policy-nexus/workplans/PNEX-WP-0005-security-layer-v08-publication.md

id	type	title	domain	repo	status	owner	topic_slug	created	updated	flavor	depends_on
PNEX-WP-0005	workplan	Publish the accepted security-layer v0.8 guardrails	infotech	policy-nexus	active	codex	custodian	2026-10-11	2026-10-11	implementation

Native human memo infd-20261010-security-layer-v08 revision2 accepted exact proposed source103a635f; confirmed approval8432d0dc. NetKingdom accepted artifact 3d829856 is committed in0e17d956ab45f8c4a0163b70749490c414e54e67. This is new requested publication demand, not a residual or duplicate checker migration. GH-WP-0004-T11 is source-complete; hosting is this owner's task.

Register accepted source and preserve history

id: PNEX-WP-0005-T01
status: done
priority: high

Register accepted-1 v0.8 and superseded currentv0.7 notice; retain immutable historicalv0.7 source/page bytes. Full local73document build succeeded. Inventory refresh adds13 previously unreviewed discovered records as metadata-pending, changes no existing disposition and publishes none of those13. Exact memo/source and native acceptance receipts stay with NetKingdom and Custodian evidence.

Produce a verified source-bound publisher candidate

id: PNEX-WP-0005-T02
status: progress
priority: high

Retain immutable fetched source revision lock, content/manifest hashes and full release verification. Local build alone is not a served publication. Dated Custodian ADR002/004 technical annotations preserve the original decisions and author/date; original served accepted-1 pages are retained. All72 served immutable pages and their exact owner source commits are verified. Independent review caught and fixed overwrite/provenance/routing defects;52actualowner tests pass with the CI source-root environment. The first CI run failed a fixture environment leak; repaired exactsource CI is being observed, not presumed ready. Publish/verify the candidate through documented owner CI; retain any failed checks and exact release output before proposing native activation.

Serve and verify the accepted guardrails

id: PNEX-WP-0005-T03
status: todo
priority: high

Prepare exact hosting revision/image and rollback, native resource/headroom preflight and source-bound deployment diff. Obtain required scoped supervisor disposition if hosting activation is outside the existing source-publication approval. Execute through owner path; independently verify v0.8 accepted page, old route supersession notice and immutableoldrevision survival. No permission or PDP/runtime capability is introduced by publishing static guardrails.

2026-10-11 record identity correction: initial new-plan ID PNEX-WP-0004 collided with the finished fleet-standards/source-auth plan. This new demand is PNEX-WP-0005; older plan/tasks/UUIDs remain unchanged. The failed create receipt is preserved; no historical task or workstream is retired to hide it.