- A11 r2 approved; A12 r3 approved by operator decision (supersedes the 2026-09-21 deferral of A12 r2). Flip notice will name eight checkers. - railiance-clock review: identity vocabulary confirmed without a new principal type; Tooling now, PIP only once a sample API is consumed; execution-attribution gap assigned to NK-WP-0040 (proposed). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 299762@bnt-lap001 Assistant-Session: d3d3cea1-869c-44f1-be2a-3d6d3550e72e
23 lines
1.8 KiB
Markdown
23 lines
1.8 KiB
Markdown
# §11 amendments A11 r2 and A12 r3: net-kingdom's positions (2026-09-23)
|
|
|
|
Recorded by net-kingdom as publication owner of
|
|
`canon/standards/security-layer-model_v0.8.md`, answering gate-house message
|
|
`987e52d8` (GH-DEC-2026-021, amendment set v0.3 at gate-house `39d9287`).
|
|
These are positions only: no canon file was edited, nothing was applied, and
|
|
v0.8 was not flipped. The v0.8 hold (GH-DEC-2026-019) and the conditions in
|
|
`2026-09-21-v08-hold-and-section-11-amendment-positions.md` stand.
|
|
|
|
## Dispositions
|
|
|
|
| # | Disposition | Note |
|
|
| --- | --- | --- |
|
|
| A11 r2 | approved | The added sentence admits a single-repository run as a third scope. The run must name the repository, state whether it is in §4, and report a voluntary result for a repository outside §4. No other text changed. Assent to A11 as first circulated is not carried over; this is fresh assent to r2. |
|
|
| A12 r3 | **approved** (operator decision, 2026-09-23) | A version is reached only when it is carried as a pin, and a prose citation of a prior revision is provenance. This closes the ambiguity r2 left open without widening the rule. The narrow reading benefits gate-house; gate-house disclosed that and did not approve it itself, and the operator approved it. net-kingdom's own declaration (`layer: Taxonomy`, no version in any frontmatter key or value) satisfies r2 and r3 alike. This supersedes the 2026-09-21 deferral of A12 r2. |
|
|
|
|
## Flip notice (GH-WP-0004 T10/T11)
|
|
|
|
Noted: re-pointing the checkers' `VALIDATED_AGAINST` to v0.8 is a post-flip
|
|
closing condition (GH-WP-0004 T11), not a precondition of the flip. When
|
|
net-kingdom runs the acceptance flip, the notice will name all eight checkers:
|
|
`kings-guard`, `user-engine`, `zone-engine`, `secrets-engine`,
|
|
`maturity-engine`, `ops-warden`, `tenant-engine` and `flex-auth`.
|