net-kingdom/workplans
tegwick da7747dc42
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Correct v0.8 §11: the emission-guarantee check contradicted the profile it cites
gate-house circulated v0.8 with two questions for this repository as owner of
the NetKingdom emission-cadence security profile: whether §17's ownership
paragraph reads in our own voice, and whether §11's new conformance item
follows the profile or diverges from it.

§17 is confirmed as written. It assigns the generic EmissionCadenceDeclaration
contract to info-tech-canon and to net-kingdom the MUST/SHOULD split, the
rare-class rate-monitoring prohibition, and the heartbeat-plus-reconciliation
obligation — which is emission-cadence-security-profile_v0.1.md §3, conjunction
included. No change.

§11 diverged in both directions and is corrected. Requiring a detection surface
of "heartbeat or reconciliation" of every load-bearing source withholds from a
volume class the expected-rate form the profile permits, and accepts for a rare
class either control alone where the profile — and the checker in
tools/emission-cadence-profile — require both. A rare class covered by a
heartbeat alone has no reconciliation to catch divergence, and one covered by
reconciliation alone produces no claim that can go missing, which is the whole
reason §9.6 rejects rate monitoring there. The item also contradicted its own
following paragraph, which admits rate monitoring except where the class is
rare.

The check now defers the form to the governing profile rather than restating a
split that is §17's to assign, carries the volume/rare distinction explicitly,
and states that classification is the source's published inventory and never the
checker's to infer from a name, payload, or observed rate — otherwise omission
detection is circular.

Change log item 6 and §14 record the review. The standard stays proposed;
publication and the acceptance flip wait on the close of the circulation round.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ek3zTdfMa35bPVDjVUyhxx

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 868701@bnt-lap001
Assistant-Session: b2e101b6-f501-40dc-9ee5-438cac36e21a
2026-09-07 08:44:52 +02:00
..
archived repo.work.assign_missing_identifiers 2026-09-04 00:26:59 +02:00
ADHOC-2026-07-02.md repo.work.assign_missing_identifiers 2026-09-04 00:26:59 +02:00
ADHOC-2026-08-14.md repo.work.assign_missing_identifiers 2026-09-04 00:26:59 +02:00
ADHOC-2026-08-23.md repo.work.assign_missing_identifiers 2026-09-04 00:26:59 +02:00
NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof 2026-07-02 22:08:33 +02:00
NK-WP-0009-netkingdom-security-pattern-tutorials.md derive state hub identifiers 2026-08-31 19:08:31 +02:00
NK-WP-0011-enterprise-federation-saml.md derive state hub identifiers 2026-08-31 19:08:31 +02:00
NK-WP-0021-activity-core-ops-sso-operators.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0023-user-engine-portal-platform-integration.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0024-user-engine-portal-integration-expansion.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0025-public-self-registration-and-application-jit.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0026-flex-auth-caller-identity-rollout.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0027-reef-placement-reconciliation.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0028-canon-publication-and-grouping-semantics.md chore(registrar): assign State Hub identifiers 2026-08-22 14:54:45 +02:00
NK-WP-0029-scope-and-intent-reconciliation.md chore(registrar): assign State Hub identifiers 2026-08-23 12:02:15 +02:00
NK-WP-0030-deterministic-security-scenario-composition.md feat(orchestration): compose KeyCape C1 and C2b 2026-08-23 13:24:55 +02:00
NK-WP-0031-deterministic-posture-feedback.md chore(registrar): assign State Hub identifiers 2026-08-23 13:26:15 +02:00
NK-WP-0032-openbao-operator-loopback-callback.md chore(registrar): assign State Hub identifiers 2026-08-23 14:08:12 +02:00
NK-WP-0033-keycape-secret-exposure-rotation.md docs(nk-wp-0033): record the 2026-08-27 attended session findings 2026-08-27 22:20:48 +02:00
NK-WP-0034-verification-that-verifies.md Validate cadence contract and require functional MFA verification 2026-09-05 01:28:05 +02:00
NK-WP-0035-emission-cadence-security-profile.md Correct v0.8 §11: the emission-guarantee check contradicted the profile it cites 2026-09-07 08:44:52 +02:00