coulomb/risk-nexus
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

risk: complete Policy Nexus publication handover

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663
This commit is contained in:
tegwick 2026-09-01 01:54:09 +02:00
parent 96d06e320a
commit a13d954f85
6 changed files with 31 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

9
STATE.md
View file

@ -1,6 +1,6 @@
# STATE — risk-nexus
**Updated:** 2026-08-21 (second pass)
**Updated:** 2026-09-01
**Domain:** infotech · **Repo:** risk-nexus · **Owner:** the-custodian
## One-line posture
@ -15,7 +15,7 @@ question carries a default and a date, and the check cadence is scheduled on
| ID | Status | Notes |
| --- | --- | --- |
| `RISK-WP-0001` | **finished** | The four instruments, the index, the first grading |
| `RISK-WP-0002` | active | Publication handover — T01 with `policy-nexus` |
| `RISK-WP-0002` | **finished** | Two findings and five public method instruments handed to `policy-nexus` |
| `RISK-WP-0003` | **finished** | Regulatory intake; the legal policy set |
| `RISK-WP-0004` | **finished** | Running the register: cadence, verification, inbox-before-grading |
| `RISK-WP-0005` | **finished** | The seven gaps from `history/2026-08-21-intent-gap-analysis.md` |
@ -76,7 +76,6 @@ outcome.
| railiance-platform | deny-set coverage report (`F-0009`) | 2026-09-03 |
| tenant-engine | confirm/correct `events()`; fix tracking | 2026-09-03 |
| user-engine | tenant-boundary verification (`RISK-V-0002`) | 2026-09-03 |
| policy-nexus | publication entries for two findings + five method docs | 2026-09-17 |
| the-custodian | canon kinds packet | 2026-09-17 |
| railiance-platform | backup target, cost, demonstrated restore | 2026-09-18 |
| audit-core | is `may_read` false on every production credential | 2026-09-19 |
@ -101,8 +100,8 @@ statehub fix-consistency --repo risk-nexus
`RISK-F-0002`'s tracked records closed *before that finding was filed*.
- **Incident intake exists**, with `first_observed` starting the 72-hour clock
in `RISK-POL-0005` and escalation that is not batched.
- **External report still has no address** — proposed to `policy-nexus` and the
custodian, since a published surface is not this repo's to create.
- **Public records have permanent addresses** — two findings and five method
instruments publish through `policy-nexus`; this repo remains their source.
- **Coverage has a number:** `make coverage` — 7 of 117 registered repos have
ever appeared in a finding. The other 110 are unknown, not clean.