tegwick
9e041e3662
Answers zone-engine ZONE-WP-0001-T01. Decision 5.6 — enforcement stance is a sibling standard, not an axis. The six ladders are monotone and the whole current/target/guard machinery depends on it; enforcement stance is not (ADR-0006 is the finding that the top rung is wrong for the SSH lane). And this framework is descriptive: an accurately declared exempt would be conformant and exempt. Membership is declared, stance belongs to the control owner. Zone membership rides tenancy.yaml under a reserved zones: key so the estate keeps one declaration surface; the schema permits it, unconstrained. Decisions 8.4.1/8.4.2 — 'substrate location is not evidence' stated once instead of three repo-local slogans, and the reef/P/V gap recorded as this document's defect rather than zone-engine's scope. NK-WP-0027 takes it. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| archived | ||
| ADHOC-2026-07-02.md | ||
| ADHOC-2026-08-14.md | ||
| NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md | ||
| NK-WP-0009-netkingdom-security-pattern-tutorials.md | ||
| NK-WP-0011-enterprise-federation-saml.md | ||
| NK-WP-0021-activity-core-ops-sso-operators.md | ||
| NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | ||
| NK-WP-0023-user-engine-portal-platform-integration.md | ||
| NK-WP-0024-user-engine-portal-integration-expansion.md | ||
| NK-WP-0025-public-self-registration-and-application-jit.md | ||
| NK-WP-0026-flex-auth-caller-identity-rollout.md | ||
| NK-WP-0027-reef-placement-reconciliation.md | ||