coulomb/risk-nexus
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Publication handover and inbox-first as residuals of RISK-WP-0001

Browse source 
Also records in T06 that the first grading ran before the inbox was read.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
tegwick 2026-08-19 23:41:07 +02:00
parent 7d6ded5743
commit 76a96fcf44
1 changed files with 14 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

15
workplans/RISK-WP-0001-make-the-register-decidable.md
View file

@ -250,7 +250,9 @@ message to that repo, not as an edit in it.
**Acceptance:** no `unset` field remains in `findings/`.
Completed 2026-08-19. `docs/rulings/2026-08-19-first-grading.md`. `RISK-F-0001` critical, embargoed, escalated on trigger 1 — the INTENT question about whether governing access counts as exposure is answered yes. `RISK-F-0002` medium today with a `high` constraint on `RISK-F-0001`'s remediation, filed as a **peer**, and escalated only on the ordering, against the reporter's own reading. `RISK-F-0003` high, embargoed, no escalation. No `unset` field remains.
Completed 2026-08-19, in three rounds — the third after reading the inbox, which is recorded in `docs/rulings/2026-08-19-third-grading.md` as this repo's own defect: `RISK-F-0001` was graded `critical` and escalated while two messages that changed the grade sat unread. Corrected to `high` and closed `fixed` the same day; both escalations withdrawn.
`docs/rulings/2026-08-19-first-grading.md`. `RISK-F-0001` critical, embargoed, escalated on trigger 1 — the INTENT question about whether governing access counts as exposure is answered yes. `RISK-F-0002` medium today with a `high` constraint on `RISK-F-0001`'s remediation, filed as a **peer**, and escalated only on the ordering, against the reporter's own reading. `RISK-F-0003` high, embargoed, no escalation. No `unset` field remains.
### T07 — Rule on what is waiting outside the register
@ -336,6 +338,17 @@ notes out.
## Residuals
- **Publication handover.** `RISK-F-0001` (fixed) and `RISK-F-0008` (a
question, published as a question) are `disclosure: public` with
`publication: pending-handover`. Handing them to `policy-nexus` under its
publication contract is the first item of the next workplan; nothing in this
one publishes.
- **Inbox before grading.** Added to `docs/method/review.md` as question zero
after this workplan graded `RISK-F-0001` `critical` while its fix notice sat
unread. The mechanism is a habit, not a check — if it slips again, the answer
is a check in `make check` against message timestamps, and that is a task,
not a residual.
- Publication of these instruments through `policy-nexus` is a later workplan,
and only if T02 concludes anything here should be public.
- Regulatory intake — the second half of this repo's remit — is untouched here.