feat(RMASTER-WP-0026): declare Taxonomy layer and consume NetKingdom §20

Add layer.yaml, RMASTER-ADR-0009, the consumption contract, and a tracked
non-answer for the five §20.3 questions. Split admission, exposure, and
authorization without renaming schema fields. Finish the workplan.

Assistant: grok
Assistant-Session: 01a04c9f-cd6b-7741-bce0-f1d9d1b3c3bc
This commit is contained in:
codex 2026-08-29 12:52:35 +02:00
parent 2ec0b93333
commit a0c35b7438
13 changed files with 373 additions and 43 deletions

View file

@ -14,7 +14,8 @@ requires explicit readiness evidence.
This contract does not decide who may reach a listener. That is
[`ADR-0008`](adr/ADR-0008-private-by-default-exposure.md). A
`production-approved` binding is still private until an exposure grant
exists.
exists. It also does not decide whether an actor may perform an action.
That is `access-engine` ([`ADR-0009`](adr/ADR-0009-netkingdom-security-layer-interaction.md)).
## Admission States