review: disposition discovered policy sources without publication admission
Some checks failed
Build and publish policy-nexus image / build-and-push (push) Failing after 1m35s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181
This commit is contained in:
tegwick 2026-10-19 14:29:29 +02:00
parent 28c6da022f
commit 8af92bf648
3 changed files with 42 additions and 1 deletions

View file

@ -39,7 +39,8 @@ content. Source owners retain control of publication disposition.
The build-mode guardrail implementation is available as source; public release
acceptance remains tracked in `PNEX-WP-0006`. That record requires founder batch
publication disposition and resolution of the source inventory gate. Source
publication disposition. The two discovered source rows were reviewed on 2026-10-19
and retained as metadata-pending without changing publication admission. Source
availability and passing local checks do not establish live publication.

View file

@ -355,6 +355,12 @@
"source_path": "canon/standards/security-layer-model_v0.8.md",
"source_repo": "net-kingdom"
},
{
"disposition": "metadata-pending",
"reason": "Reviewed 2026-10-19: proposed-1 source owned by gate-house with net-kingdom publication ownership; no explicit publication.json admission. Defer publication addressing to the publication owner; this inventory review neither ratifies v0.9 nor changes the published predecessors.",
"source_path": "canon/standards/security-layer-model_v0.9.md",
"source_repo": "net-kingdom"
},
{
"disposition": "published",
"reason": "Published through an explicit publication.json document entry.",
@ -685,6 +691,12 @@
"source_path": "docs/adr/ADR-0005-demand-gated-stateful-services.md",
"source_repo": "railiance-platform"
},
{
"disposition": "metadata-pending",
"reason": "Reviewed 2026-10-19: accepted RPLAT-ADR-0006 has owner/revision/review metadata, but no explicit publication.json admission or publication address. Retain pending publication-owner request and addressing; acceptance of the source ADR is not public publication consent.",
"source_path": "docs/adr/ADR-0006-playwright-consumer-group.md",
"source_repo": "railiance-platform"
},
{
"disposition": "excluded",
"reason": "Directory index, not an architecture decision record.",

View file

@ -95,3 +95,31 @@ review reports both additions and no removals. Neither row was auto-admitted;
no authored publication/config/inventory input changed. Both T01 and T02 remain
wait for those explicit owner dispositions and the existing founder publication
batch. No public release, credential access or runtime mutation was performed.
## Delegated inventory review — 2026-10-19
The publication-inventory reviewer has explicitly recorded both discovered rows
as `metadata-pending`, following the existing inventory schema and publication
contract. Security-layer-model v0.9 remains `proposed-1` with gate-house content
ownership and NetKingdom publication ownership; no ratification or publication
admission is inferred. RPLAT-ADR-0006 is accepted with complete review metadata,
but lacks an explicit publication entry/address. Its pending reason is addressing
and publication-owner request, not missing metadata or a fabricated internal-only
classification. Neither source is excluded from future consideration.
These are local inventory review decisions under the delegated owner-review task,
not source-owner consent to publication. `publication.json` and source canon remain
unchanged. The earlier two-unreviewed-additions blocker is resolved; it is retained
above as historical evidence. T01/T02 still wait for the founder daily-batch decision:
approve or defer publication of the existing build-mode standard entry and its
canon-derived JSON artifact, with the expected addresses, verification and rollback
already specified above. This decision does not request admission of either newly
inventoried document. Release preparation must still pass current source provenance,
currency and immutable-artifact checks; local validation is not live release proof.
Local validation: `make check` passed all 65 tests and source-audit (186 sources,
74 publication entries, 94 metadata-pending); `make release-build` passed local
rendering, immutable release verification and currency for all 74 entries.
Source-set digest: `a70bafe26e45d262d062764b955ff9f98ae1e6780c3eee0ef52af6c8ddf00be2`.
These are local candidate checks, not a served-site or scheduled-CI receipt.