{
  "owner": "ops-warden",
  "accepted_standard_sha256": "3d8298560069ef471fba28d2b1245fb2309328f231dad1a667cdf0ce5a5a7c8b",
  "accepted_source": "net-kingdom/canon/standards/security-layer-model_v0.8.md",
  "acceptance_receipt": "net-kingdom/docs/security-layer-v0.8-acceptance.md",
  "tests": {
    "layer_conformance_passed": 31,
    "source": "staged modified scripts/tests + read-only current source support",
    "limitations": "mechanical declared scope only, not complete estate/runtime conformance",
    "routing": {
      "full_suite_passed": 99,
      "full_suite_failed": 1,
      "failure": "staging fixture missing unchanged wiki links; not product regression",
      "focused_after_fixture_repair_passed": 2,
      "focused_cases": [
        "every_wiki_ref_anchor_resolves",
        "route_find_layer_declaration_resolves_to_reference_playbook"
      ],
      "environment": "WARDEN_MEMORY=0 and explicit staged WARDEN_ROUTING_CATALOG; no installed catalog/memory mutation"
    }
  },
  "checker_runs": [
    {
      "argv": [],
      "returncode": 0,
      "stdout": "validated against: net-kingdom/canon/standards/security-layer-model_v0.8.md (accepted; sha256:3d8298560069ef471fba28d2b1245fb2309328f231dad1a667cdf0ce5a5a7c8b)\nscope: single repository ops-warden (catalogued in \u00a74); INTENT.md frontmatter, layer.yaml, src/warden/**/*.py\nPASS \u2014 4 module(s) with Tooling contact, all declared; validated against net-kingdom/canon/standards/security-layer-model_v0.8.md (accepted; sha256:3d8298560069ef471fba28d2b1245fb2309328f231dad1a667cdf0ce5a5a7c8b)\n",
      "stderr": ""
    },
    {
      "argv": [
        "--report"
      ],
      "returncode": 0,
      "stdout": "validated against: net-kingdom/canon/standards/security-layer-model_v0.8.md (accepted; sha256:3d8298560069ef471fba28d2b1245fb2309328f231dad1a667cdf0ce5a5a7c8b)\nscope: single repository ops-warden (catalogued in \u00a74); INTENT.md frontmatter, layer.yaml, src/warden/**/*.py\nops-warden \u2014 layer: Staff  (declared in INTENT.md; \u00a711 governing form)\n  layer.yaml: derived from INTENT.md, layer: staff\ndeclared by docs/adr/ADR-0010\n\n  \u00a75.3  ssh-ca-signing-write         src/warden/vault.py  -> secrets-engine  review 2026-11-28\n  \u00a75.3  desk-paste-once-provision    src/warden/desk.py  -> secrets-engine  review 2026-11-28\n  \u00a75.1  taint-metadata-read          src/warden/taint.py\n  \u00a75.2  access-proxy-conduit         src/warden/proxy.py\n  \u00a75.2  caller-identity-token        src/warden/caller_identity.py\n\n2 declared gap(s) \u2014 tracked non-conformance, not conformance (\u00a711).\n\nPASS \u2014 every direct Tooling contact maps to a declared shape; validated against net-kingdom/canon/standards/security-layer-model_v0.8.md (accepted; sha256:3d8298560069ef471fba28d2b1245fb2309328f231dad1a667cdf0ce5a5a7c8b)\n",
      "stderr": ""
    }
  ],
  "meaningful_regressions": {
    "unicode_token_original_fold": "staff",
    "original_accepted_non_ascii_token": true
  },
  "source_changes": [
    {
      "repo": "ops-warden",
      "path": "scripts/check_layer_conformance.py",
      "staged_path": "/tmp/layer-migration-stage/ops-warden/scripts/check_layer_conformance.py",
      "original_sha256": "064be430b64072fd1620e6adc19b4e24a1790c9df06144a9670cd262faf66e8a",
      "staged_sha256": "7262fae9fae7ed454c0765cc6859e83a74e59ef6eade849991e0b8ab9c66757b"
    },
    {
      "repo": "ops-warden",
      "path": "tests/test_layer_conformance.py",
      "staged_path": "/tmp/layer-migration-stage/ops-warden/tests/test_layer_conformance.py",
      "original_sha256": "3d39b0a24a65263b2be9f18add2b9c69e12b7926716d610e8200d5c788c1b696",
      "staged_sha256": "93e3a8805460c4a6a4fd78734cf4dd85947a46e23d16a0d6898a43e8ec39275d"
    },
    {
      "repo": "ops-warden",
      "path": "INTENT.md",
      "staged_path": "/tmp/layer-migration-stage/ops-warden/INTENT.md",
      "original_sha256": "766c2d44851be7078a031575710843cd7d1278d665e874882c8e90980dcd0704",
      "staged_sha256": "3e9382fefa52ee0970dfac133cc799656e5034760b26dccc1bf9bab65fc538d9"
    },
    {
      "repo": "ops-warden",
      "path": "registry/routing/catalog.yaml",
      "staged_path": "/tmp/layer-migration-stage/ops-warden/registry/routing/catalog.yaml",
      "original_sha256": "32b0093cf5b93025d2aa90397247fef6ccce73cde5f477895a90ad09ddb48643",
      "staged_sha256": "09ee40df21b0ad8cad420be4613afcb1731967f68128631a94f9b96f3f31b318"
    },
    {
      "repo": "ops-warden",
      "path": "tests/test_routing.py",
      "staged_path": "/tmp/layer-migration-stage/ops-warden/tests/test_routing.py",
      "original_sha256": "e449a4e169ccb7021d1bc547c420628b2b618d713915b90cf68d0bcaf5d5430f",
      "staged_sha256": "43998fccf67b1f0d1a6c8bde1a4768a32f8418fb72a8eda5bf321dd96c097d35"
    },
    {
      "repo": "ops-warden",
      "path": "wiki/playbooks/netkingdom-layer-declaration.md",
      "staged_path": "/tmp/layer-migration-stage/ops-warden/wiki/playbooks/netkingdom-layer-declaration.md",
      "original_sha256": "2dbef2235afdc33203fb01582220370051cf6c9eefc7c7d482ff05ebd615fb64",
      "staged_sha256": "6a409a1c474ce8759b01cf5a62e5b95bba297e167a05fd8f8b616abdf6414306"
    }
  ],
  "knowledge_orientation": {
    "package_version": "0.2.6",
    "package_digest": "8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02",
    "start_status": "withheld due changed sources; source reviewed directly"
  },
  "native_runtime_changed": false,
  "pushed": false
}