net-kingdom/history/2026-09-23-section-11-amendments-a11r2-a12r3-positions.md
tegwick a7a4db5a89
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 4s
Record A11 r2/A12 r3 assent and the railiance-clock owner review
- A11 r2 approved; A12 r3 approved by operator decision (supersedes the
  2026-09-21 deferral of A12 r2). Flip notice will name eight checkers.
- railiance-clock review: identity vocabulary confirmed without a new
  principal type; Tooling now, PIP only once a sample API is consumed;
  execution-attribution gap assigned to NK-WP-0040 (proposed).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 299762@bnt-lap001
Assistant-Session: d3d3cea1-869c-44f1-be2a-3d6d3550e72e
2026-09-23 20:08:46 +02:00

23 lines
1.8 KiB
Markdown

# §11 amendments A11 r2 and A12 r3: net-kingdom's positions (2026-09-23)
Recorded by net-kingdom as publication owner of
`canon/standards/security-layer-model_v0.8.md`, answering gate-house message
`987e52d8` (GH-DEC-2026-021, amendment set v0.3 at gate-house `39d9287`).
These are positions only: no canon file was edited, nothing was applied, and
v0.8 was not flipped. The v0.8 hold (GH-DEC-2026-019) and the conditions in
`2026-09-21-v08-hold-and-section-11-amendment-positions.md` stand.
## Dispositions
| # | Disposition | Note |
| --- | --- | --- |
| A11 r2 | approved | The added sentence admits a single-repository run as a third scope. The run must name the repository, state whether it is in §4, and report a voluntary result for a repository outside §4. No other text changed. Assent to A11 as first circulated is not carried over; this is fresh assent to r2. |
| A12 r3 | **approved** (operator decision, 2026-09-23) | A version is reached only when it is carried as a pin, and a prose citation of a prior revision is provenance. This closes the ambiguity r2 left open without widening the rule. The narrow reading benefits gate-house; gate-house disclosed that and did not approve it itself, and the operator approved it. net-kingdom's own declaration (`layer: Taxonomy`, no version in any frontmatter key or value) satisfies r2 and r3 alike. This supersedes the 2026-09-21 deferral of A12 r2. |
## Flip notice (GH-WP-0004 T10/T11)
Noted: re-pointing the checkers' `VALIDATED_AGAINST` to v0.8 is a post-flip
closing condition (GH-WP-0004 T11), not a precondition of the flip. When
net-kingdom runs the acceptance flip, the notice will name all eight checkers:
`kings-guard`, `user-engine`, `zone-engine`, `secrets-engine`,
`maturity-engine`, `ops-warden`, `tenant-engine` and `flex-auth`.