feat: complete local layer model v0.7 conformance work

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06eaf-3425-7f92-a0c2-bb4aa4faebe4

pep-stance.yaml

@@ -1,6 +1,6 @@
 # ops-warden — PEP unreachable-engine stance map
 #
-# Framework: net-kingdom/canon/standards/security-layer-model_v0.6.md §6.4, §9.3
+# Framework: net-kingdom/canon/standards/security-layer-model_v0.7.md §6.4, §9.3, §9.7
 # Rule of record: docs/adr/ADR-0009
 # Validate: pytest tests/test_layer_conformance.py -k stance
 #
@@ -18,7 +18,7 @@
 
 schema_version: "0.1"
 framework: netkingdom-security-layer-model
-standard_version: "0.6"
+standard_version: "0.7"
 repository: ops-warden
 pep_shape: true
 declared_by: docs/adr/ADR-0009
@@ -67,3 +67,38 @@ input_claim_caching: "registry/flex-auth/production_registry_snapshot.json, rebu
 reconstructability:
   bound: "§9.6 attributive — completeness is not claimed"
   declared_at: wiki/AuditTrail.md
+
+# §9.7.2 — the certificate-verification PEP has no active revocation channel.
+# A previously allowed certificate remains usable until its enforced TTL expires,
+# so the visibility deadline is exactly the maximum issued lifetime per actor type.
+revocation_visibility:
+  boundary: "SSH certificate verification at the target host"
+  mechanism: ttl_expiry
+  revocation_channel: none
+  deadline_hours:
+    adm: 48
+    agt: 24
+    atm: 8
+  note: >-
+    No CRL or KRL distribution exists. Host-side authorization belongs to
+    railiance-infra; shortening or actively recalling this window is a joint
+    design question, not an implied capability of ops-warden.
+
+# §9.6 — signing evidence is attributive, not load-bearing. Measurement as of
+# 2026-09-04 found three signature records across 79 calendar days, concentrated
+# on only two active days (1 event on 2026-06-17; 2 within 40 minutes on
+# 2026-08-22). That bursty operator-driven sample cannot support a useful rate
+# threshold, so cadence is explicitly deferred instead of fabricated.
+emission_cadence:
+  classification: attributive
+  status: deferred
+  measured_as_of: "2026-09-04"
+  observed_window:
+    first: "2026-06-17T23:18:33Z"
+    last: "2026-09-04T21:21:30Z"
+    signature_records: 3
+    active_signature_days: 2
+    daily_counts:
+      "2026-06-17": 1
+      "2026-08-22": 2
+  reason: "operator-driven issuance is too sparse and bursty for a meaningful rate threshold"