coulomb/policy-nexus
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: publish Risk Nexus findings and methods
All checks were successful
Build and publish policy-nexus image / build-and-push (push) Successful in 1m10s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663
This commit is contained in:
tegwick 2026-09-01 01:56:46 +02:00
parent 4c8a7b9666
commit c1b60f322e
70 changed files with 3888 additions and 198 deletions
Download patch file Download diff file Expand all files Collapse all files

215
build/publication-manifest.json
View file

@ -13,7 +13,7 @@
"source_digest": "27d6878c68310619877de516000d9af78d5456a92572a709884ed052d765b876",
"source_path": "canon/standards/tenancy-posture_v0.1.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "proposed",
"title": "NetKingdom Tenancy Posture v0.1"
},
@ -30,7 +30,7 @@
"source_digest": "106cb0c99f73983199c9f1d8491143aa2a2eb41ee450a02ec7968d3763f30399",
"source_path": "canon/standards/autonomy-lanes_v0.1.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "accepted",
"title": "Autonomy Lanes (Fleet) v0.1"
},
@ -47,7 +47,7 @@
"source_digest": "6dfc1d7b2b82ab18228a84660c1c7dff607aad1d9da37ac12084cdd2ab8ae112",
"source_path": "canon/standards/contribution-convention_v0.1.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "accepted",
"title": "Contribution Convention v0.1"
},
@ -64,7 +64,7 @@
"source_digest": "61889b2f18a82a08b66ef90d758efe5c028a4f52aced1721a23e69c6f24a8224",
"source_path": "canon/standards/project-repository-flavor_v0.1.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "accepted",
"title": "Project Repository Flavor (prj-) v0.1"
},
@ -81,7 +81,7 @@
"source_digest": "1a40de294be332ee713cdaab532a32a83718f3952c339fbff835ecee899a8dbc",
"source_path": "canon/standards/work-record-types_v0.1.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "accepted",
"title": "Work Record Types & Identity (Fleet) v0.1"
},
@ -98,7 +98,7 @@
"source_digest": "199812632ac342ca3231498e545e3701e10c191ca144035b36a23c1a0b717712",
"source_path": "canon/standards/workplan-terminology-fleet_v0.1.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "accepted",
"title": "Workplan Terminology (Fleet) v0.1"
},
@ -115,7 +115,7 @@
"source_digest": "3b4f93acdedc6f6d1a1c737c3327d9d55061506c5a879be09e6b0a2ea7f5f9bc",
"source_path": "canon/architecture/coulomb-estate_v0.1.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "proposed",
"title": "Coulomb estate architecture"
},
@ -149,7 +149,7 @@
"source_digest": "b9f89f706a801d54961fc67d725ca433b7c3b6a083c54793de6e8b60d1dd42a8",
"source_path": "docs/architecture/net-kingdom_v0.1.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "proposed",
"title": "NetKingdom architecture"
},
@ -166,7 +166,7 @@
"source_digest": "e7104b2182612efe90c9a12168757506402490229814d454e94917ae62d2bfac",
"source_path": "docs/architecture/state-hub_v0.1.md",
"source_repo": "state-hub",
"source_revision": "0e35f84ad5f2f9397d76ffacb99f9973544f08ac",
"source_revision": "803bb95e1d071f188f4202d53a235f8721a8ecdc",
"status": "proposed",
"title": "State Hub architecture"
},
@ -183,7 +183,7 @@
"source_digest": "179cbb86bca95f71f46f51ca1971ff1c274eed7d900adf0672b537d4bcc5b480",
"source_path": "docs/architecture/policy-nexus_v0.1.md",
"source_repo": "policy-nexus",
"source_revision": "885c6bb1cb805b64cbcfa99dd2c5817f6d4a1373",
"source_revision": "4c8a7b966600976aac595e8f49f3ef38929ccd20",
"status": "proposed",
"title": "Policy Nexus architecture"
},
@ -200,7 +200,7 @@
"source_digest": "a28668fb4b8b6c5ec8c94baac000061276d85ef1849ec7ab8d132b913dbfe3be",
"source_path": "docs/adr/ADR-0001-addressing-and-permanence.md",
"source_repo": "policy-nexus",
"source_revision": "885c6bb1cb805b64cbcfa99dd2c5817f6d4a1373",
"source_revision": "4c8a7b966600976aac595e8f49f3ef38929ccd20",
"status": "accepted",
"title": "Policy addressing and permanence"
},
@ -438,7 +438,7 @@
"source_digest": "7df0bb364276e382cbee9383e7e67d399b0ac1b0353246e0ab323e629e732a6d",
"source_path": "docs/adr/ADR-0001-catalog-is-a-pointer-layer.md",
"source_repo": "ops-warden",
"source_revision": "4e267179db741b27a3e62f81f753cd9752c97412",
"source_revision": "8afcc9c32170d76f6d5d02ea153967ed5c6fc4d5",
"status": "accepted",
"title": "ADR-0001 \u2014 The routing catalog is a pointer layer, never a second copy"
},
@ -455,7 +455,7 @@
"source_digest": "7dcc31732d774ddf2c98636b69ee12e2d74034836ed0def81b7e06461309b53a",
"source_path": "docs/adr/ADR-0002-conduit-not-broker.md",
"source_repo": "ops-warden",
"source_revision": "4e267179db741b27a3e62f81f753cd9752c97412",
"source_revision": "8afcc9c32170d76f6d5d02ea153967ed5c6fc4d5",
"status": "accepted",
"title": "ADR-0002 \u2014 ops-warden is a transparent conduit, never a secret broker"
},
@ -472,7 +472,7 @@
"source_digest": "45b47c02afa575fbfe5be980e426c331a1d99bb9cd9c7a8de80bf8e319469f81",
"source_path": "docs/adr/ADR-0003-cover-gaps-never-silently-own-them.md",
"source_repo": "ops-warden",
"source_revision": "4e267179db741b27a3e62f81f753cd9752c97412",
"source_revision": "8afcc9c32170d76f6d5d02ea153967ed5c6fc4d5",
"status": "accepted",
"title": "ADR-0003 \u2014 Cover gaps, but never silently own them"
},
@ -489,7 +489,7 @@
"source_digest": "5db38dcb754af1ba639f4ceca056df842bc7b91fa48dd8bad21611aee29f682d",
"source_path": "docs/adr/ADR-0004-agent-read-boundary-on-high-risk-lanes.md",
"source_repo": "ops-warden",
"source_revision": "4e267179db741b27a3e62f81f753cd9752c97412",
"source_revision": "8afcc9c32170d76f6d5d02ea153967ed5c6fc4d5",
"status": "accepted",
"title": "ADR-0004 \u2014 High-risk lanes refuse raw value streaming to agent sessions"
},
@ -506,7 +506,7 @@
"source_digest": "31eafe4d8d9362a3446739d63c3af83fd9138cfdc6ad120086312a67dc0d27d0",
"source_path": "docs/adr/ADR-0005-implement-narrowly-route-broadly.md",
"source_repo": "ops-warden",
"source_revision": "4e267179db741b27a3e62f81f753cd9752c97412",
"source_revision": "8afcc9c32170d76f6d5d02ea153967ed5c6fc4d5",
"status": "accepted",
"title": "ADR-0005 \u2014 Implement one lane narrowly, route everything else"
},
@ -523,7 +523,7 @@
"source_digest": "183023ee57bae9c29e726fec5ee0361633fe3a2b182436a57869ae4b2a27af24",
"source_path": "canon/architecture/adr-001-workplans-as-repo-artefacts.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "accepted",
"title": "Workplans and Work Items Are Repository Artefacts"
},
@ -540,7 +540,7 @@
"source_digest": "6aef66cd5cf71a48f5b4e14401dc19a755e2b182445b272d5952df0eb0dea8ec",
"source_path": "canon/architecture/adr-002-custodian-agent-runtime-design.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "accepted",
"title": "Custodian Agent Runtime \u2014 v0.1 Bootstrap Design"
},
@ -557,7 +557,7 @@
"source_digest": "fcb49719e2b85b9120c0bd5bebd5e82748ca713f16b44951c028b60205514e2b",
"source_path": "canon/architecture/adr-003-materialized-derived-state.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "accepted",
"title": "Materialized Derived State with Fingerprint Invalidation for Repo-Sourced Data"
},
@ -574,7 +574,7 @@
"source_digest": "3b68adfa6ab329e73f857cf691dc405136d2d66a0135e2c37c236aabe4659557",
"source_path": "canon/architecture/adr-004-connectivity-first-network-posture.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "accepted",
"title": "Connectivity-First Network Posture for Custodian Infrastructure"
},
@ -591,7 +591,7 @@
"source_digest": "13195a721d0e579715f5f39ca6f72b5e49c583611e6ca089e6d4618708ae917f",
"source_path": "canon/architecture/adr-005-cross-repo-workplans-project-repos.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "accepted",
"title": "Cross-Repo Workplans Live in Dedicated Project Repos"
},
@ -608,7 +608,7 @@
"source_digest": "a454df0e1d227f99ebb36c4abd45c76cc12579086d34f0c0ccfccfd7f4790823",
"source_path": "canon/architecture/adr-006-canon-federation-concept-ownership.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "accepted",
"title": "Canon Federation and Concept Ownership Across InfoTech and Commerce"
},
@ -625,7 +625,7 @@
"source_digest": "1169f0c1f485a2bb7241a8f64f3167c060c04f83341b12586fd9be5c2b3693f8",
"source_path": "canon/architecture/adr-007-workplan-identity-and-repo-worker-topology.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "accepted",
"title": "Workplan Identity Uniqueness, Single Registrar, and Repo Worker Topology"
},
@ -642,7 +642,7 @@
"source_digest": "5979da20799118259fc19246f51e8cc8f2c0c1be3d414318bd51d5a27d9ad565",
"source_path": "canon/architecture/adr-010-hub-authority-and-local-cache-model.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "proposed",
"title": "Hub Authority, Local Cache, and the Two Kinds of Hub Data"
},
@ -659,7 +659,7 @@
"source_digest": "f94f429c72f6cfd01ee83f1e5689d2d10ae52d7588d7cbd3ca40aca7eef46fb0",
"source_path": "canon/architecture/adr-011-federated-namespaces-and-reconciliation-limits.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "proposed",
"title": "Federated Namespaces: Four Planes, Declared Posture, and the Limits of Reconciliation"
},
@ -676,7 +676,7 @@
"source_digest": "63697581401b53a8437835c2bb8b40f8054cc40d0bc7a2972f83a4a10377f6ba",
"source_path": "docs/adr/ADR-0001-s3-platform-service-boundary.md",
"source_repo": "railiance-platform",
"source_revision": "e5f3497337575e1fd85fe2bfde5b2183c690d94e",
"source_revision": "62423fd0925d75f5a2b27034044dc1080823d341",
"status": "accepted",
"title": "ADR-0001 \u2014 S3 owns platform services, not the substrate beneath them"
},
@ -693,7 +693,7 @@
"source_digest": "cfc0ad202c2eeeefd963127ff1defa127c715c001ecc684ab8759733bd8fb9f8",
"source_path": "docs/adr/ADR-0002-placement-policy-ownership.md",
"source_repo": "railiance-platform",
"source_revision": "e5f3497337575e1fd85fe2bfde5b2183c690d94e",
"source_revision": "62423fd0925d75f5a2b27034044dc1080823d341",
"status": "proposed",
"title": "ADR-0002 \u2014 S3 owns the placement rule; the package repo owns the number"
},
@ -710,7 +710,7 @@
"source_digest": "9b12ab6aa0e6f9eba03465782c35d6ff4683b682191599e38f4f9614cde9fa1b",
"source_path": "docs/adr/ADR-0003-decisions-live-in-the-repo.md",
"source_repo": "railiance-platform",
"source_revision": "e5f3497337575e1fd85fe2bfde5b2183c690d94e",
"source_revision": "62423fd0925d75f5a2b27034044dc1080823d341",
"status": "accepted",
"title": "ADR-0003 \u2014 Decisions that bind others live in docs/adr, not only in the State Hub"
},
@ -727,7 +727,7 @@
"source_digest": "6c47b596ea145fa197c9665081c84902482d90f5bb94d185c1223af65279be1d",
"source_path": "canon/standards/iam-profile_v0.3.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "accepted",
"title": "NetKingdom IAM Profile v0.3"
},
@ -744,7 +744,7 @@
"source_digest": "e92a43649bb6e14e53ec62ecc819405bf3a44bda9557487f7177402f107bbd13",
"source_path": "docs/adr/ADR-0006-recursive-multi-tenant-identity-authorization.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "accepted",
"title": "Recursive Multi-Tenant Identity and Authorization Architecture"
},
@ -761,7 +761,7 @@
"source_digest": "b4fcff8448f07aca1fcb6908618bdb19f6c0e7dce25d4c5c8b85eec2f175233b",
"source_path": "docs/adr/ADR-0007-security-orchestration-boundary.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "accepted",
"title": "Security Orchestration Boundary"
},
@ -778,7 +778,7 @@
"source_digest": "f47276f4953f62b783397ee7fb1d3693da060103247e425a9a5b40d019fb4272",
"source_path": "docs/adr/ADR-0008-object-storage-sts-credential-vending.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "accepted",
"title": "Object Storage STS Credential Vending Boundary"
},
@ -795,7 +795,7 @@
"source_digest": "b7c4f6a13f2f5add08bd03cb39c4f18ca25b202747dde883a309d1b3eaa1f571",
"source_path": "docs/adr/ADR-0010-orchestration-vs-dependency-self-coherent-intent.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "accepted",
"title": "Orchestration vs Dependency, and Self-Coherent Intent"
},
@ -812,7 +812,7 @@
"source_digest": "b5c7fd1e78026063b4a2ca4017202512d4f94ab5e12dc8498a34d04d3a48c7a9",
"source_path": "docs/adr/ADR-0011-iam-profile-ownership-and-version-governance.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "accepted",
"title": "NetKingdom IAM Profile Ownership And Version Governance"
},
@ -829,7 +829,7 @@
"source_digest": "e269fabfc376f97f2a03ea66e34059d54016a445a7f30b351a6774b65c96c2ee",
"source_path": "docs/adr/ADR-0012-playbook-capability-contract-ownership.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "accepted",
"title": "Playbook Capability Contract Ownership"
},
@ -846,7 +846,7 @@
"source_digest": "3a6030a8958176a902942ffd29154104ba3441a09d06edf3deaeadc7291ee0d4",
"source_path": "docs/adr/ADR-0013-tenant-onboarding-grouping-taxonomy.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "accepted",
"title": "Tenant Onboarding Grouping Taxonomy"
},
@ -863,7 +863,7 @@
"source_digest": "843f7a65f0fc145d08a73e364bc9a1dee0f7b8af934abf1584ee39dffa903ee0",
"source_path": "docs/adr/ADR-0014-tenant-capability-roles-and-tenant-engine-ownership.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "accepted",
"title": "Tenant Capability Roles, Carrying Mechanism, and Tenant-Engine Ownership"
},
@ -880,7 +880,7 @@
"source_digest": "2000985ef211aeedd3656e15cedb289e655526c2dcc4a161a64ffc27f0289db1",
"source_path": "docs/adr/ADR-0015-netkingdom-railiance-workload-packaging-and-relational-platform.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "accepted",
"title": "NetKingdom Railiance Workload Packaging and Relational Platform"
},
@ -948,7 +948,7 @@
"source_digest": "868f953688988b11ce48f4141833bbca51abdb4e86d5b495a8a905002830d7b0",
"source_path": "docs/adr/ADR-0007-build-stage-stops-at-credential-disclosure.md",
"source_repo": "ops-warden",
"source_revision": "4e267179db741b27a3e62f81f753cd9752c97412",
"source_revision": "8afcc9c32170d76f6d5d02ea153967ed5c6fc4d5",
"status": "accepted",
"title": "ADR-0007 \u2014 Build-stage permissiveness stops at credential disclosure"
},
@ -965,7 +965,7 @@
"source_digest": "2e22863ba592802cceb40b32d395168b42ace747741f5188307505eaa89ff764",
"source_path": "docs/adr/ADR-0008-grade-the-path-not-the-field.md",
"source_repo": "ops-warden",
"source_revision": "4e267179db741b27a3e62f81f753cd9752c97412",
"source_revision": "8afcc9c32170d76f6d5d02ea153967ed5c6fc4d5",
"status": "accepted",
"title": "ADR-0008 \u2014 A lane's risk grade covers every field its path discloses"
},
@ -982,7 +982,7 @@
"source_digest": "73fff22177b4bec2c56ff737e06e4225eb02d39669be3ea1b723906245f878b8",
"source_path": "docs/adr/ADR-0009-adopt-security-zones-as-a-consumer.md",
"source_repo": "ops-warden",
"source_revision": "4e267179db741b27a3e62f81f753cd9752c97412",
"source_revision": "8afcc9c32170d76f6d5d02ea153967ed5c6fc4d5",
"status": "accepted",
"title": "ADR-0009 \u2014 Adopt security-zones v0.1 as a consumer"
},
@ -999,7 +999,7 @@
"source_digest": "064455bcb2870abf8e243f5a8c154e50bfc1c537cfba7996a792f9e314dd78ae",
"source_path": "docs/adr/ADR-0010-ops-warden-is-staff.md",
"source_repo": "ops-warden",
"source_revision": "4e267179db741b27a3e62f81f753cd9752c97412",
"source_revision": "8afcc9c32170d76f6d5d02ea153967ed5c6fc4d5",
"status": "accepted",
"title": "ADR-0010 \u2014 ops-warden is Staff: lanes, not rules, and one declared engine gap"
},
@ -1033,7 +1033,7 @@
"source_digest": "b5e8582459f546ae789ad5fd62f458454aa19997b520e32b6b9f792d6af55987",
"source_path": "canon/architecture/adr-012-projection-source-and-preliminary-overlay.md",
"source_repo": "the-custodian",
"source_revision": "4b951be3947f9457cc091a7d359d9232646b4c93",
"source_revision": "f9435cd605cc5b3cb0f2e957ce6287d9f3129aac",
"status": "accepted",
"title": "What the Hub Projects: Forge as Projection Source, Working Copies as Preliminary Overlay"
},
@ -1050,7 +1050,7 @@
"source_digest": "dd2628b9f0c2a662ac44af22657d91918da228f307ebc7ceb09fc856162985db",
"source_path": "canon/standards/posture-feedback_v0.1.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "proposed",
"title": "NetKingdom Posture Feedback v0.1"
},
@ -1067,7 +1067,7 @@
"source_digest": "8155e7b123be1e84377d8278525b1bad8961007b6bb8ff012dd01ba24ff8065b",
"source_path": "canon/standards/security-layer-model_v0.7.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "accepted",
"title": "NetKingdom Security Layer Model v0.7"
},
@ -1084,7 +1084,7 @@
"source_digest": "17b715d78e04470a0f83b8bc8c7313ab16e13e9e741d5ec445172d9008fce937",
"source_path": "canon/standards/security-scenario-composition_v0.1.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "proposed",
"title": "NetKingdom Security Scenario Composition v0.1"
},
@ -1101,11 +1101,130 @@
"source_digest": "32e71e9c0d6946bb14099eb66193822da26f199de0e11d8488464207f3bd9906",
"source_path": "canon/standards/security-zones_v0.1.md",
"source_repo": "net-kingdom",
"source_revision": "d4e57e63126d2cca1d381c025170e4b1f678c3f3",
"source_revision": "9781102e2971d762ae42fdd5085a6647afd1cd66",
"status": "proposed",
"title": "NetKingdom Security Zones v0.1"
},
{
"canonical_path": "findings/flex-auth-unauthenticated-check/v1/index.html",
"currency": "current",
"id": "RISK-F-0001",
"last_reviewed": "2026-08-20",
"lifecycle": "active",
"owner": "risk-nexus",
"review_due": "2027-02-20",
"revision": "published-1",
"revision_path": "findings/flex-auth-unauthenticated-check/v1/revisions/published-1/index.html",
"source_digest": "b2d1d0c526d5c9b5729b8353877bb9f29096667145f1498cfde73c9711206fda",
"source_path": "findings/RISK-F-0001-flex-auth-unauthenticated-check.md",
"source_repo": "risk-nexus",
"source_revision": "c5517c754bd84b0ebf47878ba0f26df0ecb3b4a4",
"status": "fixed",
"title": "flex-auth /v1/check authenticates no caller"
},
{
"canonical_path": "findings/audit-retention-legal-basis/v1/index.html",
"currency": "current",
"id": "RISK-F-0008",
"last_reviewed": "2026-08-20",
"lifecycle": "active",
"owner": "risk-nexus",
"review_due": "2027-02-20",
"revision": "published-1",
"revision_path": "findings/audit-retention-legal-basis/v1/revisions/published-1/index.html",
"source_digest": "8bf47414a9f958afb57649f087a2617f91a8f2aeaa4f34d04d8fb3a0f453e840",
"source_path": "findings/RISK-F-0008-audit-retention-legal-basis-assumed.md",
"source_repo": "risk-nexus",
"source_revision": "c5517c754bd84b0ebf47878ba0f26df0ecb3b4a4",
"status": "accepted",
"title": "The legal basis for retaining audit facts against an erasure request has been assumed, never established"
},
{
"canonical_path": "methods/risk-severity/v1/index.html",
"currency": "current",
"id": "RISK-METHOD-SEVERITY",
"last_reviewed": "2026-08-20",
"lifecycle": "active",
"owner": "risk-nexus",
"review_due": "2027-02-20",
"revision": "adopted-1",
"revision_path": "methods/risk-severity/v1/revisions/adopted-1/index.html",
"source_digest": "f064c591aeef9425bbfbd5fa2aae659abb0ef83b8586848300077f41dd4ffaab",
"source_path": "docs/method/severity.md",
"source_repo": "risk-nexus",
"source_revision": "c5517c754bd84b0ebf47878ba0f26df0ecb3b4a4",
"status": "adopted",
"title": "Severity: how bad, how likely, and what is not a risk at all"
},
{
"canonical_path": "methods/risk-disclosure/v1/index.html",
"currency": "current",
"id": "RISK-METHOD-DISCLOSURE",
"last_reviewed": "2026-08-20",
"lifecycle": "active",
"owner": "risk-nexus",
"review_due": "2027-02-20",
"revision": "adopted-1",
"revision_path": "methods/risk-disclosure/v1/revisions/adopted-1/index.html",
"source_digest": "bd825a87736c8fb019d4224c3ef4fe3882b8f3028035225b4b8ff8cad62fdb81",
"source_path": "docs/method/disclosure.md",
"source_repo": "risk-nexus",
"source_revision": "c5517c754bd84b0ebf47878ba0f26df0ecb3b4a4",
"status": "adopted",
"title": "Disclosure: publish now, hold, or restrict"
},
{
"canonical_path": "methods/risk-review/v1/index.html",
"currency": "current",
"id": "RISK-METHOD-REVIEW",
"last_reviewed": "2026-08-20",
"lifecycle": "active",
"owner": "risk-nexus",
"review_due": "2027-02-20",
"revision": "adopted-1",
"revision_path": "methods/risk-review/v1/revisions/adopted-1/index.html",
"source_digest": "8f873d105bf6bd711a1a15ebd739b2abe97365b4e854be9d1c82e3ff3b162cfd",
"source_path": "docs/method/review.md",
"source_repo": "risk-nexus",
"source_revision": "c5517c754bd84b0ebf47878ba0f26df0ecb3b4a4",
"status": "adopted",
"title": "Review and expiry: what happens when nobody looks"
},
{
"canonical_path": "methods/risk-verification/v1/index.html",
"currency": "current",
"id": "RISK-METHOD-VERIFICATION",
"last_reviewed": "2026-08-20",
"lifecycle": "active",
"owner": "risk-nexus",
"review_due": "2027-02-20",
"revision": "adopted-1",
"revision_path": "methods/risk-verification/v1/revisions/adopted-1/index.html",
"source_digest": "562b6eb3031ffe35e712c5e11e35aae23ce84a90e0090438dc89513f9685052b",
"source_path": "docs/method/verification.md",
"source_repo": "risk-nexus",
"source_revision": "c5517c754bd84b0ebf47878ba0f26df0ecb3b4a4",
"status": "adopted",
"title": "What this register may verify for itself, and what it must take from owners"
},
{
"canonical_path": "methods/risk-dependencies/v1/index.html",
"currency": "current",
"id": "RISK-METHOD-DEPENDENCIES",
"last_reviewed": "2026-08-20",
"lifecycle": "active",
"owner": "risk-nexus",
"review_due": "2027-02-20",
"revision": "adopted-1",
"revision_path": "methods/risk-dependencies/v1/revisions/adopted-1/index.html",
"source_digest": "a5e7b42043b0bb366add9bbc5f606e134ef5b0454532480203d5d87099296240",
"source_path": "docs/method/dependencies.md",
"source_repo": "risk-nexus",
"source_revision": "c5517c754bd84b0ebf47878ba0f26df0ecb3b4a4",
"status": "adopted",
"title": "Waiting: how this register depends on other people without becoming a queue"
}
],
"generated_as_of": "2026-08-31",
"generated_as_of": "2026-09-01",
"schema_version": 1
}