Record identity migration and ready counterparty work

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a070b5-4994-7271-bd8b-7c3dbcedec4b

WORK-RECORDS.md

@@ -13,8 +13,8 @@
 | task | CFED-WP-0001-T02 | done | — | workplans/CFED-WP-0001-foundation.md |
 | task | CFED-WP-0001-T03 | done | — | workplans/CFED-WP-0001-foundation.md |
 | task | CFED-WP-0001-T04 | done | — | workplans/CFED-WP-0001-foundation.md |
-| task | CFED-WP-0001-T05 | todo | — | workplans/CFED-WP-0001-foundation.md |
+| task | CFED-WP-0001-T05 | done | — | workplans/CFED-WP-0001-foundation.md |
-| task | CFED-WP-0001-T06 | wait | — | workplans/CFED-WP-0001-foundation.md |
+| task | CFED-WP-0001-T06 | todo | — | workplans/CFED-WP-0001-foundation.md |
 | task | CFED-WP-0001-T07 | wait | — | workplans/CFED-WP-0001-foundation.md |
 | task | CFED-WP-0001-T08 | wait | — | workplans/CFED-WP-0001-foundation.md |
 | task | CFED-WP-0001-T09 | wait | — | workplans/CFED-WP-0001-foundation.md |

docs/evidence/2026-09-05-identity-model.md

@@ -0,0 +1,47 @@
+# Identity model migration — 2026-09-05
+
+Native INFO-WP-0021 implements CFED-WP-0001-T05. Draft itc-ident 0.1.0 covers
+exactly the 23 identity-owned concepts in the federation ledger; User and
+Subscriber remain convenience mappings. P1–P13 are adapted to accepted imports
+and the Family/Household distinction. Commerce P14/P15 remain with T06.
+
+Destination review resolves Delegation by executing ADR-006 decision 4: the
+donor's bounded authority relation and Organization's bounded responsibility/
+authority definition are consolidated under identity's Delegation Relationship.
+The compatibility name Delegation and Organization section anchor remain as an
+import. Actor, Responsibility and Authority stay in Organization. No accepted
+ledger owner is changed, so no ADR amendment is needed. Information Space's
+generic Identifier similarly becomes an import; its artifact conventions stay.
+
+Identity defines no imported organization/access/evidence concept. Profile is
+qualified against Observability and canon application profiles. Relationship is
+scoped to the identity taxonomy. Governance and identity carry reciprocal
+assurance disambiguation. Access Control now names the identity owner explicitly.
+
+A complete artifact graph reveals reciprocal model imports. The existing
+zero-cycle check treats these as inconsistent even though the concept ownership
+is disjoint. Native validation now supports an explicit exact-edge review: the
+five internal `uses` edges between Identity, Organization and Access Control,
+including Access Control's existing Organization import. Raw metrics and graph
+edges are preserved. Added edges/types/members, unrelated cycles or a missing
+boundary rationale do not qualify for the exception. Focused regression cases
+exercise those failures. This is a documented exception to model-document
+acyclicity, not a relaxation of concept ownership.
+
+All 34 protected seeds and finished workplans match the adjacent SHA-256 snapshot.
+The donor corpus is unchanged. Model links resolve and ledger coverage is exact.
+T06 remains the next commerce implementation; T07/T08 retain provenance and
+interface-card work; T12/T13 retain social collective/Family work. No consumer
+adoption or stable model promotion is claimed.
+
+Reproduce from InfoTechCanon: `make check` and `git diff --check`.
+Final validation and publication receipts are recorded below.
+
+Final verification: **45 tests pass**, generated artifacts are current, canon
+validation passes with the explicit reviewed model-import exception, and the
+small-saas profile passes. Native implementation published at `361c944`.
+INFO-WP-0021 UUID: `0e35415e-af27-5710-9d18-25769dc71ec6`; all three tasks done.
+State Hub decision `c14abce1-4241-4bbc-986a-8fe46f0a3342` records the implementation
+review and its rationale. Both required consistency runs passed with no automation
+errors or assessment failures; existing classification/prefix advisories remain.
+Progress logged for native and project workplans. T06 is now todo.

docs/evidence/2026-09-05-identity-protected-hashes.json

@@ -0,0 +1,36 @@
+{
+  "seeds/InfoTechCanonObservabilityModel_RC1_seed.md": "4f02caf13b4910b3a82e767ba09429e2cc84a39f607060f363b78ce07da82907",
+  "seeds/InfoTechCanonNetworkModel_RC1_seed.md": "cc337dbcd7129121ce20f118d12754bd1be012a36c1944dc479d3c527750c6af",
+  "seeds/InfoTechCanonTaggingStandard_RC1_seed.md": "852c8d9dcae4d75e1ac880910e0039d733abf1313e1a1cf9cfaf9cc811694c66",
+  "seeds/InfoTechCanonDataModel_RC1_seed.md": "0e9a27068787f663d8abf3677ff75500b9d3db85eaf1cb7aa7bafb09e19c8ddf",
+  "seeds/InfoTechCanonGovernanceModel_RC1_seed.md": "d7b7958fa184c6079aefe19858b63bf9f199bd55dac3824ff7e123e29e11a00b",
+  "seeds/InfoTechCanonTaskModel_RC1_seed.md": "e3258fe8f731aea71236cd96c74da4a511688c143d95aaae1a35b9537842003c",
+  "seeds/InfoTechCanonSecurityModel_RC1_seed.md": "8d90cabdc8ffde0151720f0e7298e9e1650bb9e1cbd8bd451b8393fcb341f0a5",
+  "seeds/InfoTechCanonKernelMap_RC1.md": "ab3b9d0b045bf37cb04662f024e3a5de41469f17db9ef1ec0fe71e7087d553bf",
+  "seeds/InfoTechCanonCore_RC1_seed.md": "1abb568cebbd40ebfe6dd1858c17d6843d293a0b17359bf6e0e954c3fd685bbc",
+  "seeds/InfoTechCanonCaringAccessGovernanceStandard.md": "9e0da9a5da56e9b15f8ec8777eed2640653be32e587fcc2889475db57a9ce379",
+  "seeds/InfoTechCanonInformationSpaceModel_RC1_seed.md": "fdc662bc9f00004ab3d4409e83bb2f1bc8dc6ec369a9907258f0410460b42aa3",
+  "seeds/InfoTechCanonOrganizationModel_RC1_seed.md": "2b16b6163cf295c1f20f1fb88fdb8c35224c4f416247b6b94d3d653983bd10e2",
+  "seeds/InfoTechCanonLandscapeModel_RC1_seed.md": "885d873e955b5df46505eadd993da0e7a35d33abb84a7c8f15e2e5f4e3535866",
+  "seeds/InfoTechCanonAccessControlModel_RC1_seed.md": "179b96e6b676847cb2766f5ee0097c59017039919a589695c106e912cedd4df1",
+  "seeds/InfoTechCanonDevSecOpsModel_RC1_seed.md": "ec6d6c340a80c27f60bca3fa3e83fccdce7bc1a539526c6c392c67363ebd4870",
+  "workplans/ITC-WP-0006-purpose-and-demand-model.md": "794785b086f8aaa5f43cf3b2ff85a50e20ab128f8d8a82099a62522832021a23",
+  "workplans/ITC-WP-0018-emission-cadence-contract.md": "51871d33278903a70453830f338de4eb51455d30234c3ee0d01691bc7ba184ce",
+  "workplans/ITC-WP-0010-caring-kubernetes-rbac-benchmark.md": "1f25d4299476f3c0d7ceb1f25d2b6f1b85f58fb7c0b250be9b7cb2adc0be1cec",
+  "workplans/ITC-WP-0017-agentic-drives-functional.md": "71775ec71365ac9f2b00919ebf751b94fe7a8969ea4b89f8381f560648afc3f1",
+  "workplans/ITC-WP-0014-capability-model-consolidation.md": "f6d918cc9654c91b89dedf71d86415aa7ea05c6456e599331612ebf6939cb5f5",
+  "workplans/ITC-WP-0009-repo-scoping-comparison-and-extension.md": "e2aff82ff9abdb8c82869c247ebbd5b304a6cdc8944728d9890d5fcaf85ed389",
+  "workplans/ITC-WP-0012-canonical-repository-layout-standard.md": "a66a6c1ce7ccd0bbe628cf29c5d736d212ab10596ac963ed016d4342c8344e9e",
+  "workplans/ITC-WP-0004-small-saas-profile-proof.md": "661ed363fcd40f79702441f092c872480bda236bb17134451ed589b38f0d7a72",
+  "workplans/ITC-WP-0013-attribute-value-type-catalog.md": "a35cfd79b3c3e453c44ec7c20d1304611a8cd80e354128301a9f0766a1b21fe9",
+  "workplans/ITC-WP-0001-infospace-scaffold-and-seed-placement.md": "0cdd0ff83f7e5320a957bf9afdd4e41bad0d62defc669bc0928ab59a46f50ce1",
+  "workplans/ITC-WP-0005-retrieval-agent-briefs-and-interface-cards.md": "2c4eeadef3c35cdc05ffba424861d147b60a3fca8d8722194c2f7befac6c4fd9",
+  "workplans/ITC-WP-0011-canon-consumer-alignment-review-kit.md": "aad2fcaeb2114cda2cd76d453280deaffb83a0af013d6b782f58fb6b7601cbca",
+  "workplans/ITC-WP-0015-evidence-basis.md": "04b9a676e45498fd77a6c5e31d6beb1add378cb9b9f54b3834b4f2470a1d44e3",
+  "workplans/ITC-WP-0002-service-surface-cli-json-api.md": "770035e6d464a50e8cdf5eba6f920a9efc3fd12a0311e7de5c33fd747ece9253",
+  "workplans/ITC-WP-0008-railiance-fabric-conformance-support.md": "a7feaf5f63bcc2e43f00c01d4ca566d2a1ec58f441cf889c716db3361d7fe4ae",
+  "workplans/ITC-WP-0003-validation-indexes-and-generated-views.md": "03d3aa9dd74edcb39e321a7b98051296a058acc37010c59941a4bb4b3feb1b3d",
+  "workplans/ITC-WP-0016-practice-pattern-language.md": "b1981ebbefb71e8a9cc58c5dc7c1a28102bf040735fc76c525edd1fa5706625b",
+  "workplans/ITC-WP-0007-user-engine-evaluation-readiness.md": "4b916d8548980308a2003007cf37e26da7ba7428073dadf433f53371679322e5",
+  "workplans/INFO-WP-0020-shared-evidence-model.md": "ccf9ae8f8838d3062e6684bd79c4693b49fb08517b9dc2da6d17d4c3e997641e"
+}

ledger/concept-ownership.json

@@ -6,7 +6,7 @@
   "model_registry": {
     "itc-ident": {
       "canon": "info-tech-canon",
-      "state": "planned"
+      "state": "draft 0.1.0 registered; Delegation and Identifier imports reconciled by T05"
     },
     "itc-org": {
       "canon": "info-tech-canon",

workplans/CFED-WP-0001-foundation.md

@@ -196,7 +196,7 @@ explicit provenance exceptions. T11 evidence is the next upstream prerequisite.
 
 ```task
 id: CFED-WP-0001-T05
-status: todo
+status: done
 priority: high
 state_hub_task_id: "700a0c89-1b17-5993-a76e-7ef22b5847d9"
 ```
@@ -222,11 +222,20 @@ Resolve through destination canon review; amend ADR-006 if ownership changes.
 Verification for gate **G4**: `itc-ident` defines no concept owned by `itc-org`
 or `itc-access`.
 
+**Result (2026-09-05):** [INFO-WP-0021](../../info-tech-canon/workplans/INFO-WP-0021-identity-model.md)
+registers draft itc-ident 0.1.0 with exact ledger coverage and upstream imports.
+Destination review consolidates Delegation into the accepted identity owner;
+Organization retains an import. Identifier follows the same transfer from
+Information Space. No ADR owner changes. [Evidence](../docs/evidence/2026-09-05-identity-model.md)
+records 45 passing tests, 34 unchanged protected files, and the explicit exact
+reciprocal-import cycle review. G4 passes; T06 is now todo.
+
+
 ## Land the counterparty model in CommerceCanon
 
 ```task
 id: CFED-WP-0001-T06
-status: wait
+status: todo
 priority: high
 state_hub_task_id: "6bdb96c9-0524-5d3c-89e0-7c91df7ee56c"
 ```