Validate accepted security layer v0.8 owner declaration

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade

scripts/check_layer_conformance.py

@@ -60,14 +60,16 @@ DECISION_SURFACE = re.compile(
 LAYER_VOCABULARY = {"taxonomy", "tooling", "engine", "staff"}
 EXPECTED_LAYER = "engine"
 
-# The accepted text and rulings enforced by this run (GH-DEC-2026-021 §2).
-# Update together with the reference detector when the accepted text changes.
+# Accepted v0.8 publication; version provenance belongs to this run, never
+# the standing layer declaration (§11). Exact publisher artifact is retained
+# in net-kingdom/docs/security-layer-v0.8-acceptance.md.
 VALIDATED_AGAINST = (
-    "net-kingdom/canon/standards/security-layer-model_v0.7.md (net-kingdom@66dc491) "
-    "as amended by GH-DEC-2026-017, GH-DEC-2026-020 and GH-DEC-2026-021 "
-    "(A9-A13, A12 r3; gate-house@39d9287)"
+    "net-kingdom/canon/standards/security-layer-model_v0.8.md "
+    "(accepted; sha256:3d8298560069ef471fba28d2b1245fb2309328f231dad1a667cdf0ce5a5a7c8b)"
 )
+
 SCOPE = (
+    "single repository secrets-engine (catalogued in §4); "
     "declaration = INTENT.md frontmatter + layer.yaml (every key and value); "
     "source = src/secrets_engine/**/*.py; "
     "not reached by A12: pep-stance.yaml, evidence-classification.yaml"
@@ -109,7 +111,8 @@ def find_version_pins(node, where: str = "", identity: bool = False) -> list[str
 
 def _fold(value: object) -> str:
     """ASCII case-fold, per §3 as amended: two spellings of a token are one token."""
-    return str(value).strip().encode("ascii", "ignore").decode().lower()
+    return str(value).strip().translate(str.maketrans(
+        "ABCDEFGHIJKLMNOPQRSTUVWXYZ", "abcdefghijklmnopqrstuvwxyz"))
 
 
 def _no_standard_version(where: str, data: dict) -> None: