net-kingdom/history/2026-09-23-section-11-amendments-a11r2-a12r3-positions.md
tegwick a7a4db5a89
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 4s
Record A11 r2/A12 r3 assent and the railiance-clock owner review
- A11 r2 approved; A12 r3 approved by operator decision (supersedes the
  2026-09-21 deferral of A12 r2). Flip notice will name eight checkers.
- railiance-clock review: identity vocabulary confirmed without a new
  principal type; Tooling now, PIP only once a sample API is consumed;
  execution-attribution gap assigned to NK-WP-0040 (proposed).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 299762@bnt-lap001
Assistant-Session: d3d3cea1-869c-44f1-be2a-3d6d3550e72e
2026-09-23 20:08:46 +02:00

1.8 KiB

§11 amendments A11 r2 and A12 r3: net-kingdom's positions (2026-09-23)

Recorded by net-kingdom as publication owner of canon/standards/security-layer-model_v0.8.md, answering gate-house message 987e52d8 (GH-DEC-2026-021, amendment set v0.3 at gate-house 39d9287). These are positions only: no canon file was edited, nothing was applied, and v0.8 was not flipped. The v0.8 hold (GH-DEC-2026-019) and the conditions in 2026-09-21-v08-hold-and-section-11-amendment-positions.md stand.

Dispositions

# Disposition Note
A11 r2 approved The added sentence admits a single-repository run as a third scope. The run must name the repository, state whether it is in §4, and report a voluntary result for a repository outside §4. No other text changed. Assent to A11 as first circulated is not carried over; this is fresh assent to r2.
A12 r3 approved (operator decision, 2026-09-23) A version is reached only when it is carried as a pin, and a prose citation of a prior revision is provenance. This closes the ambiguity r2 left open without widening the rule. The narrow reading benefits gate-house; gate-house disclosed that and did not approve it itself, and the operator approved it. net-kingdom's own declaration (layer: Taxonomy, no version in any frontmatter key or value) satisfies r2 and r3 alike. This supersedes the 2026-09-21 deferral of A12 r2.

Flip notice (GH-WP-0004 T10/T11)

Noted: re-pointing the checkers' VALIDATED_AGAINST to v0.8 is a post-flip closing condition (GH-WP-0004 T11), not a precondition of the flip. When net-kingdom runs the acceptance flip, the notice will name all eight checkers: kings-guard, user-engine, zone-engine, secrets-engine, maturity-engine, ops-warden, tenant-engine and flex-auth.