policy-nexus/docs/evidence/2026-10-11-runtime-release-verification/published/published-source-provenance-audit.json
tegwick 645d5af213 Record verified published runtime and complete policy history candidate
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 03:01:29 +02:00

513 lines
18 KiB
JSON

[
{
"id": "netkingdom-tenancy-posture",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "canon/standards/tenancy-posture_v0.1.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "canon-autonomy-lanes",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/standards/autonomy-lanes_v0.1.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "canon-contrib-convention",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/standards/contribution-convention_v0.1.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "canon-project-repository-flavor",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/standards/project-repository-flavor_v0.1.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "canon-work-record-types",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/standards/work-record-types_v0.1.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "canon-workplan-terminology-fleet",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/standards/workplan-terminology-fleet_v0.1.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "coulomb-estate-architecture",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/architecture/coulomb-estate_v0.1.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "railiance-architecture",
"source_commit": "078515b5adc7ac742ffad1b20577fcf88400acbb",
"source_path": "docs/architecture/railiance_v0.1.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "net-kingdom-architecture",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "docs/architecture/net-kingdom_v0.1.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "state-hub-architecture",
"source_commit": "cccc27ce44928e579627aa86ccee38ae4fb1ca10",
"source_path": "docs/architecture/state-hub_v0.1.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "policy-nexus-architecture",
"source_commit": "b64a0c52ec1ea8d1efa99dd7f870e580d7c60df8",
"source_path": "docs/architecture/policy-nexus_v0.1.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "policy-nexus-adr-0001",
"source_commit": "b64a0c52ec1ea8d1efa99dd7f870e580d7c60df8",
"source_path": "docs/adr/ADR-0001-addressing-and-permanence.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RMASTER-ADR-0001",
"source_commit": "078515b5adc7ac742ffad1b20577fcf88400acbb",
"source_path": "docs/adr/ADR-0001-repository-prefix-architecture.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RMASTER-ADR-0002",
"source_commit": "078515b5adc7ac742ffad1b20577fcf88400acbb",
"source_path": "docs/adr/ADR-0002-rail-kubernetes-wave-1-boundary.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RMASTER-ADR-0003",
"source_commit": "078515b5adc7ac742ffad1b20577fcf88400acbb",
"source_path": "docs/adr/ADR-0003-rapp-first-wave-selection.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RMASTER-ADR-0004",
"source_commit": "078515b5adc7ac742ffad1b20577fcf88400acbb",
"source_path": "docs/adr/ADR-0004-first-wave-reef-rollout.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RMASTER-ADR-0005",
"source_commit": "078515b5adc7ac742ffad1b20577fcf88400acbb",
"source_path": "docs/adr/ADR-0005-derived-rail-composition.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RMASTER-ADR-0006",
"source_commit": "078515b5adc7ac742ffad1b20577fcf88400acbb",
"source_path": "docs/adr/ADR-0006-reef-production-admission.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RMASTER-ADR-0007",
"source_commit": "078515b5adc7ac742ffad1b20577fcf88400acbb",
"source_path": "docs/adr/ADR-0007-rapp-declaration-contract.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RMASTER-ADR-0008",
"source_commit": "078515b5adc7ac742ffad1b20577fcf88400acbb",
"source_path": "docs/adr/ADR-0008-private-by-default-exposure.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ACT-ADR-001",
"source_commit": "fd84f2b6518ff17509930499099ec2a6692d088c",
"source_path": "docs/adr/adr-001-event-bridge-architecture.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ACT-ADR-002",
"source_commit": "fd84f2b6518ff17509930499099ec2a6692d088c",
"source_path": "docs/adr/adr-002-definition-format.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ACT-ADR-003",
"source_commit": "fd84f2b6518ff17509930499099ec2a6692d088c",
"source_path": "docs/adr/adr-003-rule-instruction-model.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ACT-ADR-004",
"source_commit": "fd84f2b6518ff17509930499099ec2a6692d088c",
"source_path": "docs/adr/adr-004-producer-trust-boundary.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ACT-ADR-005",
"source_commit": "fd84f2b6518ff17509930499099ec2a6692d088c",
"source_path": "docs/adr/adr-005-ops-runs-vs-dev-work-records.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ops-warden-adr-0001",
"source_commit": "eaabb4216186f4fee2d830376a381740b140087c",
"source_path": "docs/adr/ADR-0001-catalog-is-a-pointer-layer.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ops-warden-adr-0002",
"source_commit": "eaabb4216186f4fee2d830376a381740b140087c",
"source_path": "docs/adr/ADR-0002-conduit-not-broker.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ops-warden-adr-0003",
"source_commit": "eaabb4216186f4fee2d830376a381740b140087c",
"source_path": "docs/adr/ADR-0003-cover-gaps-never-silently-own-them.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ops-warden-adr-0004",
"source_commit": "eaabb4216186f4fee2d830376a381740b140087c",
"source_path": "docs/adr/ADR-0004-agent-read-boundary-on-high-risk-lanes.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ops-warden-adr-0005",
"source_commit": "eaabb4216186f4fee2d830376a381740b140087c",
"source_path": "docs/adr/ADR-0005-implement-narrowly-route-broadly.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "CUST-ADR-001",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/architecture/adr-001-workplans-as-repo-artefacts.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "CUST-ADR-002",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/architecture/adr-002-custodian-agent-runtime-design.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "CUST-ADR-003",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/architecture/adr-003-materialized-derived-state.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "CUST-ADR-004",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/architecture/adr-004-connectivity-first-network-posture.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "CUST-ADR-005",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/architecture/adr-005-cross-repo-workplans-project-repos.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "CUST-ADR-006",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/architecture/adr-006-canon-federation-concept-ownership.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "CUST-ADR-007",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/architecture/adr-007-workplan-identity-and-repo-worker-topology.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "CUST-ADR-010",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/architecture/adr-010-hub-authority-and-local-cache-model.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "CUST-ADR-011",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/architecture/adr-011-federated-namespaces-and-reconciliation-limits.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RPLAT-ADR-0001",
"source_commit": "8c152d012a44664f51969f2cb3456e28a3a0e5ff",
"source_path": "docs/adr/ADR-0001-s3-platform-service-boundary.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RPLAT-ADR-0002",
"source_commit": "8c152d012a44664f51969f2cb3456e28a3a0e5ff",
"source_path": "docs/adr/ADR-0002-placement-policy-ownership.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RPLAT-ADR-0003",
"source_commit": "8c152d012a44664f51969f2cb3456e28a3a0e5ff",
"source_path": "docs/adr/ADR-0003-decisions-live-in-the-repo.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "netkingdom-iam-profile-v0.3",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "canon/standards/iam-profile_v0.3.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "NK-ADR-0006",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "docs/adr/ADR-0006-recursive-multi-tenant-identity-authorization.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "NK-ADR-0007",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "docs/adr/ADR-0007-security-orchestration-boundary.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "NK-ADR-0008",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "docs/adr/ADR-0008-object-storage-sts-credential-vending.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "NK-ADR-0010",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "docs/adr/ADR-0010-orchestration-vs-dependency-self-coherent-intent.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "NK-ADR-0011",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "docs/adr/ADR-0011-iam-profile-ownership-and-version-governance.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "NK-ADR-0012",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "docs/adr/ADR-0012-playbook-capability-contract-ownership.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "NK-ADR-0013",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "docs/adr/ADR-0013-tenant-onboarding-grouping-taxonomy.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "NK-ADR-0014",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "docs/adr/ADR-0014-tenant-capability-roles-and-tenant-engine-ownership.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "NK-ADR-0015",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "docs/adr/ADR-0015-netkingdom-railiance-workload-packaging-and-relational-platform.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RINFRA-ADR-0005",
"source_commit": "ef64e324b61e9aa9b9ed03aad7dd2101915057ca",
"source_path": "docs/adr/ADR-005-k3s-api-tunnel-only.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ACT-ADR-006",
"source_commit": "fd84f2b6518ff17509930499099ec2a6692d088c",
"source_path": "docs/adr/adr-006-glas-profile-execution.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ACT-ADR-007",
"source_commit": "fd84f2b6518ff17509930499099ec2a6692d088c",
"source_path": "docs/adr/adr-007-bounded-operations.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ops-warden-adr-0007",
"source_commit": "eaabb4216186f4fee2d830376a381740b140087c",
"source_path": "docs/adr/ADR-0007-build-stage-stops-at-credential-disclosure.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ops-warden-adr-0008",
"source_commit": "eaabb4216186f4fee2d830376a381740b140087c",
"source_path": "docs/adr/ADR-0008-grade-the-path-not-the-field.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ops-warden-adr-0009",
"source_commit": "eaabb4216186f4fee2d830376a381740b140087c",
"source_path": "docs/adr/ADR-0009-adopt-security-zones-as-a-consumer.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "ops-warden-adr-0010",
"source_commit": "eaabb4216186f4fee2d830376a381740b140087c",
"source_path": "docs/adr/ADR-0010-ops-warden-is-staff.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RMASTER-ADR-0009",
"source_commit": "078515b5adc7ac742ffad1b20577fcf88400acbb",
"source_path": "docs/adr/ADR-0009-netkingdom-security-layer-interaction.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "CUST-ADR-012",
"source_commit": "dcdec162d61398f0def4990957455d45a74a1b01",
"source_path": "canon/architecture/adr-012-projection-source-and-preliminary-overlay.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "netkingdom-posture-feedback-v0.1",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "canon/standards/posture-feedback_v0.1.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "netkingdom-security-layer-model-v0.7",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "canon/standards/security-layer-model_v0.7.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "netkingdom-security-layer-model-v0.8",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "canon/standards/security-layer-model_v0.8.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "netkingdom-security-scenario-composition-v0.1",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "canon/standards/security-scenario-composition_v0.1.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "netkingdom-security-zones-v0.1",
"source_commit": "81fa1769e049a28e6c2db3d0be1eaacd0cc37537",
"source_path": "canon/standards/security-zones_v0.1.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RISK-F-0001",
"source_commit": "b5b80aafca83469f6eabe5860c1265f39a147cbe",
"source_path": "findings/RISK-F-0001-flex-auth-unauthenticated-check.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RISK-F-0008",
"source_commit": "b5b80aafca83469f6eabe5860c1265f39a147cbe",
"source_path": "findings/RISK-F-0008-audit-retention-legal-basis-assumed.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RISK-METHOD-SEVERITY",
"source_commit": "b5b80aafca83469f6eabe5860c1265f39a147cbe",
"source_path": "docs/method/severity.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RISK-METHOD-DISCLOSURE",
"source_commit": "b5b80aafca83469f6eabe5860c1265f39a147cbe",
"source_path": "docs/method/disclosure.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RISK-METHOD-REVIEW",
"source_commit": "b5b80aafca83469f6eabe5860c1265f39a147cbe",
"source_path": "docs/method/review.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RISK-METHOD-VERIFICATION",
"source_commit": "b5b80aafca83469f6eabe5860c1265f39a147cbe",
"source_path": "docs/method/verification.md",
"git_object_available": true,
"exact_source_hash_matches": true
},
{
"id": "RISK-METHOD-DEPENDENCIES",
"source_commit": "b5b80aafca83469f6eabe5860c1265f39a147cbe",
"source_path": "docs/method/dependencies.md",
"git_object_available": true,
"exact_source_hash_matches": true
}
]