,7 @@ SI-10 and SI-13 are not decidable from a declaration.
## Migrate declarations and validator to canon grants (draft-3)
```task
id: NK-WP-0054-T03b
id: NK-WP-0054-T08
status: done
priority: medium
assignee: claude-code