coulomb/risk-nexus
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Typed, dated, defaulted waits — and cut the four-hop chain

Browse source 
The register had nine waits in four days, one four hops deep: F-0003's
embargo waited on F-0009, which waited on railiance-platform, which
waited on live OpenBao verification, which waited on a credential nobody
has. No single link was wrong, which is why it needed a rule.

docs/method/dependencies.md: the register never waits to decide, it
decides and revises. Every wait carries who, what, since, what it would
change, what happens if nobody answers, and the date that default
applies. Depth one — a record never waits on a record that is itself
waiting. Defaults are dates and are pessimistic: silence costs the grade
the evidence supports rather than buying a softer one, and owners are
told the default in advance because a default nobody was warned about is
an ambush.

Applied: F-0009's embargo now lifts on railiance-platform reporting
coverage, with live verification as a refinement rather than a condition,
cutting the F-0003 chain from four hops to two. All eight open waits are
typed with defaults. make check reports them with age, owner and default
date, flags defaults come due, and catches depth-two violations.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
tegwick 2026-08-20 22:34:56 +02:00
parent 56b8d61583
commit d5147bfaea
11 changed files with 220 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

13
findings/RISK-F-0008-audit-retention-legal-basis-assumed.md
View file

@ -36,6 +36,19 @@ last_checked: "2026-08-20T10:02:41Z"
next_check: "2026-08-20T10:02:41Z"
cadence: instant
clean_streak: 0
waiting_on:
- who: audit-core
what: "does a keyed commitment restore erasability without breaking chain verification; what is the platform-pg co-residency horizon"
since: "2026-08-20"
would_change: "a working keyed commitment narrows RISK-REG-0001 to retained-by-obligation categories only"
default: "encrypt-then-hash recorded as the only known route, and the retention period recorded as unstateable"
default_at: "2026-11-17"
- who: the-custodian
what: "rule the trigger list for buying an external determination"
since: "2026-08-19"
would_change: "fixes when the estate stops running on an assumption"
default: "the assumption is recorded in the register as an assumption"
default_at: "2026-11-17"
graded_by: risk-nexus
ruling: RISK-RULING-2026-08-19-C
---