coulomb/risk-nexus
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Keep RISK-F-0015 open after the 0.2.6 two-case rerun.

Browse source 
Zones now names zone-engine for Codex, Claude, and Grok. Model-switch names
glas-harness rather than the fixture role session-owner. The rerun is not a
full corpus, and EMERGENT-WP-0002-T07 has not accepted it.

Assistant: grok
Assistant-Session: 01a10286-9185-7bb2-b411-89cf6ab4c0c6
This commit is contained in:
tegwick 2026-10-03 22:48:12 +02:00
parent f02682b3a2
commit 0022d10aa7
1 changed files with 28 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

30
findings/RISK-F-0015-emergent-claude-owner-routing.md
View file

@ -23,8 +23,8 @@ fidelity_modifier: false
production_rescore: false
disclosure: public
escalation: none
last_checked: "2026-10-03T19:12:04Z"
next_check: "2026-10-03T19:12:04Z"
last_checked: "2026-10-03T20:47:08Z"
next_check: "2026-10-03T20:47:08Z"
cadence: instant
clean_streak: 0
checked_by: "grok/risk-nexus"
@ -212,3 +212,29 @@ met.
- **2026-10-03** — filed and graded from reporter evidence and owner tracking.
Initial filing/movement; cadence remains instant, with no clean rung earned.
- **2026-10-03** — not clean: 0.2.4 Claude zones route is zone-engine; model-switch is delegator, not fixture session-owner, and omits glas-harness. T07 still wait and has not accepted. Stays open. Cadence instant → instant; checked again immediately.
- **2026-10-03** — not clean: sealed 0.2.6 two-case rerun has Codex, Claude, and Grok name zone-engine for zones and glas-harness for model-switch. The fixture role label session-owner is still unused. The rerun is not a full corpus and T07 has not accepted it. Stays open. Cadence instant → instant.
## Review — 2026-10-03: sealed knowledge 0.2.6 two-case rerun
Status stays `open`. The closure condition is not met.
The rerun is Codex, Claude, and Grok on `zones` and `model-switch` only,
package 0.2.6 digest
`8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02`,
commit `f65d0e64bc710eafb1dac4dd64b05516493d8c31`. Evidence is
`emergent-security/docs/evidence/2026-10-03-026-route-rerun.md`. Each review
is an implementing Grok session, not an independent Whitehat principal.
Zones: all three routes are `zone-engine`. Each denies a live authorization
endpoint. Grok no longer names `pep-owner` for this question.
Model-switch: all three routes are `glas-harness`, not fixture
`session-owner`, and not the 0.2.4 `delegator` label. Each says the earlier
receipt carries no authority and requires a reload. Claude's sources are
`glas-harness` only. Codex adds `emergent-security`. Grok also adds
`access-engine`.
Both closure conjuncts remain unmet. The fixture role label is not the
recorded route, the corpus is two cases, and `EMERGENT-WP-0002-T07` is still
`wait`. Severity stays low `I1` × `L3`. Disclosure stays `public`.
Escalation stays `none`.