ops-warden/wiki
tegwick 5b1a508610
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
docs: mark the unknown cell, measure the coverage we asked to publish
gate-house ruled the v0.8 assent round (GH-DEC-2026-011, net-kingdom@64394e9):
ask 1 declined, ask 2 adopted.

Ask 1's refusal is accepted without reservation and the reason is better than
the ask -- a sanctioned transitional fail_open is indistinguishable at runtime
from the stance the rule forbids, and would make the rule optional at the only
moment it costs anything.

Ask 2 gave §13.1 a Coverage column with this repo's figures as its first
entries. Since we asked for the column, we owe it accuracy:
scripts/report_coverage.py measures both populations from the artifacts the
runtime uses (reusing the workload-join build rather than re-deriving it), and
a test asserts pep-stance.yaml's published block equals what it measures.
A hand-counted number in a register that explicitly does not recompute it
decays silently, and a stale figure beside a marked cell is worse than the
blank the other four rows carry.

pep-stance.yaml marks the unknown cell inline as a declared gap -- assent, the
measured reason for not flipping, the declined ask, WARDEN-WP-0040 as route --
and a second test keeps it marked while it is fail_open, failing when it is
flipped. standard_version stays 0.7 because that is what binds; v0.8 is
proposed, so it gains standard_version_reviewed rather than pre-adopting.

Separately, gate-house corrected GH-DEC-2026-008: the claim/decision digest
comparison it originally required is unimplementable and a fail-closed
consumer obeying it would have denied permanently. We had never copied the
wording, so nothing to unwind -- but everything they have sent about this lane
was living in an inbox thread, a bad home for a correction that only matters
when someone finally wires the consume. Now wiki/ApprovalConsumption.md,
leading with "nothing is wired", carrying the corrected target and the
attribution gap that digest matching does not discharge.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013EPuTc18FjU5WFqoSEKH3C

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1276224@bnt-lap001
Assistant-Session: 426ec497-e1c4-4dd3-b417-dfce1ca1dbc3
2026-09-10 08:02:10 +02:00
..
playbooks fix: name the npm KV field, not the env var it becomes 2026-09-09 14:43:44 +02:00
AccessManagementDirective.md Initial Commit 2026-03-28 00:45:43 +00:00
AccessRouting.md Scale the blocker window by lane risk, converging with risk-nexus 2026-08-21 13:29:29 +02:00
ActorInventoryPatterns.md WARDEN-WP-0006: NetKingdom stewardship docs and alignment 2026-06-17 08:22:45 +02:00
ApprovalConsumption.md docs: mark the unknown cell, measure the coverage we asked to publish 2026-09-10 08:02:10 +02:00
AuditTrail.md Review layer model v0.6; publish the PEP stance map §6.4 requires 2026-08-29 10:20:49 +02:00
CertCommandInterface.md Retire CoulombCore references; correct the 16443 diagnosis 2026-08-19 19:31:41 +02:00
CredentialRouting.md Add NetKingdom SSO credential routing lanes 2026-08-23 21:43:12 +02:00
InterHubBootstrapAccessLane.md feat(WP-0012): add inter-hub-bootstrap-ssh catalog entry and align wiki 2026-06-24 12:45:23 +02:00
NetKingdomSecurityMap.md feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
OpenBaoSshEngineChecklist.md WARDEN-WP-0006: NetKingdom stewardship docs and alignment 2026-06-17 08:22:45 +02:00
OperatorAccessAssist.md feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
OpsWardenConfig.md feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
OpsWardenMemory.md Enable implicit phase-memory activation on every warden command. 2026-07-03 00:49:36 +02:00
PolicyGatedSigning.md docs: mark the unknown cell, measure the coverage we asked to publish 2026-09-10 08:02:10 +02:00
WorkloadSecurityPosture.md feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00