coulomb/risk-nexus
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Keep review obligations visible and reconcile owner evidence (RISK-WP-0006, RISK-WP-0007)

Browse source 
check_all runs every check stage even when one fails; malformed dates are
reported rather than aborting; accepted findings and closure evidence are
shown; defer requires a valid future date. Adds SCOPE.md, the scope
assessment, the open-findings source review and a unittest suite. Stops
tracking __pycache__.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 6903@bnt-lap001
Assistant-Session: 8319e8a8-ffa6-4eb3-b8bf-b29945628f89
This commit is contained in:
tegwick 2026-09-22 07:56:58 +02:00
parent 29f50d5143
commit bbbede5f47
25 changed files with 1007 additions and 43 deletions
Download patch file Download diff file Expand all files Collapse all files

32
findings/RISK-F-0011-qonto-audit-deny-stream-completeness.md
View file

@ -12,7 +12,9 @@ date_filed: "2026-09-02"
system: qonto-assistant
environment: production
fix_owner: qonto-assistant
fix_tracking: unset
fix_tracking: QONTO-WP-0005 / KG-WP-0005-T03
closure_condition: "authorized deployed-instance capture accepted by kings-guard: heartbeat timing, sequence continuity and same-instance reconciliation"
verification: RISK-V-0003
# Graded by risk-nexus 2026-09-02 — docs/rulings/2026-09-02-qonto-deny-stream.md
severity: medium
severity_at_production: medium
@ -29,20 +31,20 @@ revision: "graded-1"
last_reviewed: "2026-09-02"
review_interval: 6m
escalation: none
last_checked: "2026-09-02T07:20:00Z"
next_check: "2026-09-02T07:20:00Z"
last_checked: "2026-09-05T00:05:51Z"
next_check: "2026-09-05T00:05:51Z"
cadence: instant
clean_streak: 0
waiting_on:
- who: qonto-assistant
what: "publish a heartbeat or emission-cadence declaration and a reconciliation view for the audit.deny stream, or reject that obligation"
what: "supply runtime-owner deployed-instance capture for kings-guard acceptance under KG-WP-0005-T03; source cadence and reconciliation now exist"
since: "2026-09-02"
would_change: "a published cadence plus a reconciliation view would let a later observation support completeness; a rejection keeps the grade and records that estate observation must not treat the stream as complete"
default: "the medium grade stands; missing cadence is recorded as a stalled remediation, and observation remains staffed with completeness pending"
would_change: "accepted deployed-instance evidence supports bounded stream completeness and permits closure; source-only evidence keeps the finding open"
default: "the medium grade stands; missing deployed acceptance is recorded as a stalled remediation, and observation remains staffed with completeness pending"
default_at: "2026-09-16"
graded_by: risk-nexus
ruling: RISK-RULING-2026-09-02-A
checked_by: "grok/risk-nexus"
checked_by: "codex/risk-nexus"
---
# RISK-F-0011 — qonto-assistant audit.deny stream completeness is not established
@ -141,6 +143,22 @@ wait makes that last statement expire.
Reasoning: `docs/rulings/2026-09-02-qonto-deny-stream.md`.
## Source remediation reconciled — 2026-09-05
The missing-source statements above describe intake, not the current checkout.
QONTO-WP-0005 is finished: cadence, heartbeat lifecycle, instance/sequence fields
and an identity-checked reconciliation view now exist. King's Guard's local
source-path checks are recorded complete, but KG-WP-0005-T03 waits for an
authorized deployed capture. Notice `c6442eef-34fc-46a7-9639-10f2cd6120fc`
explicitly requests independent deployed-stream acceptance before closure.
[RISK-V-0003](../docs/verifications/2026-09-05-open-findings-source-review.md)
records the inspected evidence and bounded acceptance requirements. Status
remains open, medium, public, no escalation: deployed completeness is still
unknown, with no evidence of suppression or an authorization bypass. The
2026-09-16 default is retained, now describing the actual remaining obligation.
## Reviews
- **2026-09-02** — graded from the Gate House intake, the named conformance review, and a current-source check of qonto-assistant. Local lockout is in-process; the emitted deny stream still has no cadence or reconciliation view. Cadence starts at instant.
- **2026-09-05** — not clean: Reviewed owner notice, cadence/logger/endpoint and KG-WP-0005; source remediation exists, deployed-instance acceptance remains pending under KG-WP-0005-T03. See RISK-V-0003. Cadence instant → instant; checked again immediately.