d7a95a2d50
INTENT.md governs; layer.yaml is marked derived from it. standard_version is removed from both. The value Taxonomy is unchanged: the ruling closes the vocabulary at four tokens and Taxonomy is one of them. ADR-0010 amended by revision (accepted-2). No checker in this repository reads the declaration. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 63291@bnt-lap001 Assistant-Session: 8bd77868-ca68-4f49-bb1e-d539ecc0d703
63 lines
2.5 KiB
YAML
63 lines
2.5 KiB
YAML
# railiance-master — NetKingdom security layer declaration
|
|
#
|
|
# Framework: net-kingdom/canon/standards/security-layer-model_v0.7.md
|
|
# Companion: net-kingdom/SECURITY-COMPANION.md v0.2
|
|
# Assent: docs/adr/ADR-0009-netkingdom-security-layer-interaction.md
|
|
#
|
|
# §11 requires a machine-readable declaration: prose cannot distinguish a
|
|
# declaration from a transcribed review. Form adapted from the kings-guard
|
|
# no-contact shape offered under §11.
|
|
#
|
|
# This file is DERIVED. The declaration is the `layer:` key in INTENT.md
|
|
# frontmatter, which governs (gate-house GH-DEC-2026-017 §1, amendment A11).
|
|
# The two must agree after ASCII case-folding; a disagreement is a finding.
|
|
# No standard version is carried here (GH-DEC-2026-017 §5, amendment A12).
|
|
#
|
|
# railiance-master is outside the NetKingdom §4 catalog. This declaration is
|
|
# voluntary and outside catalog scope (GH-DEC-2026-017 §4).
|
|
#
|
|
# This repository produces terms, family contracts, and standards for
|
|
# workload operations. It owns no runtime position and no state another
|
|
# layer depends on. It is Taxonomy of Railiance operations, not a row in
|
|
# the NetKingdom §4 security-estate catalog.
|
|
#
|
|
# It is not PEP-shaped: nothing here causes a protected side effect, so
|
|
# there is no pep_stance path.
|
|
|
|
schema_version: "0.1"
|
|
framework: netkingdom-security-layer-model
|
|
derived: true
|
|
derived_from: INTENT.md
|
|
repository: railiance-master
|
|
layer: Taxonomy
|
|
declared_by: docs/adr/ADR-0009-netkingdom-security-layer-interaction.md
|
|
declared_at: "2026-08-29"
|
|
pep_shaped: false
|
|
|
|
catalog_entry:
|
|
note: >-
|
|
Not a NetKingdom §4 catalog row. This is Railiance operations Taxonomy,
|
|
not NetKingdom security Taxonomy. info-tech-canon remains ecosystem-wide
|
|
semantics; net-kingdom remains NetKingdom standards of record.
|
|
|
|
# §5 / §11: every direct contact with a Tooling-layer system (a §4 Tooling
|
|
# row). Empty is a claim: this Taxonomy home holds no OpenBao, key-cape,
|
|
# or cluster client.
|
|
tooling_contacts: []
|
|
|
|
# §11 requires non-Tooling clients to be recorded so the check is total.
|
|
non_tooling_clients:
|
|
- id: state-hub-work-records
|
|
target: state-hub
|
|
layer: not-catalogued
|
|
operation: "HTTP to the Custodian State Hub for work records and progress events"
|
|
write: true
|
|
note: >-
|
|
Outside §5 by the v0.5 scope rule: "Tooling-layer system" means a §4
|
|
Tooling row, and state-hub is not one. Recorded, not policed. Carries
|
|
no security authority and no secret payload.
|
|
|
|
declared_shapes:
|
|
"5.1": []
|
|
"5.2": []
|
|
"5.3": []
|