tegwick
b808da601d
- playbook-capability-contract_v0.2.md (proposed): adds the execution-attribution receipt field list (NK-WP-0040-T01). - iam-profile_v0.4.md (proposed): adds the workload-requested step-up contract (acr_values, no-factor refusal, assurance.level to flex-auth) (NK-WP-0042-T01). - Route the remaining externally-owned decisions (NK-WP-0040-T02 to audit-core/Railiance, NK-WP-0042-T02 to user-engine, NK-WP-0039-T04 to flex-auth/tenant-engine) and mark those workplans blocked. Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 321494@bnt-lap001 Assistant-Session: 2c8a5cd1-573e-4bae-ab2b-29bc6c8ed4e9
2.8 KiB
| id | type | title | domain | repo | status | flavor | owner | topic_slug | created | updated | related | state_hub_workstream_id | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| NK-WP-0040 | workplan | Define an execution-attribution receipt for Railiance runs | infotech | net-kingdom | blocked | planning | claude-code | netkingdom | 2026-09-23 | 2026-09-24 |
|
e2533f3a-aa43-59b3-bff3-8e64b6149487 |
Raised by the railiance-clock identity review
(history/2026-09-23-railiance-clock-identity-and-layer-review.md, Ruling 1).
IAM Profile v0.3 defines who acts: human, service and agent principals, and
delegation. Playbook Capability Contract v0.1 defines what is selected and who
is responsible. No NetKingdom contract defines the record that ties one
execution to its actor chain, artifact and result.
Draft the receipt fields as a Playbook Capability Contract amendment
id: NK-WP-0040-T01
status: done
priority: medium
state_hub_task_id: "9d02685a-a3d9-5b9f-b09e-aef1f196a97f"
Draft a v0.2 amendment that adds an execution-attribution receipt with these fields:
- issuer and subject of the initiating actor
- delegation reference (
actor_sub/act.sub) when present - executing workload binding and runtime principal
- tenant and environment
- run ID
- source commit and artifact digest
- target inventory reference and action
- decision and approval IDs
- attributed time interval, with its clock source and bound when one exists
The receipt must never embed bearer credentials. Unknown attribution is kept explicit, not inferred. Start from the field list in railiance-clock's review.
Done 2026-09-27. Drafted as
canon/standards/playbook-capability-contract_v0.2.md (status proposed,
supersedes v0.1, which stays accepted and normative until this is
accepted). It adds an "Execution Attribution Receipt (proposed)" section
with every field above, explicit non-goals (no fourth IAM principal type,
not a decision record, not a substitute for responsibility claims), and the
never-embed-credentials / no-inferred-attribution rules. Emission, custody,
schema, and validator are explicitly left to T02.
Agree the evidence holder and schema with audit-core and Railiance
id: NK-WP-0040-T02
status: wait
priority: medium
state_hub_task_id: "963120c1-7c72-5806-942b-6f49e4c66e54"
audit-core holds evidence (layer model §3.3, Evidence role). Railiance
executes and emits. Agree who emits, who holds and how the receipt is
validated. Add a schema under canon/schemas/ and a validator beside the
existing playbook-capability tooling.
Waiting 2026-09-27. Routed to audit-core (evidence-holder/schema
agreement) and Railiance (emitter confirmation) via State Hub messages
48eb1101-a577-40c0-bbaa-39df02198155 and
4f1c67bc-8de2-483f-bcac-dbdf107ce95a. NetKingdom adds the schema and
validator once both reply; nothing here can be finished unilaterally
without pre-empting their agreement.